Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c10HOCBeUNXaMqHEb92iubH4mEQ.roa
File:                     c10HOCBeUNXaMqHEb92iubH4mEQ.roa (raw, json)
Hash identifier:          q/OvL60abbrIY33HlFP+2mPZY7KvgTpFD13yeRWZWPY=
Subject key identifier:   73:5D:07:38:20:5E:50:D5:DA:32:A1:C4:6F:DD:A2:B9:B1:F8:98:44
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B0B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c10HOCBeUNXaMqHEb92iubH4mEQ.roa
Signing time:             Wed 29 Sep 2021 02:46:03 +0000
ROA not before:           Wed 29 Sep 2021 02:46:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6923 (0x1b0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=735D0738205E50D5DA32A1C46FDDA2B9B1F89844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:96:44:fe:fc:1c:eb:ec:73:1d:94:a4:49:
                    74:bb:31:56:57:6c:91:11:f7:cd:bb:e2:42:7f:37:
                    18:58:58:d5:d9:aa:7e:c8:e7:27:c6:fc:e0:e7:fc:
                    fa:89:86:09:15:1d:ee:c7:57:11:75:c7:1b:44:5e:
                    bf:ae:c7:c9:04:18:b4:df:a9:62:0e:73:7b:72:a9:
                    90:23:8f:1c:32:5f:96:f4:00:78:0e:62:2e:a1:26:
                    a3:cf:90:7f:ea:61:42:5a:6b:4d:e3:58:28:88:a9:
                    53:df:b7:26:ca:2c:01:c3:a4:df:fd:f4:11:74:46:
                    ab:97:ff:27:31:8a:91:39:de:1b:23:28:19:8d:88:
                    0a:27:a8:7a:b4:db:65:b9:1f:b0:23:c6:a7:0b:09:
                    fe:0b:a8:81:28:44:6c:da:1b:eb:18:fc:c7:d6:af:
                    c6:75:e2:23:43:8c:d6:39:51:96:63:46:dc:0d:62:
                    a5:f8:fb:51:a5:c0:bd:c9:cc:11:39:cb:d8:17:71:
                    23:b1:f2:0d:0a:6d:01:2c:88:95:c2:be:34:80:33:
                    7a:0b:f1:55:63:cf:cb:bb:83:f2:5d:40:3a:ae:07:
                    d7:67:74:0e:70:d2:1f:67:5b:1e:26:84:b7:41:a3:
                    c5:7d:ca:4c:a4:e7:8d:e7:57:5a:94:05:2c:87:da:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5D:07:38:20:5E:50:D5:DA:32:A1:C4:6F:DD:A2:B9:B1:F8:98:44
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c10HOCBeUNXaMqHEb92iubH4mEQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:70:10:0d:95:6c:94:47:b5:0e:ba:de:c5:09:0b:a5:9a:36:
         2c:11:15:d0:53:fc:b9:8b:01:0d:25:09:e6:7e:72:f0:8e:cc:
         02:16:5b:44:f0:81:88:e2:84:e1:45:ef:06:9c:50:f2:04:c6:
         ee:dc:b6:76:17:a1:d8:d6:a0:6e:ea:d6:3b:0c:ca:5d:70:66:
         2d:ac:db:e9:50:80:da:6f:50:6a:fa:aa:02:ff:46:fb:db:16:
         40:5c:66:b5:7f:be:fc:58:4b:e1:9d:38:eb:79:83:62:9d:d2:
         6b:92:e4:91:70:50:42:b9:c4:a8:d8:76:ac:6f:ea:8c:7c:0b:
         53:b3:06:63:82:5d:15:aa:27:74:18:2f:0c:ee:3e:6c:1d:85:
         c6:ab:1c:87:d4:0b:29:0e:67:12:67:bc:c6:a9:0f:28:b7:39:
         69:30:41:c5:bc:12:fc:44:a1:07:e9:ca:9d:38:1a:13:c7:09:
         54:d5:97:5f:e4:e7:6f:1d:c1:88:4f:ed:18:90:e9:d2:c6:93:
         4f:c4:8c:8a:74:c5:ca:55:6f:6e:4c:d8:7c:51:94:cb:96:e2:
         14:ef:76:45:76:f2:ad:3e:1a:9f:68:23:a3:57:1e:22:2c:f9:
         96:bf:39:99:01:46:de:61:c2:6c:d2:dc:08:75:37:20:df:8e:
         c0:7b:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----