Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvZPpTYmH-MwARCw8uYyOReIHFI.roa
File:                     cvZPpTYmH-MwARCw8uYyOReIHFI.roa (raw, json)
Hash identifier:          aVek8RtkDRGinwJl+G+83l7XhnVfZ8D6mQejxXR3VL0=
Subject key identifier:   72:F6:4F:A5:36:26:1F:E3:30:01:10:B0:F2:E6:32:39:17:88:1C:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvZPpTYmH-MwARCw8uYyOReIHFI.roa
Signing time:             Wed 29 Sep 2021 02:45:25 +0000
ROA not before:           Wed 29 Sep 2021 02:45:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6785 (0x1a81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=72F64FA536261FE3300110B0F2E6323917881C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:35:ff:46:1e:57:6d:7f:9a:60:b0:d5:44:
                    16:71:37:8b:fd:2e:66:98:53:d6:04:ce:51:97:98:
                    14:23:71:ab:9e:9f:26:51:b1:25:14:ba:3a:a6:29:
                    8d:b1:60:aa:bd:24:06:b5:b6:6f:74:8c:11:24:0f:
                    7b:5a:88:b7:c6:8b:7a:3e:1b:0f:39:a4:5f:0a:79:
                    dc:08:ab:59:d6:e2:10:f6:75:46:fa:33:1d:c2:90:
                    04:a9:ab:d7:33:a3:de:5c:86:9c:f1:4a:80:25:9a:
                    87:93:27:f4:86:a2:14:b4:bb:da:22:10:ac:6f:97:
                    d0:28:8a:1c:f8:d2:7e:c0:01:e5:68:99:3c:4b:61:
                    0a:2a:4d:8a:93:a8:47:e1:e2:7f:f7:64:ea:7a:19:
                    98:24:46:72:4a:64:e5:34:3c:d2:89:92:ed:90:6e:
                    fa:52:b2:61:37:58:3b:f8:c9:d8:30:2d:6f:c8:be:
                    9e:f0:ef:2a:13:13:d5:44:93:e0:54:2a:4d:a0:68:
                    e8:8c:7f:73:a4:6b:ed:c8:52:97:cf:06:b5:b6:d6:
                    24:c7:92:c0:fd:6d:db:87:38:4d:d2:41:fa:38:2a:
                    45:54:3f:fc:a8:f7:eb:b3:19:0c:de:6e:bb:48:4e:
                    bb:36:2c:cd:33:56:47:84:80:b0:b3:16:f0:88:8d:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:4F:A5:36:26:1F:E3:30:01:10:B0:F2:E6:32:39:17:88:1C:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvZPpTYmH-MwARCw8uYyOReIHFI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:15:8f:67:11:e9:d5:3e:dc:53:cc:bb:99:f7:09:11:b3:8d:
         65:28:aa:3d:8c:b6:0b:07:b2:84:4b:c0:bb:0f:4c:1d:fd:a4:
         75:0c:73:59:d9:5c:92:de:2a:0f:8a:7a:61:f0:bc:c5:b4:0e:
         50:9f:d2:d2:7e:e9:94:90:d6:19:44:75:ae:f8:dc:57:8c:87:
         72:34:e9:9d:d0:1a:02:d7:39:f0:fc:2a:30:b9:14:c8:0f:15:
         81:8d:ef:0d:c4:1e:c2:19:46:71:07:6d:40:2f:54:67:d4:91:
         cb:aa:a7:a0:f8:30:f8:96:a2:20:82:dc:21:28:44:ad:d4:77:
         f6:ef:81:ac:f9:07:fe:8f:ce:6d:06:f7:08:d8:55:fa:f2:6e:
         cb:a3:91:e1:59:b8:b8:55:e4:d1:b1:95:e1:53:df:b9:38:f9:
         8f:fb:c7:c7:ce:09:65:03:e6:e9:d9:1b:0a:77:5d:65:96:5d:
         05:5a:47:f9:f9:f8:a2:7e:5b:e6:56:a5:2d:79:24:88:f2:c7:
         5d:e9:53:e6:f1:44:08:90:31:5e:0f:3e:1a:63:a4:48:f2:bd:
         f2:26:9b:17:d6:a1:15:66:04:07:07:f8:25:11:0d:85:9a:86:
         c9:92:f2:1f:d2:39:dc:01:dc:6e:c0:b2:a0:1b:f0:f4:30:5b:
         30:9a:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----