Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UWuX61r1eLBsuuRYK7cVNugFEGk.roa
File:                     UWuX61r1eLBsuuRYK7cVNugFEGk.roa (raw, json)
Hash identifier:          w77WyR11XOmdIEFk2LK/WuGty8/N8QHMZtnpgkixNXk=
Subject key identifier:   51:6B:97:EB:5A:F5:78:B0:6C:BA:E4:58:2B:B7:15:36:E8:05:10:69
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1E67
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UWuX61r1eLBsuuRYK7cVNugFEGk.roa
Signing time:             Tue 03 May 2022 03:44:53 +0000
ROA not before:           Tue 03 May 2022 03:44:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.128.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7783 (0x1e67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May  3 03:44:53 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=516B97EB5AF578B06CBAE4582BB71536E8051069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:fe:22:ea:f2:81:30:b6:f8:35:1e:13:c2:
                    f0:dd:6c:5e:07:53:ed:2a:d9:ea:40:d6:b7:fb:2b:
                    f9:eb:de:6a:15:25:68:72:db:c2:ab:df:1c:ed:f0:
                    73:bb:79:90:07:35:4d:2e:d2:7d:84:0a:37:5e:1f:
                    81:0c:aa:a5:c6:f8:2c:58:cc:56:50:7d:22:a9:be:
                    9e:5d:5a:d9:9b:7f:05:0b:08:87:3e:10:cd:19:62:
                    74:f6:fb:37:c4:a0:e6:c4:fb:79:ad:fe:12:46:df:
                    95:67:c2:10:41:94:f7:59:ef:83:1f:98:9a:6d:ee:
                    2b:d1:aa:23:f8:cf:b9:04:44:ad:87:21:3a:49:36:
                    46:eb:98:37:ec:c8:52:3a:a8:af:9f:90:a8:bc:96:
                    1a:6b:0e:64:57:96:a8:64:54:ba:7e:9e:03:1b:b3:
                    ff:bf:ce:af:46:99:8a:90:42:8f:5a:4d:e1:47:66:
                    ad:13:4f:de:1e:eb:b3:b5:44:07:86:e8:d7:26:09:
                    6c:49:1b:bc:b0:77:c2:48:e3:8c:26:2f:da:02:27:
                    42:f6:ec:c6:9a:b9:4a:08:4c:09:af:fd:38:9a:87:
                    d3:e3:59:65:50:99:cc:77:3e:0c:56:dc:79:08:d3:
                    3f:12:f2:69:91:63:10:7a:93:d5:bd:ac:bb:92:a7:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6B:97:EB:5A:F5:78:B0:6C:BA:E4:58:2B:B7:15:36:E8:05:10:69
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UWuX61r1eLBsuuRYK7cVNugFEGk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:41:5a:5f:fd:6f:e7:10:67:fa:15:2b:e9:a4:40:e7:1f:34:
         01:01:68:85:a0:c4:3c:8a:62:d8:54:a6:ee:d3:b3:35:1d:d8:
         4a:49:5a:bf:d0:c7:76:a8:3c:43:80:8c:19:09:eb:ba:56:c8:
         28:5d:35:8b:02:9c:0a:4b:fa:2a:86:cd:49:27:bd:ad:80:d4:
         18:38:76:8b:6e:03:6d:70:1b:3f:18:ec:c6:d2:d5:b7:cf:ab:
         74:ad:42:8d:0c:95:1c:57:f7:08:06:8e:6f:5b:b9:e8:bb:e8:
         aa:e4:05:12:bc:41:37:8f:1f:8c:31:a3:f8:ce:42:67:bb:0a:
         40:07:cb:0c:1e:40:18:91:1c:d4:f1:1d:cf:84:d0:59:04:ac:
         be:d2:b8:a2:90:95:03:ed:d3:c5:23:8b:3d:f7:f8:47:81:d4:
         37:3a:0a:54:95:7d:55:5a:c0:a2:da:92:58:9d:0a:57:2a:f2:
         9f:16:dc:be:7b:f0:37:fe:e6:6e:37:b1:2c:09:b2:2c:ff:59:
         3e:3b:3d:37:4c:4e:8e:dc:44:a6:32:ee:02:23:ed:99:e5:af:
         60:f8:cd:a3:1b:7f:db:0d:e1:8a:28:a3:2c:ed:72:5f:09:ca:
         c9:3f:1a:04:80:ed:5c:c6:de:ef:56:9a:0e:b1:93:9d:1d:87:
         c5:bc:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----