Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vz9dITUgjy8CsQ4rDe7cXaTgxJk.roa
File:                     Vz9dITUgjy8CsQ4rDe7cXaTgxJk.roa (raw, json)
Hash identifier:          o3/Db7AJ5Qv4+9uoBiu7p2xd3S7TAJotagts4/tp+Uk=
Subject key identifier:   57:3F:5D:21:35:20:8F:2F:02:B1:0E:2B:0D:EE:DC:5D:A4:E0:C4:99
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BA9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vz9dITUgjy8CsQ4rDe7cXaTgxJk.roa
Signing time:             Wed 29 Sep 2021 02:46:51 +0000
ROA not before:           Wed 29 Sep 2021 02:46:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7081 (0x1ba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=573F5D2135208F2F02B10E2B0DEEDC5DA4E0C499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:05:02:5c:c0:df:c9:68:58:24:a8:50:0d:
                    6d:01:6d:d8:9f:0b:76:99:a6:b2:f3:07:89:49:cc:
                    d3:18:63:23:72:37:02:5c:c1:df:5f:37:c8:28:11:
                    46:2d:cc:3a:7d:65:25:7e:e6:cb:fd:d0:70:9b:aa:
                    7a:8a:ab:ea:49:70:8b:38:9a:01:4f:4f:71:3c:cd:
                    b8:a5:6b:71:05:dd:b1:90:38:3f:c7:7f:7c:3d:87:
                    12:de:13:dd:9b:ea:f6:97:35:61:33:70:89:c1:3e:
                    b8:ef:9a:ad:88:e4:e3:6d:42:79:5f:8f:f8:06:c9:
                    f8:81:9a:66:17:9b:35:c1:dc:81:90:b1:b3:1c:b8:
                    29:36:88:40:a2:26:ca:b2:d0:a8:f1:37:2f:16:ef:
                    85:6d:e0:df:a7:31:69:7b:4c:e1:1f:da:f6:58:74:
                    e6:69:8e:df:0e:7b:ad:87:fe:87:ce:11:97:5e:e2:
                    d4:30:8b:dc:46:6c:6f:1e:5c:3d:2c:78:57:9f:2a:
                    19:a7:12:a3:f1:c1:e9:8e:e3:fc:b5:88:38:d7:d4:
                    35:c6:0d:f7:4c:dc:ef:ad:d3:de:26:92:10:f8:b9:
                    8f:ab:42:73:29:dc:bb:8d:12:6c:89:04:72:cd:9d:
                    cb:5b:54:54:12:43:03:70:6c:77:59:49:cd:c5:52:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3F:5D:21:35:20:8F:2F:02:B1:0E:2B:0D:EE:DC:5D:A4:E0:C4:99
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vz9dITUgjy8CsQ4rDe7cXaTgxJk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:78:2b:7d:e9:01:2e:ce:61:26:57:68:b8:36:d2:52:94:
         38:10:e4:af:0a:66:f0:f2:78:9d:61:98:9b:08:5e:f0:32:2d:
         02:7c:3f:6c:45:4b:00:c4:bf:14:f4:99:30:fc:6a:a1:4a:73:
         2c:22:9b:c7:e0:69:18:c8:80:95:62:24:10:da:e0:2f:25:54:
         fe:1f:f2:5c:b2:22:98:c0:c5:79:8d:57:7a:13:46:17:2e:4f:
         fd:38:ec:6a:44:ac:58:9c:26:da:d9:8f:45:db:9f:a4:84:f3:
         91:42:c6:96:b9:5d:8a:87:a0:ca:fa:7e:c2:64:5b:c2:d7:26:
         04:96:7c:3e:68:8c:87:9b:06:a2:3d:5a:21:9c:91:05:d9:4a:
         50:01:3d:7b:a1:87:91:bd:07:d6:18:19:65:93:cc:db:30:43:
         5f:5e:e8:6b:e0:99:77:b9:be:5f:61:df:6b:97:a1:53:37:8d:
         d1:74:33:b2:c6:98:c6:5f:73:62:08:a5:3b:d9:63:5d:e0:3f:
         6d:7e:c0:82:e9:22:3b:ee:1f:70:42:c0:7a:05:7c:3c:f3:96:
         48:b4:19:34:4b:cc:31:53:bb:8b:46:16:33:e9:21:b2:68:37:
         75:0f:48:a2:f6:e0:7a:f3:e5:ed:12:07:78:80:e1:21:54:a1:
         e9:81:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----