Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eNLpRwyVJgyvWErXm8H01sHAbRg.roa
File:                     eNLpRwyVJgyvWErXm8H01sHAbRg.roa (raw, json)
Hash identifier:          2QdoTp9iRNSSL/LCy7RIzqZWWNApWaMsuSnV5nHismo=
Subject key identifier:   78:D2:E9:47:0C:95:26:0C:AF:58:4A:D7:9B:C1:F4:D6:C1:C0:6D:18
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       213B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eNLpRwyVJgyvWErXm8H01sHAbRg.roa
Signing time:             Fri 25 Nov 2022 04:39:40 +0000
ROA not before:           Fri 25 Nov 2022 04:39:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8507 (0x213b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=78D2E9470C95260CAF584AD79BC1F4D6C1C06D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:00:6f:a4:67:0c:40:40:93:99:03:20:59:e5:
                    79:f5:21:fc:e4:ce:40:c9:e6:7d:ff:8f:f3:02:67:
                    b7:f5:28:95:0e:55:bb:61:2b:81:d9:36:ad:48:e5:
                    8e:7f:13:7a:8d:e5:8f:5c:43:ee:c4:87:ff:d8:c3:
                    f0:58:bf:ac:ea:3d:b1:d1:3c:bc:17:f3:d6:76:95:
                    3d:ff:75:78:ec:08:01:e8:b7:a9:3b:ab:ea:ca:ae:
                    4c:cf:2e:f6:c9:ff:bc:d4:f5:d7:2c:2c:7b:85:7b:
                    9e:a9:b5:a3:c8:39:1e:ac:2a:f6:3e:58:44:fe:b9:
                    71:9e:d9:a1:12:14:cc:d7:af:78:8f:fe:8e:b1:06:
                    dc:d5:86:36:53:a9:e3:7d:d5:3e:8e:9b:b9:45:4a:
                    9a:00:7f:17:72:51:b0:cc:15:ef:34:c5:ef:b3:7e:
                    95:fe:43:c1:0d:8c:05:4a:90:a2:cd:76:1e:00:93:
                    bd:fc:d7:8d:3b:52:5f:e5:28:74:0b:9d:cf:a6:ad:
                    97:8c:c3:96:0a:40:f6:c8:8d:c9:ec:5f:ff:fe:3e:
                    de:ae:0d:5f:2e:08:1e:a1:19:5a:18:96:a3:64:2b:
                    63:70:4c:72:a2:1a:96:6c:77:5c:19:ec:40:98:ee:
                    98:a9:ca:d9:91:65:5d:4c:9e:81:7a:03:9c:5c:61:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:E9:47:0C:95:26:0C:AF:58:4A:D7:9B:C1:F4:D6:C1:C0:6D:18
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eNLpRwyVJgyvWErXm8H01sHAbRg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:9a:b5:50:fa:fe:41:ab:16:52:81:97:7c:f1:71:54:94:
         2d:3a:ed:3a:5b:19:54:7e:41:d1:6b:56:23:25:74:34:8d:82:
         1a:6f:d5:9e:21:80:fa:4b:48:5e:8d:64:01:6b:7a:68:b7:c0:
         f8:01:d7:9e:44:d3:53:db:7a:ee:91:6c:01:79:47:d8:77:96:
         82:a2:68:eb:ee:7f:a8:5b:9f:45:86:03:82:c8:de:9d:12:5c:
         6f:83:2e:74:a4:61:f8:15:4c:ce:7a:5f:f5:fc:70:37:cb:79:
         63:2c:3e:69:5c:e5:a9:d9:16:c5:b5:44:c1:4f:b9:97:11:e5:
         b6:e0:f5:e6:f0:6a:4a:89:0e:73:6b:54:06:b7:a6:fa:8b:20:
         84:a0:3c:26:67:fb:f2:47:19:4b:c7:22:64:4b:1e:4d:cb:45:
         1f:6f:7b:43:d2:82:85:35:e8:bd:65:07:db:61:90:d7:fd:e1:
         23:11:c1:dc:50:7a:f8:5b:cd:3f:be:a0:c6:10:fb:34:16:18:
         cb:ff:09:60:e5:b6:53:ad:7f:2c:ec:08:83:de:91:bd:ae:af:
         31:e4:73:50:6f:6f:37:01:e5:4b:6c:44:d4:cf:f3:2e:e1:18:
         6b:ee:86:9c:ed:b9:92:90:6c:e3:b3:3b:af:9e:9e:60:40:95:
         e7:85:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----