Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UNMH6Hkknj1GeLJZC_xMcLCUd-M.roa
File:                     UNMH6Hkknj1GeLJZC_xMcLCUd-M.roa (raw, json)
Hash identifier:          /4frFCUK/NrGtzZuhFutPQ2/16tSXmi2hi3ZjhJS2ks=
Subject key identifier:   50:D3:07:E8:79:24:9E:3D:46:78:B2:59:0B:FC:4C:70:B0:94:77:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C31
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UNMH6Hkknj1GeLJZC_xMcLCUd-M.roa
Signing time:             Wed 29 Sep 2021 02:47:27 +0000
ROA not before:           Wed 29 Sep 2021 02:47:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7217 (0x1c31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=50D307E879249E3D4678B2590BFC4C70B09477E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:dd:a8:f9:4f:c9:8e:b9:44:22:55:17:71:
                    4e:89:fd:02:e1:a3:ee:e8:5a:bf:61:3f:7b:39:7a:
                    7b:68:a9:83:ea:93:93:c0:ae:e0:4c:a5:f1:b7:a6:
                    0d:83:66:26:8b:2e:56:72:32:e6:46:e3:d3:03:5a:
                    8e:9a:84:b2:8d:b3:e3:aa:03:31:24:29:63:67:bd:
                    4b:40:2e:ac:da:c4:fb:10:ef:49:98:37:e9:ad:9c:
                    22:28:4f:b4:b3:75:3d:dc:51:85:07:12:87:5c:1c:
                    7e:d1:de:0f:d4:62:b3:ab:ca:bf:a1:e6:0b:ef:01:
                    9b:32:d8:f2:a4:3c:8c:97:61:66:d9:60:69:74:57:
                    8e:84:07:e7:e3:2c:15:8c:79:0b:bd:b5:27:3a:72:
                    0b:fc:5e:70:80:02:bd:f7:6e:f4:0e:02:10:ee:f0:
                    77:d2:49:18:81:66:83:68:4e:09:01:1d:92:a3:b1:
                    78:82:45:a0:3b:a5:44:b5:66:de:70:37:08:d9:69:
                    2e:ec:71:cc:ee:00:d8:65:9d:7c:bd:da:6c:a9:55:
                    26:3e:dc:a1:ba:64:cd:88:97:df:dd:7b:55:9e:6d:
                    55:66:b3:a3:b0:68:25:28:22:67:56:08:0e:a6:9b:
                    9e:16:fb:dd:51:f0:92:27:60:c5:6e:f8:b8:5b:9f:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:07:E8:79:24:9E:3D:46:78:B2:59:0B:FC:4C:70:B0:94:77:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UNMH6Hkknj1GeLJZC_xMcLCUd-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:b7:de:08:a8:77:6b:22:81:4d:2c:47:10:dc:83:19:95:e4:
         eb:76:14:e5:14:fb:92:f9:a0:ed:4d:1f:82:ac:92:66:c3:70:
         d6:46:87:19:a3:c5:da:e3:f5:55:1a:5d:b1:68:10:1c:4c:aa:
         72:51:93:54:f4:f8:6d:4b:6e:ed:3b:bc:dc:aa:ee:88:4d:03:
         2f:cf:ff:ea:41:33:49:7a:af:3a:f8:ba:f7:b5:ac:09:6b:83:
         e8:9d:4d:f1:cb:90:f4:95:50:d6:c2:91:87:cd:6f:5c:71:ab:
         1e:32:3c:2d:1d:09:68:20:b6:b5:6c:38:c1:7a:ab:c4:93:be:
         82:7c:eb:ad:0b:75:3d:96:2c:69:b6:62:2e:71:d9:ac:d8:73:
         29:b9:54:20:14:0b:71:1e:28:26:5d:9a:14:cc:8c:ad:40:12:
         b6:0d:97:4b:14:44:31:6f:82:76:ea:5d:95:35:29:94:17:75:
         c4:0f:3c:5a:0f:5a:dd:c9:bb:73:60:7c:95:88:7c:ab:2d:a9:
         a7:99:c3:5b:25:90:ce:d7:17:8d:46:85:cc:7e:2c:cb:83:11:
         4f:10:8e:8e:b5:19:02:6a:c6:40:11:68:f4:c6:70:c8:75:69:
         76:78:7e:e9:a4:1a:5a:aa:e1:f7:2d:99:52:b3:d3:63:97:91:
         5c:98:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----