Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RhLi5coPKHdrsKWQk-sPD7ePPb4.roa
File:                     RhLi5coPKHdrsKWQk-sPD7ePPb4.roa (raw, json)
Hash identifier:          f9mY+DIdlOlsoR9byyttJ77ofyH5pw4Y30d5BEjbLB4=
Subject key identifier:   46:12:E2:E5:CA:0F:28:77:6B:B0:A5:90:93:EB:0F:0F:B7:8F:3D:BE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D6D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RhLi5coPKHdrsKWQk-sPD7ePPb4.roa
Signing time:             Wed 29 Sep 2021 02:49:01 +0000
ROA not before:           Wed 29 Sep 2021 02:49:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7533 (0x1d6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:49:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4612E2E5CA0F28776BB0A59093EB0F0FB78F3DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:ad:53:44:a7:53:28:da:e0:e7:30:ce:bc:
                    1d:a0:6f:17:b0:30:29:43:61:2e:e8:1e:41:0c:4f:
                    51:1c:19:2e:da:ef:7c:d1:85:03:8d:33:a3:9d:dd:
                    87:e8:d6:b4:31:0e:03:e5:04:77:8d:b1:57:ac:98:
                    0f:f4:30:65:85:99:fd:8c:b3:2f:e3:31:72:60:42:
                    c0:2c:b6:bd:5c:5e:9c:5b:05:ab:f9:37:b1:dd:db:
                    c3:39:b5:88:b6:a1:8c:ec:43:fd:8b:f8:e7:b6:78:
                    29:cf:df:a7:aa:3d:2f:06:54:93:ce:42:71:1d:02:
                    b1:bb:9a:d5:bf:41:73:4e:27:48:26:5a:ed:6a:aa:
                    27:da:81:45:ef:8a:72:f3:16:c6:55:57:74:5c:0c:
                    66:72:f5:30:b7:dc:4a:65:38:f3:cc:bb:bf:37:e2:
                    70:4d:f2:68:56:17:1d:f0:52:38:d1:65:cb:01:a5:
                    d0:1b:aa:d9:84:25:85:30:2b:71:d8:69:46:17:0e:
                    ba:fe:5b:68:6a:83:ac:ae:db:b7:92:d1:0a:5f:9b:
                    71:07:fc:f9:02:b0:b3:ea:dd:ae:4c:0a:67:dd:87:
                    2e:af:b9:20:89:ad:ff:a6:5c:20:f6:0a:93:4c:d0:
                    fc:b2:4c:6b:9b:f9:8d:2d:c3:00:21:6b:f4:37:6e:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:12:E2:E5:CA:0F:28:77:6B:B0:A5:90:93:EB:0F:0F:B7:8F:3D:BE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RhLi5coPKHdrsKWQk-sPD7ePPb4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:fc:6a:70:62:90:03:0b:d5:dc:89:95:54:6c:6d:59:69:
         cb:5b:8b:40:36:b6:58:4d:6c:fc:6f:6a:1d:19:dc:57:de:62:
         2c:e9:08:ea:99:5f:c5:fa:57:b0:86:0a:19:ed:8e:44:dd:d3:
         19:9f:84:a2:ba:2e:c9:54:f2:fa:ef:53:e6:1f:12:a6:42:62:
         e6:aa:78:d2:39:e8:61:4d:b6:fd:a8:5f:68:05:ff:98:3a:06:
         2a:31:20:b5:0a:d0:45:5a:0d:4e:ce:d9:30:9b:1a:38:1c:8d:
         20:46:7f:93:92:bb:07:9a:3f:dd:ff:95:49:0d:a1:f9:5a:4d:
         ba:8b:f9:b0:f0:fc:ed:06:b0:b5:82:26:b5:9b:34:3b:80:4e:
         10:87:53:f9:6a:52:d1:48:9b:5b:c5:08:b8:6b:46:87:77:25:
         da:1a:6b:43:82:99:af:00:75:a6:ae:17:b7:08:78:38:fa:1b:
         68:f2:9a:8a:e6:e7:a8:77:ea:f5:bd:61:5e:32:15:28:59:55:
         23:5d:5c:40:d1:bd:af:3d:7b:47:76:47:e4:fb:32:27:87:db:
         8d:a6:2d:4e:e4:fe:50:4a:71:47:f3:2d:85:52:ef:c5:2d:aa:
         d4:b4:88:2d:54:b6:7b:71:a5:bd:88:1b:32:81:81:10:69:7b:
         50:9c:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----