Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eCL7mAvW3CINbiPI1r2JGcd7H4Y.roa
File:                     eCL7mAvW3CINbiPI1r2JGcd7H4Y.roa (raw, json)
Hash identifier:          MhNkQvru6NEnxUIZYUGUhTLAu8SJKuus7N24BHDNDd0=
Subject key identifier:   78:22:FB:98:0B:D6:DC:22:0D:6E:23:C8:D6:BD:89:19:C7:7B:1F:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CCC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eCL7mAvW3CINbiPI1r2JGcd7H4Y.roa
Signing time:             Wed 29 Sep 2021 02:48:13 +0000
ROA not before:           Wed 29 Sep 2021 02:48:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7372 (0x1ccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7822FB980BD6DC220D6E23C8D6BD8919C77B1F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:9e:39:be:11:07:e3:e3:d8:a4:34:5e:c5:
                    4c:7b:43:aa:7b:08:bc:b2:58:42:93:94:62:b6:4b:
                    fd:2d:3d:47:d4:1b:73:73:d4:d2:f0:fe:ed:a5:a2:
                    0b:4c:e3:4d:36:12:5c:6f:04:33:39:26:fc:c0:a1:
                    53:b7:f8:3e:e1:e4:f1:4d:e2:62:56:82:4d:cd:72:
                    5e:5f:c2:a2:9d:6d:ab:12:0f:a5:64:b3:6e:ae:87:
                    f6:5a:eb:45:d6:e3:8c:94:19:30:76:e1:31:4c:d7:
                    9b:22:0e:8c:c6:f6:e3:d8:5b:30:49:04:cd:35:4c:
                    01:26:c4:f0:7c:8a:42:c1:eb:f9:a7:60:3d:a5:5e:
                    82:0d:d0:90:43:92:7a:51:2b:92:9b:c1:4f:e2:06:
                    9b:16:62:8f:f7:d6:0a:32:17:49:4c:02:fd:6c:ae:
                    d1:18:30:35:d3:cb:60:07:4b:d8:29:58:f7:d8:e2:
                    76:8a:14:93:a7:dd:41:58:43:84:f4:37:5b:79:c2:
                    22:a0:56:3e:5b:94:49:b7:71:38:38:86:75:1b:93:
                    14:4d:36:76:bf:1d:e1:9b:37:dc:a3:92:9b:56:4d:
                    3a:63:c9:6c:a7:69:94:02:7e:1b:19:93:b9:58:3a:
                    85:8a:02:43:57:37:fa:fe:62:0a:17:4b:85:42:1b:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:22:FB:98:0B:D6:DC:22:0D:6E:23:C8:D6:BD:89:19:C7:7B:1F:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eCL7mAvW3CINbiPI1r2JGcd7H4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:da:30:b5:ab:5a:8a:17:92:cf:cb:6e:7d:a6:06:0f:70:0a:
         05:05:1d:bf:ee:10:18:78:f3:a9:81:17:23:58:15:02:1f:d5:
         8a:b4:f6:08:2b:eb:9f:41:44:49:90:f9:77:c3:cc:f2:03:72:
         d6:42:f9:a8:cc:63:be:34:72:56:61:33:01:22:6d:ba:84:1e:
         94:33:00:f3:81:fe:9b:72:f9:5c:71:c6:98:20:d7:9d:83:bd:
         42:f4:2a:cd:29:10:31:c1:29:b2:cb:a0:39:55:8b:9a:2f:20:
         d4:49:1c:a2:2d:9d:9b:32:a2:77:5d:f1:63:f5:28:6f:f8:cc:
         29:4d:bc:87:3d:40:fb:1d:f9:6b:47:92:ee:b1:34:fd:58:a8:
         19:cb:e4:17:fc:e9:80:a5:54:ae:0b:f9:4a:69:98:97:da:98:
         96:66:f5:85:b5:f0:12:e5:c7:be:20:ec:5f:45:c9:bb:a3:08:
         c0:5c:a9:96:80:b9:cd:89:26:b8:76:98:c7:b8:31:2c:7a:8a:
         9e:f5:26:f8:1b:0e:3c:45:a3:e4:30:e9:bf:d2:aa:0b:f5:d3:
         d9:7e:9c:49:e3:f0:88:8f:85:90:41:37:fe:3f:9f:76:cd:29:
         c3:21:1b:bd:2b:ca:d0:d4:6a:7f:54:fd:f3:ad:e0:6f:d8:79:
         6b:7d:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----