Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jZRbnwrUI6w5tvWgqwvVSLj6-z4.roa
File:                     jZRbnwrUI6w5tvWgqwvVSLj6-z4.roa (raw, json)
Hash identifier:          89+oxeD12zac3W1EzrOpw+rjYgR9C+twLkqx5PCdlO8=
Subject key identifier:   8D:94:5B:9F:0A:D4:23:AC:39:B6:F5:A0:AB:0B:D5:48:B8:FA:FB:3E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D50
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jZRbnwrUI6w5tvWgqwvVSLj6-z4.roa
Signing time:             Wed 29 Sep 2021 02:48:51 +0000
ROA not before:           Wed 29 Sep 2021 02:48:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.195.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7504 (0x1d50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8D945B9F0AD423AC39B6F5A0AB0BD548B8FAFB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:77:83:97:dc:4e:8c:f5:8d:2e:97:47:26:
                    2d:f0:07:1e:44:60:1e:2b:10:9c:35:33:59:50:c1:
                    fe:75:94:c4:f7:66:30:c3:83:1e:f5:b2:91:ae:43:
                    80:76:e6:21:a4:62:0d:80:a8:39:ee:76:54:1e:3b:
                    00:1c:1d:91:23:d6:71:a7:e5:f3:a3:02:0a:2c:c8:
                    53:a3:f8:4e:34:a1:69:9f:2a:62:73:10:ef:14:55:
                    58:d3:5b:47:e3:bd:b8:97:4d:96:45:e0:9b:37:1b:
                    a0:ad:a5:ce:55:a9:da:63:14:47:8a:20:74:db:dd:
                    92:4a:66:d5:f7:98:fc:60:45:73:80:99:b2:4d:77:
                    95:6c:62:6b:41:79:5a:71:02:86:81:cc:e3:bc:8c:
                    11:3f:cb:90:a9:cc:77:f4:08:0f:20:1d:de:3d:f3:
                    42:ae:c6:0a:77:3c:ef:e6:2b:49:40:a3:cb:4b:b1:
                    48:07:ad:02:7d:86:9a:a2:55:87:5d:92:bf:ae:2d:
                    8b:ef:d3:67:9b:35:34:84:dd:95:e4:5a:8d:78:c0:
                    61:28:7d:c9:3c:0b:5e:26:2e:c2:65:d7:3a:36:36:
                    bb:e5:b4:13:69:d2:31:21:4a:c7:4b:6b:a9:68:2d:
                    8a:cd:d5:89:d9:bc:35:31:03:98:25:ac:99:95:b0:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:5B:9F:0A:D4:23:AC:39:B6:F5:A0:AB:0B:D5:48:B8:FA:FB:3E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jZRbnwrUI6w5tvWgqwvVSLj6-z4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:55:28:27:6e:3e:72:53:a3:82:d1:ba:bf:69:8c:c3:16:e6:
         d7:6b:6f:3a:93:9b:2c:0b:b7:d0:b8:21:80:bc:fb:6b:b9:c5:
         af:70:f1:14:4a:54:ed:8f:f6:f0:0d:6a:95:ac:0b:2c:60:74:
         53:a1:7b:2b:92:fc:5c:d3:d4:ee:27:65:ec:57:42:a1:f9:03:
         e0:34:c1:56:57:0e:2c:3f:d6:d3:65:17:2b:05:cc:84:f4:92:
         8e:b9:f6:ab:d3:d6:30:e8:9d:68:63:d6:c4:3a:70:40:7c:30:
         dc:a1:d8:ff:a7:b3:3f:f4:5e:36:f1:59:99:2f:d5:cf:7b:09:
         5c:4a:83:f9:44:d0:9c:ee:cf:54:32:45:33:78:20:1f:0c:af:
         82:48:5c:fd:b6:29:73:10:76:a2:19:b0:1f:b7:b5:6a:67:92:
         45:d9:a7:f5:44:3c:6f:cc:83:7a:68:5d:d4:ab:0e:28:c1:30:
         fa:fd:83:8a:3e:a9:97:54:c0:b0:18:30:85:c5:6d:61:03:62:
         3c:46:6f:c4:e6:51:bc:8e:31:ca:ec:ef:01:01:07:02:97:58:
         d7:5f:e4:59:4b:6f:00:b2:54:39:1b:8f:24:7f:1f:4c:1f:2e:
         9a:19:87:f8:85:11:7b:df:88:53:59:d3:5f:cd:5e:45:12:eb:
         e2:fb:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----