Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sq0fifOYv8mfFR2CK8D0DGRmSTw.roa
File:                     Sq0fifOYv8mfFR2CK8D0DGRmSTw.roa (raw, json)
Hash identifier:          IovxVfwYZtPbJJ/ELZXeZiw+IS+eNfbPQACwgFM0TYw=
Subject key identifier:   4A:AD:1F:89:F3:98:BF:C9:9F:15:1D:82:2B:C0:F4:0C:64:66:49:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CC1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sq0fifOYv8mfFR2CK8D0DGRmSTw.roa
Signing time:             Wed 29 Sep 2021 02:48:10 +0000
ROA not before:           Wed 29 Sep 2021 02:48:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7361 (0x1cc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4AAD1F89F398BFC99F151D822BC0F40C6466493C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:0e:d7:ce:7d:95:f0:4d:37:f5:e3:80:0a:
                    42:c2:e6:39:af:b2:c0:d7:0c:cf:06:4c:4e:ea:76:
                    d3:ef:b7:cd:0f:a8:ab:68:d3:d1:45:88:09:e6:7f:
                    a9:07:d7:d7:1b:c6:f2:d5:ff:3f:5b:2f:ff:23:ce:
                    22:f9:86:94:c4:a4:c1:ae:bf:47:ba:1e:a4:f9:6f:
                    8b:29:6d:b7:df:5d:71:50:02:e9:81:78:35:b5:b2:
                    5d:a6:c6:ea:c7:94:51:1e:63:14:2b:6b:93:07:80:
                    2e:9e:c3:fd:fc:bb:0a:a8:b2:39:e4:c7:71:40:95:
                    db:5b:45:66:ea:2b:93:e9:8d:d3:80:2a:09:39:1c:
                    cc:f4:58:d5:54:27:f2:16:d2:63:8a:0d:1f:87:e8:
                    88:27:e6:12:46:f1:95:f8:31:6d:98:f0:a8:c8:af:
                    96:b7:2e:6f:ee:63:e6:d8:b4:1d:21:0e:4e:73:77:
                    03:76:47:a3:f8:d0:38:ff:da:c8:90:54:c0:90:ad:
                    81:ec:0f:6f:fc:00:25:49:7c:68:96:96:c7:52:24:
                    40:67:fa:01:eb:89:bd:85:c7:cf:c0:e8:32:e1:b9:
                    0b:65:68:5f:1d:97:29:66:9b:cb:77:d7:be:90:c7:
                    91:41:98:b6:32:d5:e5:92:5f:6c:e0:eb:dc:5b:50:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:1F:89:F3:98:BF:C9:9F:15:1D:82:2B:C0:F4:0C:64:66:49:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sq0fifOYv8mfFR2CK8D0DGRmSTw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:5a:54:b0:90:7d:d8:21:fe:03:89:fc:63:be:e1:40:56:
         f1:02:6c:c3:23:72:1a:3b:06:71:8d:5e:44:cf:74:6f:78:dc:
         73:f3:ed:df:ef:fe:9c:ed:ac:1e:3c:4c:ce:6f:d5:f0:9a:26:
         7b:00:f4:c0:c3:a3:dd:a7:be:3f:b2:9b:5d:7e:2d:fa:be:8b:
         1b:35:44:d0:66:96:c3:69:8d:a4:d7:37:e6:5d:42:d5:2e:85:
         82:73:f0:80:9c:05:b5:4f:71:25:15:3f:37:61:7c:6d:97:e7:
         23:c3:57:09:a5:5e:ab:96:19:a0:ff:c8:a8:24:e4:64:2d:3f:
         3a:52:c9:53:7a:78:43:5e:e1:a2:b4:44:6b:dc:76:70:63:f2:
         03:e1:cd:24:40:77:cf:1d:1f:b5:1b:a3:6b:e9:c1:0b:69:af:
         f0:57:f0:42:eb:ae:f2:0f:7a:06:0c:a8:81:33:0a:f5:eb:f5:
         63:e1:46:79:b3:43:fe:7b:a5:36:6c:72:12:fb:e7:ea:78:a2:
         be:23:c8:18:5e:a9:16:ce:9f:4b:00:ac:8b:f2:ec:f1:2c:8f:
         52:86:cd:9d:28:ea:37:7f:37:b9:c1:6b:b1:d0:e5:92:4a:72:
         69:e4:84:64:7e:20:d8:1f:72:14:a7:e5:a8:1b:63:33:9e:b3:
         e8:15:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----