Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jaCsw1EQstGW3zs2PyhS3k-k_sM.roa
File:                     jaCsw1EQstGW3zs2PyhS3k-k_sM.roa (raw, json)
Hash identifier:          dZwDiocRTRXPU4T8riHY/PY2f14zDizhtXU2sqd+2PY=
Subject key identifier:   8D:A0:AC:C3:51:10:B2:D1:96:DF:3B:36:3F:28:52:DE:4F:A4:FE:C3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1943
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jaCsw1EQstGW3zs2PyhS3k-k_sM.roa
Signing time:             Sun 07 Feb 2021 13:07:15 +0000
ROA not before:           Sun 07 Feb 2021 13:07:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6467 (0x1943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 13:07:15 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8DA0ACC35110B2D196DF3B363F2852DE4FA4FEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:6d:cc:a1:2b:62:12:82:79:7d:14:ca:99:
                    eb:b5:d1:01:b9:d4:08:48:ae:14:d2:12:f7:07:71:
                    ae:0a:3d:71:92:13:3a:22:dc:88:e1:77:bf:81:d0:
                    b1:cc:ba:8c:8b:d3:3a:5f:84:54:fc:5c:5e:8d:5c:
                    c8:30:20:44:13:9a:44:ba:87:f9:8d:eb:86:ce:42:
                    7c:58:28:50:e8:a1:7c:db:4c:b6:82:88:26:01:1b:
                    fe:1a:f6:b5:f1:cd:ae:c2:1e:43:a4:9a:39:f2:6c:
                    8d:8a:a9:2e:f2:e1:22:e6:ae:26:82:76:5a:32:d5:
                    9e:f2:4c:81:0e:ab:8b:9d:f8:e3:5e:38:eb:cc:d7:
                    99:ca:6d:d7:72:01:dc:3e:f6:db:b8:9c:17:e7:ad:
                    be:87:7e:cc:20:3a:52:c2:02:4d:f1:f2:07:23:15:
                    0e:02:27:4b:9b:4f:be:1e:16:96:c1:15:8e:d2:fd:
                    9b:14:da:b5:ea:e6:e9:cd:b7:f3:b6:b0:a2:83:9c:
                    3e:89:72:00:0b:3f:42:d5:24:47:c7:b7:39:94:d8:
                    b7:02:76:97:b9:12:3f:49:cf:d4:7b:2e:98:ee:b0:
                    c2:4a:1f:9c:a7:cd:04:ec:38:86:0e:d4:bc:12:61:
                    7a:fe:8e:64:40:f0:6f:2f:2f:68:32:44:a4:6e:1f:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:AC:C3:51:10:B2:D1:96:DF:3B:36:3F:28:52:DE:4F:A4:FE:C3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jaCsw1EQstGW3zs2PyhS3k-k_sM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:29:80:52:ee:b9:a2:88:44:93:a8:68:bf:63:66:fb:88:
         b7:ef:96:3d:d7:ba:ab:c8:24:ba:ca:c7:63:4c:ea:1e:03:83:
         bd:eb:91:d5:24:68:d9:2d:5b:97:03:6a:d9:64:8f:69:f1:5c:
         65:4d:7a:64:a1:0d:e1:2d:79:df:51:be:aa:50:29:f5:47:a4:
         30:49:2b:01:01:05:cd:63:7e:e2:e7:a7:63:b8:ab:f4:e5:2a:
         66:0d:7c:c8:4c:c5:94:92:9f:a0:0d:fc:7a:1a:c7:81:42:c8:
         53:f1:ff:94:87:f5:81:b2:4d:2e:e1:4b:56:88:4b:1f:e0:8f:
         5f:45:42:2b:b8:d7:50:24:94:4a:75:c6:a1:48:7e:1c:2d:2d:
         5f:80:80:24:9c:f1:d2:0c:a5:d9:7a:63:37:52:6a:a1:6a:fe:
         4d:4b:0f:25:5a:f1:15:67:22:a6:52:11:dc:89:ef:02:8a:6a:
         15:9e:a2:c4:ee:0e:01:02:f3:46:58:8f:84:ab:97:b1:7e:25:
         8f:7b:80:74:fb:79:4d:a0:47:2f:f2:90:83:4e:3f:c3:4f:34:
         e6:2a:af:1c:45:da:cb:56:6f:58:5b:69:58:10:e5:fe:11:89:
         bd:50:6b:2f:58:f0:92:61:cd:29:3d:c6:d2:33:a0:68:be:99:
         1d:6f:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----