Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctpqSnoxivvCi82j_u9mAqzqkis.roa
File:                     ctpqSnoxivvCi82j_u9mAqzqkis.roa (raw, json)
Hash identifier:          qPV5z/KPMO5eT2yq8KemDHbL7nKY5S0XRZpzYVkaai8=
Subject key identifier:   72:DA:6A:4A:7A:31:8A:FB:C2:8B:CD:A3:FE:EF:66:02:AC:EA:92:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C08
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctpqSnoxivvCi82j_u9mAqzqkis.roa
Signing time:             Wed 29 Sep 2021 02:47:18 +0000
ROA not before:           Wed 29 Sep 2021 02:47:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        211.76.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7176 (0x1c08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=72DA6A4A7A318AFBC28BCDA3FEEF6602ACEA922B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:b1:45:7d:c8:e6:5c:f5:2a:fe:c2:ab:c6:
                    1d:4a:f0:3a:b3:6f:9c:6d:0d:82:c2:61:e7:a7:77:
                    4b:67:c3:9a:90:35:00:a9:fe:29:a5:31:62:25:8d:
                    61:0f:5b:68:a1:60:d5:77:dd:22:c8:b3:5e:29:58:
                    66:36:66:04:a8:1c:21:9b:6b:91:a7:82:a5:36:70:
                    ae:9f:9c:c2:cf:cc:61:79:e2:79:c7:b2:bd:41:70:
                    8a:84:d2:8d:eb:f4:70:eb:e5:bc:92:7a:e7:b6:0a:
                    87:0d:7e:23:de:62:0e:54:0c:91:ee:b0:87:d6:e2:
                    34:2b:23:f6:80:72:4f:19:25:2b:b4:79:d6:27:01:
                    dc:ee:f3:17:65:72:b6:7d:6f:42:0a:a9:90:9c:d2:
                    5e:13:35:7d:e6:6d:68:f1:18:c5:7b:cf:f5:bf:1b:
                    33:3b:da:84:19:ad:70:eb:40:33:04:fd:0d:f5:b8:
                    c3:62:88:7c:1e:1b:42:3c:2d:6b:26:41:33:af:97:
                    70:6a:e7:35:f1:2c:0e:c7:57:41:76:93:f1:47:b8:
                    59:d6:81:7f:7e:6a:d7:b3:32:67:4f:68:39:8a:78:
                    1a:04:36:49:f0:9b:22:39:0d:58:2a:0f:75:2b:3e:
                    61:91:6c:97:7b:d6:4c:ab:8f:8c:4a:46:f5:03:31:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DA:6A:4A:7A:31:8A:FB:C2:8B:CD:A3:FE:EF:66:02:AC:EA:92:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctpqSnoxivvCi82j_u9mAqzqkis.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:75:ae:87:9d:7c:62:d7:4d:09:9b:8a:19:99:72:d4:f7:1c:
         5f:e4:40:45:c5:da:ac:e6:9b:30:89:40:81:b0:66:73:54:e7:
         fb:22:99:38:14:a0:38:b4:4a:ca:d6:54:41:62:f5:f4:85:44:
         48:26:c8:fb:85:db:dc:0e:22:2e:69:58:64:cb:82:f6:4e:98:
         f8:3b:27:0a:2f:39:bd:2a:5b:f2:fd:72:8d:db:29:ce:b7:6e:
         6c:00:1a:3a:ef:0a:e7:44:40:0a:99:07:dc:2f:c2:a1:f9:e7:
         8c:86:5c:8b:b0:41:5e:6b:3a:5b:21:42:eb:6d:cc:49:b9:50:
         c0:0a:99:4f:18:33:a6:84:fb:d7:d6:37:9a:50:d7:47:f8:ba:
         ce:25:4e:14:17:a1:36:e7:7e:64:ba:a8:52:e7:ab:ae:dc:73:
         28:98:b6:fb:2a:fa:2e:56:71:c5:b4:a2:85:62:b7:9e:11:23:
         10:e6:ee:fc:c9:c2:93:e6:28:6b:4e:52:16:08:01:49:b0:45:
         c1:43:3d:b3:65:51:e1:69:e3:c2:88:1e:57:c1:52:3e:61:f9:
         d9:f3:d3:eb:d6:34:3c:3d:91:1c:00:9a:5c:bd:5f:1f:db:ef:
         24:40:a0:02:f9:80:ad:f0:ca:db:e0:35:4d:b0:1c:d6:22:db:
         d9:5d:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----