Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pguhl8rHfc_AEx_pw67q4rhCIjY.roa
File:                     Pguhl8rHfc_AEx_pw67q4rhCIjY.roa (raw, json)
Hash identifier:          rJe0XgBqif+UL3M7/vMG9rB/NX1++GyzTeYBjb8mdyc=
Subject key identifier:   3E:0B:A1:97:CA:C7:7D:CF:C0:13:1F:E9:C3:AE:EA:E2:B8:42:22:36
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D59
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pguhl8rHfc_AEx_pw67q4rhCIjY.roa
Signing time:             Wed 29 Sep 2021 02:48:53 +0000
ROA not before:           Wed 29 Sep 2021 02:48:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        211.76.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7513 (0x1d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3E0BA197CAC77DCFC0131FE9C3AEEAE2B8422236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:74:19:a1:d4:ee:09:ac:8d:56:4a:63:42:6b:
                    ed:1e:45:cf:fe:ba:e9:bc:bf:8b:32:fe:b9:6b:b8:
                    5c:05:b9:2e:fb:c9:43:35:37:b1:f0:a0:c0:d6:16:
                    62:f8:78:c8:20:0c:71:81:29:61:41:2f:0d:c7:56:
                    75:96:bf:9e:7f:07:51:a0:32:83:ba:96:a9:6b:30:
                    bd:bd:63:78:6b:4b:57:65:2e:1b:4b:fe:4b:bb:0f:
                    8e:88:ff:d4:bd:91:46:f9:36:41:89:ad:1d:e2:91:
                    4a:46:b8:37:7c:48:7c:3f:31:21:a9:c7:1e:da:9f:
                    fe:e5:dc:3a:2b:4c:a1:89:91:fc:10:29:79:e5:ee:
                    1a:b2:7f:b9:25:a7:fe:dd:20:55:a1:b9:d6:07:90:
                    86:06:9d:bb:96:72:07:73:35:ff:e7:77:dd:4e:1b:
                    8b:ad:23:7c:4d:87:67:f7:70:10:65:e3:f0:42:b3:
                    f0:3e:f0:80:50:26:e7:8c:2e:1b:f1:2c:0f:82:0a:
                    ce:e9:7f:8f:e7:b2:e6:0c:42:28:2b:52:fb:6c:96:
                    37:d1:cb:1c:8d:13:b7:2b:7d:28:4b:e4:ca:87:fb:
                    50:2e:f0:85:63:80:76:37:02:68:fe:83:57:1f:f7:
                    6c:bf:ef:08:f1:bf:07:96:41:09:f6:86:7f:86:08:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0B:A1:97:CA:C7:7D:CF:C0:13:1F:E9:C3:AE:EA:E2:B8:42:22:36
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pguhl8rHfc_AEx_pw67q4rhCIjY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:74:62:68:33:24:1f:39:23:e3:bb:3f:0f:e7:06:6a:a3:
         d4:17:aa:b2:7b:23:d0:f5:b0:88:ba:a3:88:5b:29:92:8e:57:
         ad:ee:58:e7:1b:45:b9:c0:04:37:49:38:dc:9a:09:25:51:79:
         89:2f:d6:23:43:46:44:74:7e:93:f8:af:cd:2b:41:5b:de:e5:
         df:cd:bb:52:1d:b8:16:32:ab:c2:31:62:36:bb:a0:fd:0e:cf:
         d4:05:0d:70:d4:36:d2:67:bb:1a:06:1c:86:4f:4d:ea:db:6f:
         25:3d:46:4a:ea:78:e8:e1:ae:21:3e:2e:42:1a:52:d1:cb:dc:
         ae:31:8f:7a:b4:05:d5:07:a0:22:62:a0:c2:ee:f6:e4:c0:7a:
         25:0c:4b:0e:96:6b:4b:8b:98:1a:16:3e:eb:34:fa:1b:dd:52:
         68:61:46:45:9e:85:e6:7a:58:68:6a:d1:55:4a:76:4f:6e:e9:
         da:f5:17:98:e7:1c:8b:b7:c1:53:74:c6:bb:37:62:05:9b:b0:
         4d:fa:c7:c0:e9:21:8b:c2:fb:b2:f7:69:97:dc:69:95:9e:18:
         63:c0:03:ff:1c:fc:50:49:fb:36:9c:14:f7:44:02:07:22:23:
         9b:db:3b:65:7a:82:87:76:b5:56:e7:90:53:e3:6d:04:eb:4d:
         b4:6c:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----