Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eGH7TfmTPpm3S0Ums6OljcBhkJE.roa
File:                     eGH7TfmTPpm3S0Ums6OljcBhkJE.roa (raw, json)
Hash identifier:          CiJ46hRfZwD8+sWAKVv/uU5AQigjZZcDD9MaBUhoh0E=
Subject key identifier:   78:61:FB:4D:F9:93:3E:99:B7:4B:45:26:B3:A3:A5:8D:C0:61:90:91
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eGH7TfmTPpm3S0Ums6OljcBhkJE.roa
Signing time:             Mon 04 Oct 2021 01:45:30 +0000
ROA not before:           Mon 04 Oct 2021 01:45:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff09::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7557 (0x1d85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:45:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7861FB4DF9933E99B74B4526B3A3A58DC0619091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:4c:43:43:f8:1f:86:42:5e:92:d9:53:8d:
                    21:03:72:92:2f:b0:5a:05:17:61:5d:72:66:f9:88:
                    81:25:0f:6d:66:0d:0b:9a:56:c4:61:77:2c:11:f9:
                    7d:5a:ea:55:ff:2b:7a:a8:12:76:dd:88:a6:6f:26:
                    df:91:04:ad:18:88:6e:81:04:78:9a:de:fd:de:f7:
                    2f:11:e2:9b:1a:99:6e:38:42:43:eb:15:9a:ef:64:
                    47:78:3e:94:ce:62:94:4c:76:82:89:93:2b:33:f4:
                    e1:64:5f:90:1e:ac:48:cf:8d:cf:ec:3e:66:66:23:
                    56:f8:1c:a0:31:68:c4:b8:3b:d0:96:24:46:95:81:
                    ac:e3:94:40:e6:5f:51:32:29:c0:51:ac:09:69:2d:
                    e8:aa:a5:04:18:7e:0c:25:90:94:47:0b:2e:5d:39:
                    aa:94:d2:9c:33:c4:39:bd:cd:32:e8:37:2e:fc:81:
                    ac:b2:87:e6:3b:84:a5:d5:c6:42:c9:1c:28:1a:6b:
                    47:b5:4a:fe:50:69:a6:50:f1:f9:e9:4c:fc:28:ae:
                    08:cd:f7:43:cc:d4:fa:8e:9d:c7:a3:79:9b:3a:ea:
                    6c:c8:04:07:de:67:e9:10:15:48:99:5a:eb:04:f4:
                    1e:0c:42:d1:a2:ef:6f:87:38:54:67:6c:6c:01:57:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:FB:4D:F9:93:3E:99:B7:4B:45:26:B3:A3:A5:8D:C0:61:90:91
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eGH7TfmTPpm3S0Ums6OljcBhkJE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff09::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:31:63:36:fd:4e:84:60:b0:b7:61:ec:ad:27:b0:3f:7d:64:
         63:3f:5d:0d:a0:62:87:f1:0d:69:17:72:5f:68:99:70:69:56:
         ff:1c:59:dc:7e:db:95:2b:8d:d1:98:42:18:4c:8c:fd:85:00:
         10:a8:fd:43:cd:97:96:3d:de:9d:63:38:4b:bd:63:58:0d:75:
         56:22:7e:69:7d:c5:d9:b1:35:fc:e6:45:45:a2:a9:ac:53:53:
         87:ed:b4:f0:7b:41:91:38:e9:f4:65:a9:11:99:39:b5:e0:d2:
         0d:68:36:31:bf:a9:c7:2b:4f:81:3b:5e:8a:00:96:5d:0e:2c:
         6d:d4:93:f8:94:a5:38:50:c4:ec:42:c5:03:2d:2c:23:fa:1b:
         50:7e:75:b0:c6:4f:58:0c:24:a3:3c:5e:4c:4e:34:c2:b1:ef:
         20:1b:0d:ec:e3:83:70:8d:09:02:37:3c:cb:75:c2:c7:17:4b:
         d1:1f:97:30:cb:ff:d5:2f:89:59:4c:51:69:a5:2e:7a:96:63:
         4f:53:1f:97:b6:11:bc:02:e9:9c:89:6d:5b:89:6a:4f:0d:fe:
         4a:ce:02:99:53:a2:95:d0:b7:94:ce:53:f9:f0:7f:4a:e6:81:
         a6:73:84:97:d2:00:b9:3d:75:be:e1:61:90:61:71:52:b4:13:
         0a:70:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----