Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdd_u27ZHAcsCoVgiDwPyHb964s.roa
File:                     bdd_u27ZHAcsCoVgiDwPyHb964s.roa (raw, json)
Hash identifier:          sMplptPuZTfBof8mtzjHKwRaoZVVU33ME9qg8y8uoN4=
Subject key identifier:   6D:D7:7F:BB:6E:D9:1C:07:2C:0A:85:60:88:3C:0F:C8:76:FD:EB:8B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D58
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdd_u27ZHAcsCoVgiDwPyHb964s.roa
Signing time:             Wed 29 Sep 2021 02:48:53 +0000
ROA not before:           Wed 29 Sep 2021 02:48:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        211.76.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7512 (0x1d58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6DD77FBB6ED91C072C0A8560883C0FC876FDEB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:df:15:d8:3f:aa:49:ed:31:5c:1c:02:48:
                    df:14:25:b8:2d:8e:78:62:cd:18:f3:78:1c:bc:73:
                    6e:18:d7:fd:ae:90:84:c6:38:d8:ce:15:5a:9f:e0:
                    b7:29:49:4b:18:92:07:07:85:33:a2:f2:a9:35:e9:
                    38:87:11:d2:48:8c:60:14:a9:36:b4:03:d9:6f:80:
                    8b:4d:13:97:85:36:ea:b8:05:1b:16:cf:3d:85:bd:
                    ec:17:4d:02:23:8a:bc:d8:54:66:fb:64:fe:a8:08:
                    3e:9f:a3:0d:d6:92:ae:06:85:fe:48:ae:de:74:d5:
                    52:53:f4:66:e6:dc:83:d4:dd:a4:c5:67:67:29:67:
                    04:7c:01:64:a2:5b:cc:46:64:7f:bf:8f:18:2f:7e:
                    51:c6:fd:be:23:e6:b9:65:bf:57:8e:2f:f3:f1:cc:
                    ca:de:c2:5a:87:3b:27:10:ac:54:eb:69:18:ed:0d:
                    ea:3e:44:42:3b:96:83:a6:9b:28:d4:ff:c1:45:80:
                    cd:30:70:f8:9e:03:ba:66:ac:45:f5:a3:8d:3f:01:
                    fd:cb:c4:62:ca:d2:64:53:2d:d6:09:3d:1e:0c:20:
                    c2:41:04:2b:00:d0:64:a9:82:03:70:67:e3:19:df:
                    51:d8:fd:d3:23:b3:26:b6:41:4e:63:30:14:84:b3:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:7F:BB:6E:D9:1C:07:2C:0A:85:60:88:3C:0F:C8:76:FD:EB:8B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bdd_u27ZHAcsCoVgiDwPyHb964s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:d8:07:20:93:be:f7:d0:5d:fc:38:27:69:51:1a:fc:0e:
         cb:9d:50:87:67:33:00:a7:6c:b9:99:36:36:75:15:43:7e:10:
         e1:94:db:49:89:ea:42:47:02:c4:7e:c7:9a:e2:28:fd:2a:67:
         47:df:26:c7:3c:e2:93:49:85:35:5a:62:a8:7d:85:52:20:40:
         b1:5c:f6:d7:5f:94:88:da:f3:9b:3a:35:22:8b:b8:20:5f:6a:
         4e:17:68:0c:46:59:b2:08:8f:2e:a9:11:7e:6c:29:56:38:67:
         8e:5b:e9:bc:6b:e5:b1:ad:c6:30:11:7c:df:c2:1b:34:63:60:
         d8:e1:a2:be:ce:d2:63:69:98:3c:25:79:f7:94:66:a0:f2:3d:
         86:d6:1c:2f:50:48:88:4b:2b:66:d3:fe:e8:b6:02:67:0e:2c:
         9a:78:59:39:e1:8b:e2:3b:ba:eb:53:d1:ba:d1:c1:78:07:fd:
         39:e8:fd:c0:f0:2c:30:39:aa:20:22:b7:e4:54:55:25:4f:3f:
         b3:5d:a4:66:06:8d:fb:1b:23:6a:11:f0:fb:49:16:a2:74:73:
         43:e6:a9:7b:20:fc:71:dd:20:70:1b:aa:42:1d:72:0b:f7:b6:
         13:b9:79:2d:b4:64:16:f3:9d:1f:04:d1:44:bb:8d:5a:db:db:
         6a:91:db:af
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZERDc3RkJCNkVEOTFD
MDcyQzBBODU2MDg4M0MwRkM4NzZGREVCOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbft8V2D+qSe0xXBwCSN8UJbgtjnhizRjzeBy8c24Y1/2ukITG
ONjOFVqf4LcpSUsYkgcHhTOi8qk16TiHEdJIjGAUqTa0A9lvgItNE5eFNuq4BRsW
zz2FvewXTQIjirzYVGb7ZP6oCD6fow3Wkq4Ghf5Irt501VJT9Gbm3IPU3aTFZ2cp
ZwR8AWSiW8xGZH+/jxgvflHG/b4j5rllv1eOL/PxzMrewlqHOycQrFTraRjtDeo+
REI7loOmmyjU/8FFgM0wcPieA7pmrEX1o40/Af3LxGLK0mRTLdYJPR4MIMJBBCsA
0GSpggNwZ+MZ31HY/dMjsya2QU5jMBSEswo7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbdd/u27ZHAcsCoVgiDwPyHb964swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JkZF91MjdaSEFjc0NvVmdp
RHdQeUhiOTY0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THEwDQYJKoZIhvcNAQELBQADggEBAFvQ2Acgk7730F38OCdpURr8DsudUIdnMwCn
bLmZNjZ1FUN+EOGU20mJ6kJHAsR+x5riKP0qZ0ffJsc84pNJhTVaYqh9hVIgQLFc
9tdflIja85s6NSKLuCBfak4XaAxGWbIIjy6pEX5sKVY4Z45b6bxr5bGtxjARfN/C
GzRjYNjhor7O0mNpmDwlefeUZqDyPYbWHC9QSIhLK2bT/ui2AmcOLJp4WTnhi+I7
uutT0brRwXgH/Tno/cDwLDA5qiAit+RUVSVPP7NdpGYGjfsbI2oR8PtJFqJ0c0Pm
qXsg/HHdIHAbqkIdcgv3thO5eS20ZBbznR8E0US7jVrb22qR268=
-----END CERTIFICATE-----