Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_fb6WD3DRu1iunZPK8VnOGmg4P0.roa
File:                     _fb6WD3DRu1iunZPK8VnOGmg4P0.roa (raw, json)
Hash identifier:          8Wg82GBqRkdX9MoZkVvRfJ1EGc0Ie9B0fy9ON3+OK54=
Subject key identifier:   FD:F6:FA:58:3D:C3:46:ED:62:BA:76:4F:2B:C5:67:38:69:A0:E0:FD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1E39
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_fb6WD3DRu1iunZPK8VnOGmg4P0.roa
Signing time:             Wed 27 Apr 2022 08:39:04 +0000
ROA not before:           Wed 27 Apr 2022 08:39:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7737 (0x1e39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Apr 27 08:39:04 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FDF6FA583DC346ED62BA764F2BC5673869A0E0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:3c:07:49:b7:da:75:40:ec:6f:10:c5:55:
                    6d:77:5b:21:8e:e1:c9:2f:18:cd:59:2f:4a:e7:d6:
                    56:ff:b6:36:f0:d8:4b:ea:90:b7:6d:62:d6:e1:b0:
                    54:70:ab:b3:08:7d:28:31:4e:62:96:f6:6b:bf:04:
                    ff:c0:fb:62:91:5d:d2:73:01:31:93:9d:62:17:12:
                    98:a3:e7:b2:53:e1:7a:f0:61:33:58:77:19:e3:37:
                    9c:59:bc:5b:fa:f9:11:e0:4e:bb:1a:2a:fa:bd:44:
                    de:c9:a5:3c:69:8c:63:1d:47:48:3f:f0:15:75:b3:
                    49:25:de:a6:cc:81:c5:39:22:a4:b9:d0:df:47:84:
                    b8:11:1b:ed:53:cc:95:4b:54:d3:55:ee:ac:fb:00:
                    48:9d:a6:15:5e:72:73:72:4a:db:3e:f6:73:70:83:
                    ee:92:7f:c2:ed:17:72:c0:50:66:b6:b5:b0:9d:c7:
                    7b:ae:97:7a:95:4f:b8:13:d7:1e:af:bd:60:b5:08:
                    e2:d0:da:96:dc:06:56:f9:51:c9:f8:63:f2:2c:ce:
                    df:ea:b8:db:7e:df:ff:94:b2:fa:47:4e:d6:61:43:
                    f8:01:2d:aa:76:6e:9f:b2:b6:b3:59:7b:e8:4e:69:
                    96:f8:42:c6:f9:98:23:16:6b:a3:97:02:72:81:af:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:FA:58:3D:C3:46:ED:62:BA:76:4F:2B:C5:67:38:69:A0:E0:FD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_fb6WD3DRu1iunZPK8VnOGmg4P0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:b3:be:d9:57:8d:a6:68:9d:24:86:16:9d:08:a3:c0:0e:
         c9:7a:af:37:3d:55:b3:9d:d3:56:7e:59:03:a8:ab:3e:ce:ab:
         14:81:7e:55:2f:63:a7:72:48:8d:5b:76:d7:75:8d:bd:d0:d0:
         d3:b6:52:56:c2:fc:bb:33:4b:3f:bf:64:fe:ff:9e:74:2d:b3:
         93:b8:e7:63:61:51:45:5c:4d:ff:f5:3e:be:01:b2:fc:c5:98:
         e6:96:66:ad:aa:7a:cb:88:30:2f:28:e3:0a:e6:0d:06:64:a5:
         69:4a:88:9d:ca:63:cd:45:99:19:cf:de:63:3f:89:58:1e:8f:
         2f:c5:e6:3f:89:d4:83:bd:b9:d6:21:e2:e6:46:7f:57:00:7e:
         72:f4:82:15:f7:7a:2b:3d:f8:74:81:53:e7:3c:75:2b:92:6d:
         8b:f6:a4:38:cf:8f:c4:97:cb:e1:f6:c2:2b:14:eb:44:81:53:
         0c:a0:06:7b:10:2a:5d:9e:a9:90:9d:26:ae:b1:de:54:21:4b:
         69:be:75:9e:f3:4b:a4:2a:15:50:88:15:72:9f:f3:f2:d1:59:
         34:3a:c8:15:49:76:81:8a:6b:d3:18:6e:6f:53:6b:55:06:8e:
         8e:1f:ba:9e:8e:6e:26:25:f9:6e:d5:de:ed:b9:d0:61:c8:0a:
         6f:6b:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----