Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/daCrC3K6eMIKI89jDO4qWbzdOpw.roa
File:                     daCrC3K6eMIKI89jDO4qWbzdOpw.roa (raw, json)
Hash identifier:          IwVYHRY1AsRmyjddlrYD1/kX8gfEV8HlXphShp+68Fw=
Subject key identifier:   75:A0:AB:0B:72:BA:78:C2:0A:23:CF:63:0C:EE:2A:59:BC:DD:3A:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/daCrC3K6eMIKI89jDO4qWbzdOpw.roa
Signing time:             Sun 07 Feb 2021 12:23:03 +0000
ROA not before:           Sun 07 Feb 2021 12:23:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6073 (0x17b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:23:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=75A0AB0B72BA78C20A23CF630CEE2A59BCDD3A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:80:c4:6c:6f:95:82:36:be:37:67:51:2a:
                    4e:1d:00:8b:6b:2b:e6:eb:a6:48:3a:67:5e:9f:bb:
                    dd:b4:9b:48:94:67:f3:71:58:ab:83:3f:9f:ea:6c:
                    bb:3d:ea:26:a1:05:fc:93:69:8e:5a:d7:82:c4:72:
                    d5:9d:23:43:44:1a:1b:e3:67:d3:43:be:82:3a:33:
                    43:70:69:88:74:7e:df:a3:49:5d:91:72:f5:86:ed:
                    8a:c8:58:38:6a:db:77:62:9a:4e:52:e2:4f:5d:57:
                    3f:96:cb:e4:97:de:77:79:56:4e:a9:60:b4:67:16:
                    96:cc:c2:b4:25:5b:16:89:d2:ef:ba:35:0e:37:a3:
                    28:74:1c:7d:65:1e:80:e8:19:28:98:a5:f0:38:ec:
                    af:3d:d2:20:33:09:a9:ed:83:43:30:78:b7:6b:7a:
                    74:98:ad:59:6a:5b:11:31:72:f5:dc:f7:84:94:ed:
                    2e:e9:e9:05:4b:00:4e:c4:97:6a:c3:3f:40:e7:a7:
                    11:3e:4b:1b:d6:00:a1:69:56:aa:4e:11:c2:f4:a1:
                    c6:99:be:a4:97:d2:a2:77:98:8f:84:8c:79:f0:99:
                    fb:87:a7:a8:77:4a:3d:7f:86:a3:65:5f:2f:0e:a3:
                    54:b3:02:b3:05:9c:f5:64:01:3f:a7:af:43:08:de:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:AB:0B:72:BA:78:C2:0A:23:CF:63:0C:EE:2A:59:BC:DD:3A:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/daCrC3K6eMIKI89jDO4qWbzdOpw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:30:c8:90:42:18:e7:74:05:4e:4a:d6:0f:51:24:14:5e:
         db:11:83:a1:3c:12:12:99:f9:5f:aa:f3:41:b7:34:ae:42:9f:
         5a:6f:5d:da:b0:f7:cb:fe:02:0d:a4:d6:ce:d4:0b:c2:f2:8d:
         dd:67:56:d0:fa:d3:f5:55:6e:6b:c8:6c:2c:ca:52:7b:b0:e9:
         65:c5:ef:e1:39:21:03:c0:78:4d:3d:ef:e0:c3:0c:ae:5a:98:
         cb:0a:b0:c4:ff:0d:3b:dd:b1:c1:f4:69:72:00:13:35:44:8c:
         4b:90:45:06:d5:95:ee:e6:ec:ca:3f:ea:fe:5d:25:f9:5b:c2:
         8f:a9:31:c9:f9:08:2e:80:94:71:eb:5e:82:62:15:e3:e0:fc:
         1c:16:15:95:de:c6:38:76:af:97:73:52:ac:7c:79:9c:2c:1a:
         bf:5c:7b:ce:a7:8c:3e:27:60:aa:45:a1:f7:d1:9a:f0:30:45:
         aa:b6:04:54:3d:b2:4a:95:31:d3:ef:1e:f7:69:14:ee:77:4e:
         83:35:a1:88:29:ee:6f:f1:d1:c9:2b:22:d9:71:0c:d2:17:a8:
         0d:89:ce:e6:95:e8:2f:00:4f:b7:0f:5a:f4:04:e0:ff:4b:c6:
         6b:03:40:eb:de:ec:ae:2c:dc:62:c9:1c:fd:7c:bf:87:6e:9f:
         5c:7d:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----