Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PUa5WrkHJUYTVmxRsuqECjdwKSM.roa
File:                     PUa5WrkHJUYTVmxRsuqECjdwKSM.roa (raw, json)
Hash identifier:          sn+CN3Zk+USelSd2w3Qo9ZXdVMkvL7npq61br/MKIEQ=
Subject key identifier:   3D:46:B9:5A:B9:07:25:46:13:56:6C:51:B2:EA:84:0A:37:70:29:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A9E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PUa5WrkHJUYTVmxRsuqECjdwKSM.roa
Signing time:             Wed 29 Sep 2021 02:45:33 +0000
ROA not before:           Wed 29 Sep 2021 02:45:33 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6814 (0x1a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:33 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3D46B95AB907254613566C51B2EA840A37702923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:85:1f:35:ff:b1:55:15:ad:9c:92:06:b1:
                    91:3b:60:24:7f:86:23:bd:67:34:e5:ef:7e:6d:04:
                    54:26:32:84:db:1f:0c:c9:04:84:37:5e:b3:9b:40:
                    88:a9:02:65:00:82:20:7b:ef:d1:9b:c1:ce:d7:59:
                    50:48:37:10:3a:2d:c4:a9:9f:17:1a:17:0f:15:21:
                    4d:ea:53:da:2c:a3:4f:fd:6e:15:0f:02:8d:33:6b:
                    f6:a1:04:6b:d4:95:06:c9:c1:28:23:27:de:84:b0:
                    fd:b4:07:08:16:5d:9e:a9:59:77:cc:75:e6:0a:ba:
                    ec:a5:e0:59:17:44:8c:e3:4d:6c:6e:c3:c7:96:f0:
                    81:73:3b:a1:3b:63:f3:27:94:84:2f:1a:a9:83:b8:
                    f9:ef:57:93:a2:18:75:14:55:bf:40:62:89:f1:99:
                    6b:00:cb:6e:15:b6:00:e0:a1:97:11:8c:cf:44:10:
                    20:90:ac:90:65:3f:49:42:3b:b8:c3:8a:69:41:47:
                    63:4e:dc:70:c7:9a:f4:e6:d1:cf:cd:9d:66:ff:01:
                    82:77:8b:ed:51:49:3a:94:d6:49:e4:83:a9:f6:3b:
                    5c:a9:98:e6:56:59:2c:c6:1b:3a:fc:b3:52:03:86:
                    d5:7a:7e:1d:ff:11:9d:41:5d:5f:bb:e7:4e:a8:55:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:B9:5A:B9:07:25:46:13:56:6C:51:B2:EA:84:0A:37:70:29:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PUa5WrkHJUYTVmxRsuqECjdwKSM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:0e:ae:88:95:e5:d0:a8:6c:16:82:1e:01:56:dd:fe:c8:
         b3:51:8e:a9:6d:d2:e7:d7:a2:57:84:4e:af:d8:cc:99:f5:2e:
         09:60:b8:23:25:75:f7:e0:51:36:20:43:0d:44:76:d1:e4:b2:
         5f:e6:e8:79:1c:71:e3:63:0f:05:aa:c4:18:b0:7e:66:c9:d9:
         f8:db:75:95:8f:ec:de:fe:82:17:8e:50:a3:eb:71:b9:52:42:
         36:03:32:cc:64:75:af:47:09:1e:e4:45:6b:90:05:5e:4d:cf:
         2b:2a:ee:9c:e1:45:a6:42:47:fb:be:04:c2:1d:c1:42:2e:7f:
         c4:c7:9c:4a:52:bd:9b:19:45:57:d7:3a:45:37:d4:52:62:78:
         cb:57:c6:32:f3:f2:ff:ab:4c:48:8b:1f:50:42:a5:a6:da:ca:
         27:34:ba:46:ec:86:21:ac:1a:e5:a0:09:1e:38:80:08:38:7b:
         03:a9:7f:72:95:c0:17:45:ed:9c:81:66:e2:67:29:92:87:7a:
         04:ec:2d:1e:53:e6:fc:02:4d:2e:86:a7:9d:7a:62:d4:c8:77:
         b2:fb:84:ed:cd:ea:7a:4e:3b:4e:8a:c6:71:01:6b:ae:27:a8:
         98:ef:22:59:ce:a8:dc:38:ad:72:93:6a:56:49:af:0a:3b:7f:
         d8:db:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----