Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/je9JV-B3FQyKwljfNkAZBJm1jo4.roa
File:                     je9JV-B3FQyKwljfNkAZBJm1jo4.roa (raw, json)
Hash identifier:          dWX5YTBaz5m5i3gM4s7Cf2DmYGFF7EhgyfE1a9FvM5g=
Subject key identifier:   8D:EF:49:57:E0:77:15:0C:8A:C2:58:DF:36:40:19:04:99:B5:8E:8E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B0E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/je9JV-B3FQyKwljfNkAZBJm1jo4.roa
Signing time:             Wed 29 Sep 2021 02:46:04 +0000
ROA not before:           Wed 29 Sep 2021 02:46:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6926 (0x1b0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8DEF4957E077150C8AC258DF3640190499B58E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2d:2f:d9:4b:6a:bb:66:db:36:5e:8b:9a:93:
                    d6:6a:2b:18:7f:54:51:62:9a:48:09:0e:c1:c8:28:
                    b5:07:60:f9:a3:64:a1:ad:b5:fe:fe:8d:69:05:98:
                    4a:72:71:6a:60:dd:e6:ea:dd:1c:40:0d:bd:8e:4c:
                    2e:a9:17:3d:46:b6:b0:1b:11:08:cf:ff:83:71:53:
                    a2:1a:b6:f9:c5:ea:31:9d:37:99:2a:5d:ad:0e:59:
                    c3:0c:a8:de:fb:71:d9:92:46:25:6a:a7:c6:03:03:
                    db:49:56:9f:b9:29:ca:4c:47:f6:46:4a:c1:67:da:
                    57:67:24:23:71:e0:a1:43:51:c7:06:c7:88:b0:2f:
                    05:d8:8e:e3:c5:e1:ef:d2:4d:84:81:e1:6b:77:69:
                    c6:0b:4e:34:02:8a:e2:ad:d5:db:c4:25:b8:a1:17:
                    db:d7:0c:e0:b8:a8:71:e1:42:a2:9f:1a:1a:6a:11:
                    8e:d1:0b:5e:e8:a5:fa:ac:76:b1:85:3f:69:40:b4:
                    c2:26:c2:c5:d7:43:86:72:b0:fe:14:b5:dc:5a:c9:
                    40:f7:d5:f5:f7:6b:ae:fd:5c:e8:f3:ba:c7:e5:43:
                    dd:97:61:da:00:9d:6e:b7:cd:1f:7e:b6:b7:9f:db:
                    b7:6e:9d:e6:22:9a:a9:73:cb:74:fe:cd:16:15:43:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:49:57:E0:77:15:0C:8A:C2:58:DF:36:40:19:04:99:B5:8E:8E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/je9JV-B3FQyKwljfNkAZBJm1jo4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:67:c1:81:af:e0:38:b0:3e:3a:e8:52:42:cf:d4:65:c6:b1:
         c2:42:a6:c1:04:62:67:de:2a:a3:81:83:d3:ee:4a:ab:ad:8e:
         a6:22:c2:16:5d:76:26:d7:6b:f1:0b:9a:b7:a2:f8:8e:b8:0c:
         f8:55:95:cd:88:94:36:81:82:3f:91:78:71:c2:95:52:1c:dd:
         5b:f3:04:21:b5:4b:ff:e2:46:a1:41:16:02:e5:42:70:9d:79:
         27:34:25:f5:8b:e7:e7:53:66:1a:fd:b6:eb:76:2b:05:e8:30:
         24:eb:57:e9:93:d8:ca:ce:56:1e:80:4c:a2:3c:3f:c7:a4:c4:
         b7:e7:92:50:d0:1b:2e:ce:a2:fe:bf:a5:84:c6:da:d9:5c:be:
         2e:0d:ee:7f:ef:50:15:20:23:9b:33:07:b2:5b:9e:29:90:cb:
         5f:48:9e:61:2d:86:6b:51:aa:e5:92:b9:9f:29:ec:0b:ef:96:
         a2:97:99:b5:68:91:0e:13:78:56:30:5b:e5:91:05:8d:27:ff:
         3e:97:29:da:f7:36:89:3c:8a:0e:f3:32:44:d0:0c:96:67:22:
         58:0e:90:45:15:ea:3b:42:4b:a6:a8:27:a1:f8:db:ce:e2:40:
         1e:f3:8b:36:02:f0:ad:07:ce:b5:77:84:40:58:ab:15:34:48:
         42:2a:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----