Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X4_zp87bRW5sEuACDng5N7sP20c.roa
File:                     X4_zp87bRW5sEuACDng5N7sP20c.roa (raw, json)
Hash identifier:          AQ4nf8r80deWbCkAFcyoa15WpZPxLSoroLxJQCaFBkY=
Subject key identifier:   5F:8F:F3:A7:CE:DB:45:6E:6C:12:E0:02:0E:78:39:37:BB:0F:DB:47
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X4_zp87bRW5sEuACDng5N7sP20c.roa
Signing time:             Wed 29 Sep 2021 02:48:38 +0000
ROA not before:           Wed 29 Sep 2021 02:48:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7456 (0x1d20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5F8FF3A7CEDB456E6C12E0020E783937BB0FDB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:c2:ad:14:73:2d:88:76:c0:ef:e2:b4:34:
                    71:97:e3:7a:dd:72:5e:29:c5:a1:31:0a:21:57:a7:
                    ab:35:35:47:5c:3f:e6:8b:8e:c1:b5:14:65:dd:cf:
                    10:58:84:81:ab:ba:bf:4e:d7:e6:92:5c:8a:7f:e6:
                    a4:82:89:ef:f5:96:5f:4e:cd:07:21:3f:41:75:05:
                    99:39:44:75:07:08:b5:87:3d:14:06:5f:52:0a:d1:
                    fa:cd:df:2a:0d:4a:a4:62:24:27:5e:a0:4d:de:a2:
                    16:bc:62:f3:dc:4e:c3:ab:2a:e3:51:f6:34:8e:ee:
                    56:32:6f:7c:94:25:34:8f:2e:5e:01:29:63:80:8c:
                    c4:43:e6:67:1a:33:c7:20:d5:45:c9:54:46:2e:a5:
                    79:0d:29:26:88:f9:86:8f:01:7e:52:96:95:d1:1f:
                    07:45:21:03:da:01:89:c5:5f:ec:9c:1e:10:d0:1f:
                    e1:79:aa:f1:2a:38:95:07:b7:8b:2f:80:89:f2:c8:
                    38:24:bd:1e:de:30:96:fb:98:b8:c1:1a:8d:17:64:
                    e7:76:c4:40:57:ad:7b:99:8a:5f:ac:c2:52:6e:00:
                    a6:cb:1c:9a:29:8e:26:ce:f5:74:17:e7:b8:e5:dc:
                    81:3d:19:21:db:bd:51:b7:1e:6f:d1:58:ee:31:c3:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:F3:A7:CE:DB:45:6E:6C:12:E0:02:0E:78:39:37:BB:0F:DB:47
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X4_zp87bRW5sEuACDng5N7sP20c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:2c:fc:ca:61:47:6a:36:ab:da:94:21:b8:fa:78:2e:dc:0d:
         90:81:60:d3:7a:4a:38:95:7c:71:5c:f2:b3:40:97:31:ee:4a:
         6a:93:79:62:6b:61:39:ce:57:31:6b:f9:4e:2c:fe:b1:f9:03:
         c4:f6:19:95:05:0d:da:a6:c7:c9:6a:55:7a:2b:22:c1:6c:d8:
         08:31:73:a1:42:0e:16:9d:42:b1:08:55:a9:66:8a:58:71:3f:
         34:1f:cc:88:50:b0:72:be:d8:ca:95:83:27:0d:2b:a0:60:08:
         09:68:2a:75:1f:3d:ef:d7:e7:7b:4c:68:76:26:71:98:6f:cb:
         7b:a0:f5:04:cb:dd:27:7b:8f:93:5f:a1:66:c9:4a:3f:9f:85:
         81:c4:e6:f8:b9:f1:93:96:13:11:40:85:fc:ad:92:4c:0b:17:
         66:f9:6d:ce:e1:0d:65:6c:7e:72:5d:88:d4:8f:81:56:47:2d:
         dd:22:67:62:c6:96:6a:6f:84:c3:06:31:47:09:23:b9:24:3a:
         23:ae:13:5e:4a:9b:44:41:2d:7a:61:32:c4:61:ab:00:53:f4:
         19:7b:57:86:ef:26:09:2d:ea:5c:5c:59:d0:46:6c:cd:6f:44:
         82:2e:69:3a:6f:24:9a:f0:a8:44:8f:f5:65:38:3e:22:18:21:
         af:53:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----