Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUDYRAKzaqzO1dY7vqOjiZd107Y.roa
File:                     KUDYRAKzaqzO1dY7vqOjiZd107Y.roa (raw, json)
Hash identifier:          lbeSwz8JztUw4WlDvZ6ACm/m/jJPgwhJ5Vs2pxEf9FQ=
Subject key identifier:   29:40:D8:44:02:B3:6A:AC:CE:D5:D6:3B:BE:A3:A3:89:97:75:D3:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUDYRAKzaqzO1dY7vqOjiZd107Y.roa
Signing time:             Wed 29 Sep 2021 02:49:01 +0000
ROA not before:           Wed 29 Sep 2021 02:49:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.194.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7534 (0x1d6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:49:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2940D84402B36AACCED5D63BBEA3A3899775D3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:73:0c:67:c2:16:40:93:2a:be:ac:78:04:
                    71:4c:5c:1d:21:e6:a7:08:0e:ad:38:94:ce:f0:83:
                    67:b9:69:6b:9c:4d:b9:d4:17:90:13:41:16:b7:cf:
                    14:e5:6a:99:07:8b:1e:4b:61:e4:15:65:f8:dd:0f:
                    c2:4a:61:2b:0d:e4:3e:ad:ed:ae:b4:66:5a:e9:cf:
                    1e:b1:cc:8b:b1:3d:d2:c8:4d:86:55:04:1d:ec:1b:
                    e1:fa:5d:b8:ae:8d:62:05:05:c6:4a:8f:17:33:18:
                    82:73:f2:d2:e2:eb:7e:73:92:bb:b2:40:7e:64:b4:
                    51:87:f9:e3:47:d1:b5:08:31:9a:96:db:82:f5:d8:
                    85:1e:95:44:e0:8b:f3:90:36:22:e4:1f:92:cd:b1:
                    c7:73:62:7c:a5:f2:b7:c0:b5:03:a9:70:82:3c:bb:
                    cb:40:95:47:21:dc:35:f3:0e:df:00:7b:ed:d9:3d:
                    dc:bd:f2:fb:f1:f1:e5:07:34:e4:41:a6:37:f6:3d:
                    99:42:9c:aa:dd:9e:86:e8:86:cd:a6:33:a4:a0:53:
                    9d:cd:c4:7d:e7:56:e4:44:d8:6f:3d:e0:e0:96:0a:
                    30:39:0d:a0:39:1e:cd:03:36:89:81:01:48:56:53:
                    23:ce:4b:22:d6:7a:a2:96:e0:82:71:03:9e:6b:21:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:40:D8:44:02:B3:6A:AC:CE:D5:D6:3B:BE:A3:A3:89:97:75:D3:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUDYRAKzaqzO1dY7vqOjiZd107Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:18:d9:46:a8:15:25:39:bc:a5:f1:e4:ed:0a:3e:b7:2f:e9:
         36:b7:bc:b5:13:b9:4b:9d:d0:ee:9c:f6:48:03:ad:9d:07:d3:
         21:a6:b2:84:bf:c9:49:bf:49:6c:24:4a:49:a9:4e:e3:68:bb:
         1f:be:ef:9c:32:c5:2e:88:b7:dd:df:04:b3:5b:8c:0a:b1:b9:
         75:45:5a:a7:d3:11:ba:9c:07:8b:cc:19:5b:20:82:9a:f1:19:
         57:74:1d:7a:7f:15:9c:ea:7f:aa:ac:ed:31:e3:8d:b0:2c:ad:
         e1:27:8b:23:94:69:27:a8:fd:de:57:03:33:51:70:09:94:bc:
         0a:0e:57:cf:ad:0c:91:60:07:4a:8a:2b:b6:51:29:20:5e:43:
         a5:8f:cd:ea:77:5e:97:c6:68:19:02:c0:70:b8:00:b5:ec:d2:
         c4:74:e1:bb:fb:a4:4c:f8:4c:c3:11:87:5a:cb:09:0c:4e:85:
         d3:6c:1f:43:52:8e:24:ec:2b:bd:4f:cf:4c:fd:35:18:8b:c9:
         1e:b4:30:1b:a7:2a:57:d8:33:93:47:d7:06:1b:d7:a1:1b:ae:
         67:67:72:17:c5:63:d3:67:2a:38:d2:b2:d4:20:98:7a:64:47:
         68:0d:73:47:ff:05:93:83:40:b0:d5:dd:7b:85:17:9f:68:0d:
         d4:b7:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----