Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQ3k7InPU0Bl5MBZNpE0x009K8g.roa
File:                     lQ3k7InPU0Bl5MBZNpE0x009K8g.roa (raw, json)
Hash identifier:          i/5IDens0mh4Pl9GRYVhHjy7gPGPhQF+C1CJCxxQusQ=
Subject key identifier:   95:0D:E4:EC:89:CF:53:40:65:E4:C0:59:36:91:34:C7:4D:3D:2B:C8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQ3k7InPU0Bl5MBZNpE0x009K8g.roa
Signing time:             Wed 29 Sep 2021 02:45:58 +0000
ROA not before:           Wed 29 Sep 2021 02:45:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6902 (0x1af6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:58 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=950DE4EC89CF534065E4C059369134C74D3D2BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:12:da:c2:46:7e:b1:af:e9:23:c2:22:64:
                    65:d0:7f:3a:96:14:bd:94:5c:93:c1:01:e0:a4:41:
                    d0:03:8c:2d:aa:f7:32:0d:f0:7a:a6:1c:5c:24:63:
                    9f:c5:d3:46:f7:d0:49:f5:c1:81:30:3f:c2:40:b1:
                    67:8d:a1:e0:7e:8b:b3:13:52:8a:ac:43:7e:3d:87:
                    a6:eb:17:cf:e8:65:11:e1:c8:9e:a8:55:38:0a:a0:
                    5a:44:56:a5:c4:d7:47:6a:c7:92:b6:bf:22:b5:1c:
                    31:e7:2d:6f:7c:62:11:10:d1:71:26:07:13:10:41:
                    a9:af:ac:ef:e6:84:a4:9b:37:fe:ae:c1:bf:13:cd:
                    3c:28:a6:34:e2:d4:19:0b:ea:45:a5:f8:55:05:70:
                    74:47:ec:70:9d:25:ed:65:5b:05:30:09:13:be:c5:
                    21:35:4d:51:a6:5c:df:27:5f:b1:ca:d8:41:d2:65:
                    15:df:7d:1e:0d:9f:ae:99:6b:10:ac:92:60:61:4e:
                    d8:73:f6:1a:a6:62:0c:08:cd:2d:0a:15:22:c6:0d:
                    44:b2:8c:96:b9:ff:aa:1e:cf:45:9e:2a:58:6d:b6:
                    6d:0e:31:e4:cf:ea:83:bd:91:97:97:4a:52:3f:02:
                    6d:52:df:d3:30:6d:5b:85:f4:4d:a2:f0:b0:57:17:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0D:E4:EC:89:CF:53:40:65:E4:C0:59:36:91:34:C7:4D:3D:2B:C8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQ3k7InPU0Bl5MBZNpE0x009K8g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:6b:63:ed:1d:3c:b8:0d:d3:23:eb:f2:7d:a1:d4:6d:e2:
         a5:e6:e7:0c:67:2b:55:a6:65:89:6c:fd:bd:32:fa:4b:98:46:
         7e:fb:7b:a0:52:db:62:6c:8d:24:29:a4:89:51:b6:1c:60:3d:
         ae:a3:1a:2d:bc:26:72:a5:93:51:90:b1:39:a6:5b:d7:d1:dc:
         a9:b1:7a:9d:f7:7d:63:cc:91:55:39:5f:00:95:17:12:3a:dd:
         4f:52:2b:fa:75:2d:ee:f2:a8:62:ce:17:d4:b6:8f:77:d7:bc:
         e3:fa:55:c6:ab:94:1d:35:de:60:1b:f8:e9:69:fd:d1:57:99:
         b8:9a:48:7a:0e:ba:f6:02:2a:78:bb:23:63:f5:8d:f8:0e:47:
         1f:44:b1:df:0c:01:09:1d:b9:78:74:51:85:e3:ab:dc:c4:6c:
         ab:54:21:05:9a:50:f8:59:b6:9a:f2:fd:e4:4a:1d:81:9e:b6:
         a9:cd:69:ff:77:95:bd:be:b5:a4:62:58:8f:5e:8b:f4:e0:3c:
         09:73:9c:12:13:51:72:84:b0:9e:22:e2:bf:e8:d6:c4:bc:54:
         15:d3:e7:b0:b0:f5:99:eb:ee:68:94:61:32:41:ce:69:a3:6d:
         62:5c:a9:5b:a6:80:09:37:c6:4c:26:95:44:76:1a:07:57:cb:
         74:11:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----