Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_mYaNyBF0gVWS8W0Cx6q_cYdFdM.roa
File:                     _mYaNyBF0gVWS8W0Cx6q_cYdFdM.roa (raw, json)
Hash identifier:          PJaJOi1qgR0gJNeqvOVAtZSdNXDlrsTsKVBNvn0f/IE=
Subject key identifier:   FE:66:1A:37:20:45:D2:05:56:4B:C5:B4:0B:1E:AA:FD:C6:1D:15:D3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D5A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_mYaNyBF0gVWS8W0Cx6q_cYdFdM.roa
Signing time:             Wed 29 Sep 2021 02:48:53 +0000
ROA not before:           Wed 29 Sep 2021 02:48:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        211.76.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7514 (0x1d5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FE661A372045D205564BC5B40B1EAAFDC61D15D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c3:85:15:c2:6c:09:96:01:7a:f8:22:aa:63:
                    a0:61:a5:5a:c4:4c:a5:5d:a2:6a:50:ad:8a:e5:98:
                    e0:33:3f:8f:64:8e:5d:20:f1:c7:0a:1e:09:ab:49:
                    dc:cd:83:7b:ec:02:99:0e:8a:cc:5e:60:cb:bb:c7:
                    90:6c:df:bb:15:53:b4:59:37:d4:c1:9d:6d:d3:73:
                    18:c4:d0:d3:00:ee:68:60:a1:24:e8:5b:e5:67:5c:
                    46:c8:dd:dc:03:75:c2:12:d9:f2:9b:5c:5d:6c:1b:
                    a5:f8:2e:8e:10:e4:38:d2:84:04:b6:42:8b:be:44:
                    0e:f8:3c:ea:2a:66:99:0b:75:b9:97:b4:22:70:fc:
                    8d:5f:2f:b3:9d:26:bc:b1:12:5c:17:c9:6f:5e:71:
                    7b:a4:72:a8:21:79:95:6d:4f:04:af:88:5a:d7:de:
                    86:2f:35:db:9f:96:8e:d1:3c:15:67:63:23:7b:02:
                    38:7b:c3:69:7c:f9:37:28:1a:fe:3d:b5:56:5f:cc:
                    f8:f9:f9:9c:e8:e3:62:07:fb:39:ad:2f:64:ad:c5:
                    37:85:70:c4:a4:32:c0:4d:7f:78:1b:9b:75:0e:e4:
                    0b:b2:c7:13:e0:8d:de:6b:e6:3f:7a:25:85:aa:06:
                    c5:4a:83:83:4f:0a:39:c8:62:e1:ad:c0:80:bd:d4:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:66:1A:37:20:45:D2:05:56:4B:C5:B4:0B:1E:AA:FD:C6:1D:15:D3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_mYaNyBF0gVWS8W0Cx6q_cYdFdM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:25:04:78:b0:e8:69:c4:1f:8e:1d:4d:c3:6e:16:9a:94:ce:
         86:e2:27:b7:48:91:b2:01:8a:f8:9a:86:23:3b:db:4b:c9:87:
         8c:ee:fc:21:ce:4a:9a:07:00:c8:73:f0:f5:dc:94:8f:86:c9:
         9d:c6:8d:b9:d5:8a:69:a2:95:19:4c:14:a0:32:f3:70:b2:b0:
         d4:d8:d6:d3:9d:1b:4f:61:8d:eb:32:4d:fd:62:bb:86:30:28:
         cc:e9:5f:c1:2f:cc:52:c3:58:45:10:9d:1e:59:40:8a:ab:99:
         21:9d:34:7b:22:e3:c7:33:f1:12:cb:8d:43:f4:6c:23:b1:f1:
         a8:68:d0:2e:9b:63:79:e8:05:71:c3:4f:2f:38:a8:27:5d:05:
         55:67:b6:30:e6:92:39:28:88:38:2f:f9:f2:4f:4a:c5:f8:03:
         e1:2f:e2:3f:ed:2a:22:a8:99:45:22:8b:8a:42:b0:3d:10:62:
         d0:f1:4b:f3:91:d9:63:e2:64:6d:28:f5:85:c4:2d:01:cf:a1:
         2e:f3:07:c6:33:2e:60:f9:62:90:b5:5a:12:f6:a7:0a:aa:15:
         a4:74:36:d6:8e:ba:56:55:54:1b:65:d3:fd:2f:0a:8d:12:4f:
         a2:34:11:44:5c:6e:be:76:77:ca:4c:ad:f3:61:4d:64:d7:d5:
         2f:ec:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----