Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa
File:                     RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa (raw, json)
Hash identifier:          dUoOg8/xUhXCctCs9+NIyNHomYCRJfR4q3RAP494Xd8=
Subject key identifier:   45:01:B6:8D:5A:80:98:6A:93:3B:88:2D:8E:7E:15:C8:61:6B:4D:15
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CE4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa
Signing time:             Wed 29 Sep 2021 02:48:21 +0000
ROA not before:           Wed 29 Sep 2021 02:48:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7396 (0x1ce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4501B68D5A80986A933B882D8E7E15C8616B4D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:37:d0:43:39:31:0a:bc:48:a1:f9:7a:1a:
                    b8:4a:ff:fc:81:f2:26:0a:68:3d:bc:b2:c0:e3:eb:
                    d7:d1:25:68:f0:9b:62:c1:8c:bb:e8:16:52:4d:c1:
                    16:fc:f3:38:e2:77:db:12:4b:3c:7b:2b:a3:4f:c2:
                    ba:6b:ad:16:d2:40:4a:69:33:e4:fb:eb:43:cf:81:
                    f4:d1:b4:7f:a9:a0:44:6d:11:cd:89:6e:b5:9e:76:
                    08:6e:07:18:7f:24:22:89:78:46:c9:3e:7b:05:8f:
                    79:d9:24:a7:07:82:4b:69:e1:ab:f8:3f:73:13:71:
                    3a:17:6b:c3:ca:e7:d9:ec:c4:5b:99:97:b6:58:4b:
                    5a:ae:1a:b2:39:e7:2c:5f:26:bf:1e:57:43:59:10:
                    6a:68:94:3a:59:3f:b5:69:80:47:d7:8a:f9:4e:34:
                    a5:92:9d:9f:85:c5:b1:60:42:e1:c5:8c:ec:9b:ae:
                    63:53:3f:0c:6d:5a:27:7d:3f:2e:53:ff:3c:c3:ef:
                    3d:8f:db:ea:75:1d:78:79:39:35:8c:c1:24:da:7b:
                    4b:f9:47:e6:60:cb:98:c3:ef:de:f9:45:78:3f:c5:
                    92:be:e7:46:54:8f:2d:80:3a:92:c5:8d:c1:23:d4:
                    ea:f7:49:ee:cc:34:c6:bb:55:eb:c0:88:0e:bf:e8:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:01:B6:8D:5A:80:98:6A:93:3B:88:2D:8E:7E:15:C8:61:6B:4D:15
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQG2jVqAmGqTO4gtjn4VyGFrTRU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:07:3b:5d:b4:fc:68:af:54:3f:d9:28:16:3d:bd:21:8c:3c:
         03:13:2d:54:2d:d6:a9:c1:0d:ce:47:a2:d4:ff:32:04:ac:df:
         a9:9f:d6:12:7e:da:04:3e:ca:a8:45:3b:a6:a1:17:b3:ae:10:
         ce:8a:44:fa:ab:f4:01:e2:ba:04:bb:94:ee:13:d2:50:3a:31:
         13:44:16:d4:20:6d:95:f2:6d:f2:c2:e1:e1:52:da:2d:2c:c6:
         2a:9a:71:85:7b:f3:0a:0c:01:42:99:7d:79:a1:47:b3:c4:64:
         7d:ae:6a:40:90:4c:ed:bc:3c:f1:44:ed:d0:d8:82:43:44:e7:
         ab:ff:6f:f8:b0:fe:59:ec:f9:2f:7f:c5:a8:04:7b:4a:17:d9:
         ba:83:89:d2:1a:f7:49:af:73:c1:8d:a6:a0:bc:84:87:4b:c1:
         10:12:c9:94:1a:12:32:f3:ef:c4:b9:0d:c7:4e:1a:45:68:44:
         71:e7:8c:46:6e:5e:ab:ab:2c:92:cf:3c:8c:e6:fc:c9:b6:89:
         88:6b:61:29:4f:fa:b7:6d:64:96:93:71:08:73:29:f1:3e:ed:
         88:75:e2:d0:85:4f:86:53:22:c3:2f:0a:b2:52:26:64:52:c8:
         f2:95:1b:8f:7f:bc:75:f9:cc:87:2b:40:19:76:fe:2c:ae:c1:
         60:8d:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----