Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/drCsXcIJwmdqlpmNIRndvPwBQbs.roa
File:                     drCsXcIJwmdqlpmNIRndvPwBQbs.roa (raw, json)
Hash identifier:          ybsVbmkJWRDU6GwRUNufUsZFWS/ZRKVe+tpeoMR5CNw=
Subject key identifier:   76:B0:AC:5D:C2:09:C2:67:6A:96:99:8D:21:19:DD:BC:FC:01:41:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D1F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/drCsXcIJwmdqlpmNIRndvPwBQbs.roa
Signing time:             Wed 29 Sep 2021 02:48:38 +0000
ROA not before:           Wed 29 Sep 2021 02:48:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7455 (0x1d1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=76B0AC5DC209C2676A96998D2119DDBCFC0141BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:ea:84:d4:e8:b0:8e:5f:fc:28:ed:e4:0b:
                    06:98:8e:40:32:16:a1:aa:6e:67:25:15:3f:a6:92:
                    8a:96:c1:aa:92:92:78:01:31:45:3b:1f:e9:27:51:
                    85:d1:55:59:c4:b1:27:b4:ab:9a:d0:a7:f0:ca:02:
                    a1:eb:b7:f6:38:35:7c:89:6d:0f:a3:b1:73:8b:47:
                    34:73:12:20:6a:a1:f8:87:82:24:52:c3:9a:c0:fa:
                    92:f6:38:68:56:a6:f7:9f:34:79:2a:54:e0:06:35:
                    75:07:8d:5d:3d:e8:4b:40:b1:28:78:88:05:3c:da:
                    2d:47:25:aa:43:b8:88:6c:b9:8a:18:a6:01:cc:de:
                    22:64:cb:7b:f5:b3:d9:45:05:ad:61:fd:5a:89:84:
                    2d:de:4e:9a:bc:1c:6d:a8:37:d1:e6:66:fc:d8:61:
                    30:3f:3c:25:cc:3e:9e:3b:a9:1a:98:50:09:40:08:
                    66:e8:e2:f2:e8:e6:d1:89:35:f8:ad:94:f4:78:a6:
                    2a:10:a2:07:52:5a:a6:fe:31:ac:10:91:d7:a7:be:
                    63:e6:19:59:53:32:c4:da:b6:ef:b4:e2:f5:72:8b:
                    5c:fc:20:04:0a:df:8a:bb:92:42:46:42:c2:03:99:
                    c0:11:f2:5a:2d:6e:7a:44:15:ef:4d:ba:6b:8c:e4:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B0:AC:5D:C2:09:C2:67:6A:96:99:8D:21:19:DD:BC:FC:01:41:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/drCsXcIJwmdqlpmNIRndvPwBQbs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:ad:01:53:8a:cd:2d:e0:49:64:31:43:b4:2d:8e:ba:0a:
         ae:e8:ab:02:8c:29:2a:9b:f5:3c:2a:cb:b4:bd:6c:9b:28:f5:
         da:71:3a:e6:87:5a:ef:93:31:67:89:1c:84:1e:0b:1a:02:97:
         a0:96:a5:00:f0:7b:ab:25:28:da:26:9d:f1:8b:c2:d7:36:c0:
         dd:df:55:55:cb:0c:83:5c:32:6b:c8:3c:99:08:d4:b0:b1:12:
         e7:55:79:2a:62:31:42:d5:0a:b7:f4:02:6e:ee:a9:53:9f:09:
         1d:5b:ba:cd:d2:f4:d3:6b:91:a8:c1:5d:9e:c6:29:c5:1c:62:
         69:b9:1a:2e:a5:6f:dd:fa:f1:32:20:57:b5:2a:26:83:60:4f:
         12:f7:b0:8a:8f:47:40:63:e3:4c:c1:08:ae:a5:f9:4c:f1:ae:
         85:b8:3c:f3:6b:a1:3c:ba:84:05:b3:b1:b2:39:91:5f:a8:31:
         ab:48:49:20:90:d4:74:ab:19:11:8f:ad:8f:9c:39:d3:d4:00:
         c5:0f:c7:0e:3f:51:f6:c3:17:03:8e:88:35:ba:fe:87:de:c0:
         ee:e9:38:a5:33:e1:64:d5:75:3b:55:f5:13:9b:89:f7:0f:29:
         64:66:6c:2e:42:2f:fb:a6:ca:38:82:56:ad:af:ce:43:ef:88:
         43:4f:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----