Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KVGPkx6SavxMb1iHv0ogPiy5opM.roa
File:                     KVGPkx6SavxMb1iHv0ogPiy5opM.roa (raw, json)
Hash identifier:          F0Z2SuyUpkFx50hxJ8dE26uzBmxke6GF+IOnFRe2KPE=
Subject key identifier:   29:51:8F:93:1E:92:6A:FC:4C:6F:58:87:BF:4A:20:3E:2C:B9:A2:93
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A6A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KVGPkx6SavxMb1iHv0ogPiy5opM.roa
Signing time:             Wed 29 Sep 2021 02:45:19 +0000
ROA not before:           Wed 29 Sep 2021 02:45:19 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6762 (0x1a6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:19 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=29518F931E926AFC4C6F5887BF4A203E2CB9A293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:fd:57:ee:5b:c2:17:73:44:20:7a:1b:fa:
                    0b:80:1d:8c:7f:a9:35:d3:c2:84:10:c1:61:40:f7:
                    b7:db:2c:e4:41:8b:d7:7d:c7:95:a3:00:ae:d2:f0:
                    39:33:30:0a:58:a4:8a:91:d1:e6:e2:6e:75:bd:3c:
                    c3:15:8f:fa:48:61:9e:b8:3a:48:77:b6:f3:38:f4:
                    0b:da:d0:c7:44:5e:45:38:3d:6f:fc:e0:dc:5e:24:
                    61:5f:7f:40:d1:0d:f6:fb:40:82:be:16:14:9c:4f:
                    5a:05:dc:73:a2:88:f6:db:5d:ba:34:31:66:8d:6f:
                    f4:de:d3:0d:d2:8e:f1:b3:7d:66:b8:aa:da:bc:12:
                    b3:8a:dd:92:19:68:f0:2f:29:54:11:74:80:09:ca:
                    87:f6:4f:28:51:86:30:ee:47:9a:49:d7:0c:ed:9d:
                    54:8c:50:67:c3:f3:91:4e:b0:db:cd:f7:29:3f:2b:
                    f2:60:50:b6:6b:2c:d4:c7:a5:b0:8f:78:30:d2:0a:
                    59:b7:dd:12:85:4c:c2:42:9b:87:ec:08:aa:f5:70:
                    1a:81:dc:03:64:5f:59:17:ab:3d:ac:60:f1:57:d1:
                    f2:1a:7f:bf:d2:45:94:53:29:2c:6a:cb:da:14:b7:
                    3e:94:32:db:90:f5:9c:fc:fc:a2:d5:70:e1:2f:9c:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:51:8F:93:1E:92:6A:FC:4C:6F:58:87:BF:4A:20:3E:2C:B9:A2:93
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KVGPkx6SavxMb1iHv0ogPiy5opM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:fe:e1:cc:61:33:ba:25:3b:83:78:d7:77:52:cd:dc:ae:40:
         2a:ce:32:d1:26:4e:33:ae:a3:20:49:5d:61:b5:41:b1:ce:36:
         4e:18:ab:4a:88:c4:c7:60:3f:28:c0:eb:cb:25:b4:76:7e:d4:
         1b:a7:64:a3:0b:49:0e:73:ee:4e:fd:4f:db:bd:b6:cb:bd:9c:
         04:3a:29:a2:b4:d2:92:3c:61:e1:8b:41:8e:2e:78:c0:45:f8:
         b1:2e:9c:9e:6e:63:92:f4:e1:e1:72:51:3b:b7:eb:f3:81:df:
         3a:df:68:a2:ae:2b:b7:de:6c:15:af:bc:c0:6c:45:26:7c:ef:
         c5:d8:bd:a7:82:21:1e:7b:7a:d0:16:3d:e6:4c:91:06:7c:12:
         e2:7a:b8:ef:c6:cd:59:4d:1b:55:59:fb:7a:3b:b3:61:19:30:
         aa:7e:ee:4b:74:2e:e2:f5:f6:22:b2:6e:73:a7:be:04:20:c0:
         46:c9:72:8d:8d:b0:dc:26:97:7d:6c:10:d2:60:f5:5d:1e:4e:
         52:0a:58:c5:4e:fb:7a:a7:aa:23:a1:d4:0d:40:fd:4f:76:07:
         0f:38:5d:8e:c4:65:f8:0e:21:02:5c:3e:ab:1f:ee:d4:ff:e0:
         52:f6:4a:6f:3a:7e:7a:af:41:91:ef:39:42:df:16:5b:36:68:
         71:09:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----