Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHfPWt0A6w7M96OedfaXg-p8Rm4.roa
File:                     cHfPWt0A6w7M96OedfaXg-p8Rm4.roa (raw, json)
Hash identifier:          nNkBMNF91zlO6NCMTgnPMmE+VGiWfPyQ9Nekkm50NXo=
Subject key identifier:   70:77:CF:5A:DD:00:EB:0E:CC:F7:A3:9E:75:F6:97:83:EA:7C:46:6E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F71
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHfPWt0A6w7M96OedfaXg-p8Rm4.roa
Signing time:             Tue 06 Sep 2022 02:28:49 +0000
ROA not before:           Tue 06 Sep 2022 02:28:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18429
IP address blocks:        118.232.199.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8049 (0x1f71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  6 02:28:49 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7077CF5ADD00EB0ECCF7A39E75F69783EA7C466E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:21:91:ae:33:4a:64:88:16:f1:40:17:05:
                    2e:3d:67:12:b7:b4:27:92:33:ef:b8:ed:84:cf:6a:
                    05:dd:1d:3b:13:4b:0d:b2:6c:0a:f6:fa:72:31:e9:
                    19:8c:5a:2a:71:de:7d:85:98:e1:e4:5d:6b:b1:e5:
                    5e:6d:19:19:ce:52:37:fb:91:2f:7c:e0:dc:04:c0:
                    a1:11:8d:25:47:e1:e9:90:cc:37:bc:77:2e:89:b4:
                    63:a7:7a:3a:7d:cb:48:9e:a3:65:1d:29:9a:bc:c8:
                    3d:6c:1d:40:65:8b:fd:6e:01:95:6c:c0:bb:08:89:
                    c2:6b:08:5e:31:fa:b6:eb:cb:e6:fc:f0:91:f5:e7:
                    f8:4c:b8:bc:36:7a:4c:fd:a0:db:c2:63:47:60:fb:
                    3b:d7:db:04:f0:90:fd:0f:bd:b0:f2:6a:16:dd:81:
                    ff:14:6e:06:63:3d:95:ec:69:0e:d8:41:a0:2a:48:
                    4f:ae:05:90:56:e4:fa:d3:3d:c5:9d:9c:1f:56:81:
                    c9:35:7e:3c:0d:09:09:04:03:96:4f:d1:df:7b:e4:
                    8a:43:c3:16:96:94:64:6d:89:ab:d4:33:70:aa:37:
                    d5:15:1e:44:12:5a:1b:63:82:c8:7d:74:c8:a4:b6:
                    4b:94:ba:96:40:b9:97:08:0c:08:b7:cf:4a:86:3b:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:CF:5A:DD:00:EB:0E:CC:F7:A3:9E:75:F6:97:83:EA:7C:46:6E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cHfPWt0A6w7M96OedfaXg-p8Rm4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.199.0/26

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:3a:75:05:5c:e0:76:f6:e5:55:e5:c6:83:e0:7d:38:fc:
         21:64:24:5a:0d:ca:ea:8a:bf:03:99:28:fc:8e:eb:7a:37:3a:
         5b:81:69:4b:ec:c1:20:49:5a:83:6c:5f:51:0e:3c:14:74:c7:
         44:2d:a9:09:cb:5d:e1:f7:6f:4e:82:03:54:5c:89:f6:12:6d:
         67:e9:b9:fa:24:81:e3:47:a1:68:e1:75:ef:3e:a8:a5:ff:93:
         3a:ba:75:c6:13:f2:ad:28:a9:fb:3c:41:cb:97:7b:1f:cd:37:
         74:d6:b3:01:4c:2d:41:2b:18:3e:b3:e9:ee:e7:7b:8d:71:e7:
         59:41:e0:52:0f:a5:18:9e:80:6a:8e:64:96:a0:c5:35:83:f8:
         65:15:1d:29:18:bf:5d:85:85:34:0e:ac:a6:2c:27:cd:4d:ba:
         9e:03:71:21:b4:2c:9c:6c:0e:f7:3f:d2:7a:dc:99:7f:d2:24:
         d3:72:11:e0:e3:c8:8b:18:c7:8d:80:f0:4a:5d:16:2d:2f:71:
         6e:c1:cf:f0:3c:c8:e7:28:77:f2:4e:f5:2b:c1:a3:93:24:78:
         c8:7f:b7:d0:fb:fb:21:ba:f1:91:a6:bd:52:d6:6c:10:51:9c:
         a6:65:80:86:6e:9b:24:da:fe:84:e5:d8:d0:e5:8b:6e:5b:8d:
         80:b9:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----