Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YR3mMzV-4ycMW8CgCHv57TX_l-4.roa
File:                     YR3mMzV-4ycMW8CgCHv57TX_l-4.roa (raw, json)
Hash identifier:          aWNh/GgRajDpnjKnK2spXJ9V++2+BASLtsk45uiAzb8=
Subject key identifier:   61:1D:E6:33:35:7E:E3:27:0C:5B:C0:A0:08:7B:F9:ED:35:FF:97:EE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D23
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YR3mMzV-4ycMW8CgCHv57TX_l-4.roa
Signing time:             Wed 29 Sep 2021 02:48:39 +0000
ROA not before:           Wed 29 Sep 2021 02:48:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7459 (0x1d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=611DE633357EE3270C5BC0A0087BF9ED35FF97EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:e6:64:a1:01:75:97:68:db:15:6e:e2:17:
                    29:44:61:b5:8b:56:e9:35:be:40:ce:7b:af:28:d8:
                    10:04:11:15:8b:4e:39:4b:f7:89:c2:c4:98:ea:ba:
                    dd:dc:89:23:40:2c:a4:ea:31:bc:5f:be:d2:56:2c:
                    d1:a0:1d:7a:84:b5:53:cc:62:a8:58:8d:e9:57:7a:
                    75:0b:76:42:56:e5:4d:f0:f3:4b:47:4f:19:83:b0:
                    7a:82:1a:5e:86:8d:4d:14:1b:91:be:b1:88:2e:f5:
                    af:0c:fc:f9:0d:f9:92:c9:e7:5e:ff:09:b7:75:27:
                    09:24:0f:d3:16:4b:54:89:ff:51:07:8e:c6:16:17:
                    20:0d:bd:2e:56:55:81:6a:fa:fd:e0:9d:0e:d9:07:
                    b7:23:09:d6:32:c3:fd:df:bf:09:39:dc:ed:f8:0f:
                    b5:59:56:10:70:3b:cd:bb:2d:b4:19:f2:8c:55:c4:
                    95:d0:68:60:ea:e1:52:45:bf:6c:ed:08:58:42:41:
                    43:e2:9b:fd:02:be:6a:c6:a6:54:ff:85:3e:ef:99:
                    78:b4:2f:e9:b5:3d:cd:df:8b:67:df:9a:62:fe:25:
                    11:27:38:df:06:36:dd:06:94:a7:92:ec:92:ac:c7:
                    4c:3b:4d:0e:47:e6:64:4f:bb:08:96:87:50:8a:8d:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:E6:33:35:7E:E3:27:0C:5B:C0:A0:08:7B:F9:ED:35:FF:97:EE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YR3mMzV-4ycMW8CgCHv57TX_l-4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:9c:48:83:8b:fb:eb:cf:3a:27:54:e7:6b:43:28:13:7f:
         df:61:1c:b0:dd:39:8b:69:fd:b3:55:09:75:2c:0a:3b:a4:2e:
         b4:4d:59:bf:b4:b0:cb:d1:c6:ce:c0:a7:05:83:d1:6e:7c:0b:
         c0:f9:1a:6c:5c:6b:a7:78:12:f5:dd:4e:fe:d4:d1:a0:2f:83:
         c1:d3:7a:6e:6d:51:b0:87:e7:e7:40:4c:b1:47:78:79:d2:47:
         15:30:4b:da:c7:b2:79:8b:6f:47:30:37:b8:11:56:b2:50:80:
         cf:f3:87:55:67:72:da:dc:41:9a:27:2a:e9:e2:e0:2d:b0:53:
         6f:68:5e:b9:63:82:9a:f5:3c:de:ae:20:1c:d7:e7:ba:16:f5:
         cb:a6:d1:dd:a2:52:34:1e:f3:3a:65:02:dc:74:c0:dd:1b:92:
         16:99:70:5d:85:ee:3c:fa:c0:f1:3c:a0:69:c3:18:ea:de:5f:
         6f:7c:23:9b:df:33:95:ee:39:c1:64:16:f6:43:40:55:49:a5:
         8c:13:92:e0:ed:06:d4:06:15:1c:6f:11:28:35:a7:3c:19:99:
         56:d4:8c:85:ec:90:a0:c1:c0:85:bd:e5:9b:e1:44:fb:0a:a6:
         95:8a:5f:e1:a9:13:f0:4b:4b:18:2e:14:2a:5f:93:c0:f5:5e:
         fb:5d:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----