Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e4S_H0TjcKcrjrPzxOCrMawVwu0.roa
File:                     e4S_H0TjcKcrjrPzxOCrMawVwu0.roa (raw, json)
Hash identifier:          9TD7T/rSgl1snhe04Nr/KF8RfofcHT5Yr9CwKnQ3Xvc=
Subject key identifier:   7B:84:BF:1F:44:E3:70:A7:2B:8E:B3:F3:C4:E0:AB:31:AC:15:C2:ED
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AE2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e4S_H0TjcKcrjrPzxOCrMawVwu0.roa
Signing time:             Wed 29 Sep 2021 02:45:52 +0000
ROA not before:           Wed 29 Sep 2021 02:45:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6882 (0x1ae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7B84BF1F44E370A72B8EB3F3C4E0AB31AC15C2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:35:41:21:73:c5:8a:cc:bd:48:0a:0e:64:
                    d2:0a:9d:b3:be:98:75:63:c7:3d:ae:d7:fd:e1:0d:
                    2b:81:ab:70:32:e6:ab:a6:50:a4:54:f7:30:1c:b9:
                    30:85:83:95:b2:f2:85:f7:07:64:30:5f:37:ce:a2:
                    e1:7b:d1:57:c1:f2:fe:80:21:16:14:cc:12:ae:1d:
                    46:d1:47:29:a9:25:4b:27:37:ec:23:c0:df:83:d5:
                    2d:12:ce:6c:1d:61:5f:8e:f1:65:ca:6b:73:cd:70:
                    7f:9c:23:23:a3:ed:d7:03:c9:64:37:1e:70:54:3b:
                    c3:c9:4b:fc:57:ac:43:49:c8:2e:b0:68:dc:2b:93:
                    8f:90:17:17:f4:6a:8b:57:57:17:6b:b0:8e:a2:ad:
                    fe:2c:16:b8:d6:98:20:64:6e:8e:47:ee:7a:2b:52:
                    a2:39:8f:2d:2f:aa:f5:2a:33:44:e0:be:73:b3:49:
                    08:1f:7f:ee:6d:16:3c:d6:6f:b6:ac:b3:a9:18:b9:
                    48:2f:4b:dc:b5:34:5d:41:63:39:d8:a8:29:79:0b:
                    72:99:48:fa:1b:62:c3:ed:88:4a:30:a0:8b:c8:7f:
                    46:f2:70:7f:dd:ac:7f:f9:6d:92:9b:e9:07:98:ef:
                    69:96:1c:42:e4:2f:a8:b8:6a:b9:40:54:c2:50:3b:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:84:BF:1F:44:E3:70:A7:2B:8E:B3:F3:C4:E0:AB:31:AC:15:C2:ED
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e4S_H0TjcKcrjrPzxOCrMawVwu0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:c2:85:94:92:ed:fa:62:e0:7d:32:6d:5d:f9:74:c9:c2:
         f1:57:96:88:35:42:d2:30:36:ae:a3:76:e3:9c:4a:53:92:34:
         c8:67:9c:62:79:27:7c:5a:74:c6:dd:43:b9:72:d2:01:d9:e0:
         c3:e2:6d:12:77:60:4e:b7:1a:44:60:ac:9f:1c:2b:eb:25:3b:
         0f:a3:91:a6:af:fe:fe:ed:28:91:c7:ce:df:2f:c1:82:e2:bf:
         4e:ca:b2:0c:49:2a:9b:dc:30:cb:07:26:97:0c:c8:21:79:45:
         e5:6f:70:4f:34:98:96:4f:ad:66:e1:68:1d:c7:5c:f5:f9:54:
         63:e6:d4:c8:7e:29:c1:22:2d:db:6d:13:78:dd:0d:78:60:4a:
         7d:06:21:79:66:72:f7:01:68:50:99:57:4b:23:73:95:f8:e9:
         32:93:c4:fa:ed:ce:08:36:4f:fd:71:88:70:87:ef:60:67:f6:
         cc:80:91:c2:67:d8:89:a7:26:c1:87:1c:d4:d5:fe:5b:3e:9d:
         e9:e4:01:b5:0f:de:8e:96:87:16:30:72:72:ab:a4:d1:7f:9a:
         ff:15:64:ba:59:5c:36:f7:cb:a0:1e:d5:96:72:41:fa:24:e6:
         93:88:ed:d8:af:5e:21:17:8d:c1:36:19:4f:40:8f:4f:94:50:
         fc:6c:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----