Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z7-2YdauExILz7v7MK7buDrHQk8.roa
File:                     Z7-2YdauExILz7v7MK7buDrHQk8.roa (raw, json)
Hash identifier:          k3bzyI948pVrOFIn909KDT3Pb6BCkcr/I/fvpYO63CU=
Subject key identifier:   67:BF:B6:61:D6:AE:13:12:0B:CF:BB:FB:30:AE:DB:B8:3A:C7:42:4F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z7-2YdauExILz7v7MK7buDrHQk8.roa
Signing time:             Wed 29 Sep 2021 02:45:28 +0000
ROA not before:           Wed 29 Sep 2021 02:45:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6796 (0x1a8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:28 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=67BFB661D6AE13120BCFBBFB30AEDBB83AC7424F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:7f:44:e2:08:ad:90:53:4a:44:95:48:78:
                    b3:84:64:ba:de:37:16:26:fa:31:94:ff:61:16:88:
                    55:6f:f2:13:95:59:48:77:7e:20:a3:90:c7:8a:86:
                    15:16:12:44:5c:be:cc:cc:7f:c9:26:91:1c:c4:e7:
                    9d:a3:bf:bd:f9:58:e4:8c:0d:41:1b:85:34:be:7f:
                    1a:4f:b5:3e:be:03:f3:3f:84:81:ce:23:93:ad:7c:
                    37:46:91:46:50:99:7c:9a:c0:31:30:67:6e:d0:00:
                    37:e7:22:f6:87:cf:89:98:8e:e9:b9:32:7c:74:dc:
                    d2:72:3f:4b:95:b8:d7:25:0c:a1:cb:75:b1:a9:37:
                    31:5b:0a:4d:39:97:fb:d3:82:cb:0f:11:5f:3b:1f:
                    95:5a:bb:2b:16:3d:52:bf:fd:5c:6c:39:bf:78:be:
                    aa:0c:6a:b5:6b:13:15:61:ea:c8:0d:bd:42:83:6e:
                    6c:5f:95:02:07:30:b3:4c:a5:2d:02:1f:00:59:7d:
                    27:0a:3e:be:00:d5:64:fd:3a:a5:52:cd:c4:96:4b:
                    05:03:68:f2:bb:d8:fc:5f:09:f2:47:0c:44:a3:f1:
                    cc:0c:0e:92:9c:85:ae:ae:ad:1e:b1:c7:00:49:33:
                    b7:c0:2b:23:47:ce:c4:76:85:b3:57:ea:c6:ad:5b:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:B6:61:D6:AE:13:12:0B:CF:BB:FB:30:AE:DB:B8:3A:C7:42:4F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z7-2YdauExILz7v7MK7buDrHQk8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:8b:4f:70:06:ea:69:28:6a:1f:1b:f3:1d:25:b3:a0:f3:
         72:8e:fa:f5:1d:04:d2:e4:19:3a:f0:33:88:77:03:78:25:37:
         98:1d:83:f9:4e:8f:5a:54:c0:01:e7:09:44:26:fb:4b:84:73:
         3d:a5:0e:06:9c:c0:f9:6f:52:d8:fd:8c:11:1a:72:88:c8:f1:
         4a:67:20:91:fb:7a:52:e9:8b:8f:0b:72:44:c7:68:2e:fa:a6:
         23:0c:4d:9d:42:6a:71:82:93:ac:4f:d2:54:9d:33:15:0c:0f:
         a1:a8:31:3d:13:ea:11:b6:7f:79:65:40:99:fb:cf:ba:24:48:
         35:da:18:e3:b4:25:1f:19:3d:d8:02:74:ad:be:fd:a8:48:20:
         06:3d:15:46:e6:4e:a5:2b:c7:cd:8b:eb:4d:52:55:19:80:72:
         87:05:49:a3:7f:f3:2c:38:b4:3c:a9:0d:56:a3:37:bd:d3:5c:
         19:2a:3c:44:40:73:23:9d:26:8c:fb:57:40:c6:f0:90:35:ba:
         39:56:48:df:da:c4:dc:23:6e:35:13:e5:a4:36:73:ea:05:8f:
         7a:21:aa:5c:0d:62:f0:c5:4e:70:63:c0:9d:1a:8e:83:c2:87:
         3c:a7:39:81:9d:35:57:0e:7e:c4:32:68:f0:c4:2f:22:6a:97:
         de:f1:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----