Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i88LF8fB9BIocnGAoI4gmx6fjAY.roa
File:                     i88LF8fB9BIocnGAoI4gmx6fjAY.roa (raw, json)
Hash identifier:          p7vXH+P6MVigGH12vhGmLFEo3y/hH+RkQIIUWqNQ95o=
Subject key identifier:   8B:CF:0B:17:C7:C1:F4:12:28:72:71:80:A0:8E:20:9B:1E:9F:8C:06
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CC6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i88LF8fB9BIocnGAoI4gmx6fjAY.roa
Signing time:             Wed 29 Sep 2021 02:48:11 +0000
ROA not before:           Wed 29 Sep 2021 02:48:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7366 (0x1cc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8BCF0B17C7C1F41228727180A08E209B1E9F8C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:43:47:b7:69:94:38:8e:d7:91:88:ef:e0:
                    2a:87:cf:8b:4f:cf:44:4b:3e:e5:d6:2c:ce:57:d8:
                    e5:5a:b9:31:77:25:f6:38:4f:ac:a2:59:85:06:f9:
                    6a:54:66:3f:4c:b1:85:ac:ee:89:23:e3:dd:e5:cb:
                    16:3a:30:69:6a:b0:3e:6b:b7:a0:af:ff:62:93:14:
                    5a:0e:df:c0:e4:05:40:84:14:15:56:fd:73:66:92:
                    b6:6d:b4:0b:0c:94:b9:73:a7:b2:1a:1d:8d:e8:74:
                    70:c8:2e:bd:f1:9f:77:a2:67:35:9f:1e:9c:b6:52:
                    7d:1e:4a:74:a0:e2:d7:a4:08:4e:bf:9c:eb:3d:da:
                    39:1a:4b:28:c7:d9:cf:04:e1:5c:c1:0f:9e:a5:aa:
                    5b:48:d0:19:7f:c1:d5:6d:3a:6c:75:9f:df:8b:58:
                    6d:ae:d1:3b:99:25:e6:9c:74:2e:61:56:73:8c:be:
                    d7:b5:e1:18:ae:6c:11:9e:46:c8:fd:05:2d:db:cb:
                    eb:46:fb:7b:ec:38:13:63:60:f2:1a:c9:a7:15:d7:
                    0d:d6:3d:89:0f:f1:07:10:61:52:4d:b9:b1:aa:f8:
                    b8:a1:b2:54:d8:59:e4:ef:7f:42:b0:82:ac:40:10:
                    81:80:6f:95:43:82:9f:4d:03:b4:52:60:11:e5:94:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:0B:17:C7:C1:F4:12:28:72:71:80:A0:8E:20:9B:1E:9F:8C:06
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i88LF8fB9BIocnGAoI4gmx6fjAY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:37:bf:df:3c:e8:31:6e:f1:a1:e1:e7:0b:93:68:43:ea:
         e5:c8:c7:7b:5e:52:d9:2d:85:ca:68:62:03:89:21:ff:89:df:
         ee:b5:48:c8:fb:bd:64:b7:82:60:eb:90:cf:6e:d0:1a:3c:e1:
         4d:72:0b:7a:04:cf:b7:ff:04:91:7c:69:63:54:c3:1c:86:5d:
         9f:33:9f:71:cb:01:2c:d3:e6:bb:d5:ff:d0:b7:82:18:b2:22:
         02:ec:ce:10:06:08:39:01:88:c1:8c:48:d5:78:e2:3f:4f:31:
         93:18:11:fa:28:80:6a:86:05:a5:5e:8d:4a:e3:d0:0b:90:37:
         27:84:0b:e1:02:e3:28:55:92:e6:16:4a:34:14:57:2c:47:1c:
         79:b7:f3:c7:db:f2:28:0b:62:69:fd:8b:0f:21:07:e1:c6:d7:
         44:e7:5e:ec:4a:54:12:3f:50:80:fe:53:3f:44:8d:45:8a:d7:
         d5:08:75:3a:49:e1:f5:91:17:c4:20:49:15:85:51:23:0c:ef:
         83:00:48:dc:03:4d:33:44:4e:e1:8c:7b:93:79:b7:13:7b:04:
         94:38:3c:30:c7:80:55:f0:cf:dd:11:7a:74:82:4b:1f:ef:ed:
         ce:ff:c6:7e:dc:7b:cf:ed:fa:ae:a4:54:46:c6:2d:70:ed:00:
         74:6c:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----