Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wi8SLm8UBC97tGwaPm_M9fphBlg.roa
File:                     Wi8SLm8UBC97tGwaPm_M9fphBlg.roa (raw, json)
Hash identifier:          DmrsbMU9uhZ/dHd9OnUdSPcfejGu6TypTwg6m38Mmoo=
Subject key identifier:   5A:2F:12:2E:6F:14:04:2F:7B:B4:6C:1A:3E:6F:CC:F5:FA:61:06:58
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wi8SLm8UBC97tGwaPm_M9fphBlg.roa
Signing time:             Wed 29 Sep 2021 02:48:59 +0000
ROA not before:           Wed 29 Sep 2021 02:48:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7529 (0x1d69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5A2F122E6F14042F7BB46C1A3E6FCCF5FA610658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:6a:5f:c0:b5:2b:05:53:6f:21:56:89:99:
                    dc:c6:c7:23:41:b1:8d:0c:6e:a5:5b:f5:a5:43:31:
                    a4:87:f6:33:c5:24:53:48:4d:96:45:d1:05:d9:6d:
                    90:27:16:6e:e0:e7:c8:de:75:46:fa:fb:5e:3d:f2:
                    f4:83:13:c3:a1:6d:79:4c:3b:86:88:38:ae:67:53:
                    6d:b2:06:8b:36:f1:5b:e4:b4:af:44:df:0b:b4:3b:
                    0b:40:fe:74:4b:7c:41:43:e3:ee:56:51:ec:75:79:
                    21:1a:97:db:e9:73:56:94:de:00:8d:4d:e8:8d:a4:
                    46:8c:84:14:ea:87:f9:17:01:f7:9e:6d:04:f9:6e:
                    81:fe:7d:b7:11:b0:4b:e9:0d:a3:77:7b:3a:fc:b1:
                    f1:d8:11:c8:af:75:d9:42:a0:08:f2:1f:8f:47:e7:
                    ef:40:45:c4:f2:59:5e:71:22:af:ec:a1:6b:b0:ab:
                    07:3f:ac:84:53:a7:2d:a2:32:1d:bc:a7:ad:e9:8e:
                    0b:7b:41:b3:ee:1e:b7:43:29:76:16:7b:7c:0f:c4:
                    9e:f6:24:f6:93:1c:84:9b:49:d0:63:d0:57:20:d0:
                    8e:de:d2:c7:b0:4b:bb:9c:cd:53:7e:77:d5:e3:81:
                    7c:66:7b:c4:8e:cf:c1:14:27:e6:8f:04:72:4f:3d:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:12:2E:6F:14:04:2F:7B:B4:6C:1A:3E:6F:CC:F5:FA:61:06:58
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wi8SLm8UBC97tGwaPm_M9fphBlg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:ea:73:42:e1:10:40:0d:28:47:96:2e:37:f3:6d:73:1e:20:
         74:e4:34:fe:a7:60:4c:d9:ea:a9:8d:32:20:0a:5d:5d:9b:1b:
         97:76:19:b6:c2:34:24:9c:e5:9d:21:ec:d0:f0:61:4c:ba:c2:
         7d:1a:58:48:1c:7e:cc:ed:d1:cf:89:73:95:d4:9c:71:4d:18:
         59:3e:7a:bf:1c:a8:6e:73:0c:e1:21:f1:9d:a5:37:97:6a:3b:
         fc:fd:f2:c8:50:49:9e:8c:56:9e:a3:23:24:d5:49:9d:d1:99:
         ea:a3:27:61:a8:43:9c:1e:f6:5c:9e:bc:10:ed:05:84:35:3a:
         0c:70:ad:f4:d7:38:58:e2:61:78:4e:da:c2:0f:f8:4c:dd:22:
         65:2d:84:00:36:b4:eb:c4:71:35:17:53:3a:82:eb:e5:22:57:
         2a:4f:db:5f:2f:6d:4a:58:84:55:2d:87:87:fa:b9:fe:89:5f:
         c6:33:d5:3e:fe:9c:d9:3c:1d:98:26:d0:79:64:00:b3:f1:e3:
         a2:7d:9f:96:a4:cf:17:df:8b:e5:ed:dd:55:f6:99:1f:0c:67:
         3e:40:3d:d9:a3:c6:c2:a9:03:ec:ee:97:a2:ab:33:e6:61:be:
         33:21:f2:5a:cd:9f:12:9e:d8:5e:5c:26:b7:b0:bd:d7:b1:48:
         39:be:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----