Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa
File:                     LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa (raw, json)
Hash identifier:          Dq9q6co4fDAb0GeHTvM0ONfr2hGDGaPpfxJc0+j4+X8=
Subject key identifier:   2D:7D:08:D8:2B:7B:43:2D:48:C3:D8:61:D1:B7:88:4E:02:1E:38:33
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa
Signing time:             Wed 29 Sep 2021 02:47:42 +0000
ROA not before:           Wed 29 Sep 2021 02:47:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7268 (0x1c64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2D7D08D82B7B432D48C3D861D1B7884E021E3833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:8b:b0:e3:82:16:90:c3:a1:61:3f:da:ae:
                    f3:d6:13:95:a5:b6:77:15:b8:06:4b:58:bf:f4:d8:
                    6b:75:5e:82:d8:7e:e3:d0:c2:51:45:84:0d:f4:cb:
                    06:de:79:99:c4:9a:9d:74:bc:cc:11:11:25:fa:2e:
                    9a:b1:cf:77:bf:77:c9:32:4e:d7:b6:d7:d9:72:20:
                    35:35:46:eb:96:64:0b:a4:4c:d7:52:39:39:f5:23:
                    00:13:ab:69:9c:ce:97:6e:c9:39:89:d6:73:93:36:
                    19:df:83:c5:ac:b9:ec:02:3b:dd:72:83:48:f3:a4:
                    b0:96:94:54:f2:42:8d:6a:c0:95:af:d7:fd:03:92:
                    7e:c2:37:2f:d9:93:1c:6c:28:f8:1a:d0:fa:71:ff:
                    6f:73:4c:be:86:a9:06:16:37:35:b4:77:4b:7c:f8:
                    d7:6e:82:17:c5:8a:f4:e1:32:43:b7:cd:06:ec:07:
                    43:27:13:ae:41:43:0f:46:b7:f7:76:15:84:af:0c:
                    b1:70:f9:30:59:3d:d3:e5:98:75:ac:b9:e3:21:ee:
                    a3:4a:1c:8b:65:c0:d2:b8:30:b4:1a:bc:3f:f8:ad:
                    6b:7b:e4:4d:d4:cf:1c:f0:30:82:1d:85:2a:f7:71:
                    ea:fa:fb:7d:a1:ae:34:20:01:1f:bd:99:a0:bc:9f:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:08:D8:2B:7B:43:2D:48:C3:D8:61:D1:B7:88:4E:02:1E:38:33
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:1d:32:f1:07:42:93:66:2d:e9:4a:e8:1d:19:70:3a:ce:97:
         a2:cb:71:1e:9a:34:1c:ed:8d:ac:82:90:48:2b:bd:7f:32:f3:
         b5:a1:77:45:5d:b5:c5:74:77:1f:c4:90:c1:d3:08:33:3a:72:
         31:21:23:69:90:bb:98:6d:53:d5:e1:e8:8a:b6:80:cc:11:e1:
         b2:b4:54:7c:28:df:da:91:c9:63:25:94:79:e1:90:58:e5:34:
         e0:92:15:b8:1e:eb:27:2f:a8:a4:5d:14:01:66:30:f4:48:1a:
         7d:eb:bf:cf:51:9c:37:93:77:39:9e:c4:b6:c0:e4:73:60:37:
         21:f6:cb:a2:26:fb:da:c1:5f:ab:d2:91:6f:9e:80:5b:94:59:
         53:bc:92:d7:84:c7:c2:89:18:5b:a9:b1:d1:a4:df:5b:d6:ad:
         e0:cd:e1:fa:ce:5d:bb:6e:fa:f4:25:82:a4:38:c9:f0:d4:4a:
         8f:25:70:ce:90:52:e6:4f:94:dd:85:01:81:6a:58:8e:70:98:
         e9:fe:6d:14:b1:d1:fe:87:92:1b:48:75:2e:fc:62:c2:d4:03:
         94:10:a3:18:b6:86:af:d1:36:ac:ff:ad:c5:8d:ff:82:9b:87:
         79:cd:9d:75:90:77:47:5f:d0:c4:73:fb:27:33:06:e8:a6:34:
         c1:96:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----