Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxx8ZJhdinM6AKFaTQblS2WUCXI.roa
File:                     lxx8ZJhdinM6AKFaTQblS2WUCXI.roa (raw, json)
Hash identifier:          BJnsrYPb7K9PGPGFqA6Ztkp6x4XJ5u5YzAqHVcywzXY=
Subject key identifier:   97:1C:7C:64:98:5D:8A:73:3A:00:A1:5A:4D:06:E5:4B:65:94:09:72
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CC3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxx8ZJhdinM6AKFaTQblS2WUCXI.roa
Signing time:             Wed 29 Sep 2021 02:48:10 +0000
ROA not before:           Wed 29 Sep 2021 02:48:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7363 (0x1cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=971C7C64985D8A733A00A15A4D06E54B65940972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:88:da:43:5f:db:cb:de:ea:6c:41:94:7c:
                    31:c5:9b:d9:b5:86:2c:4e:04:c1:fe:98:c0:e2:32:
                    e7:f0:fa:ba:9f:89:ce:75:ff:86:86:ea:99:05:4f:
                    07:4b:05:ff:d9:b9:f8:d4:19:b3:79:a2:1e:88:f6:
                    98:50:14:e8:f6:a8:fe:76:cf:88:39:6c:e4:9d:9f:
                    7c:08:0c:8b:a7:e8:89:c3:78:3c:08:6a:f6:0f:cd:
                    6b:0f:ad:18:13:44:24:55:c6:b4:65:94:85:ce:dd:
                    7d:78:9c:0f:d5:9d:51:53:e7:79:44:47:79:68:4c:
                    6a:dc:7a:05:60:5c:0f:5e:78:a1:a8:b1:1c:87:e0:
                    cb:c4:8c:6f:b6:c6:3b:73:f8:90:b0:1d:84:c7:ce:
                    b1:c0:8a:be:d3:56:a0:2f:08:a2:8d:1c:1b:fc:c2:
                    37:2c:6f:3c:48:84:f6:cd:42:4c:15:82:7b:22:eb:
                    0d:7e:a4:dd:03:b9:aa:ff:63:fc:3d:b2:c3:5a:fc:
                    4b:c5:6b:0f:8d:25:13:9d:0c:3a:8c:bd:38:31:ba:
                    ae:ae:06:1d:c1:03:e0:f6:9d:73:c4:35:bb:30:ae:
                    3b:b7:79:7f:c1:3a:92:e2:91:cf:00:ff:6f:33:d7:
                    8b:e3:a0:13:bd:e5:25:a5:3f:d2:d4:07:83:42:8e:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1C:7C:64:98:5D:8A:73:3A:00:A1:5A:4D:06:E5:4B:65:94:09:72
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxx8ZJhdinM6AKFaTQblS2WUCXI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:1f:6f:06:1c:f5:fd:2f:aa:7b:a8:4c:01:fd:62:6c:58:
         97:8f:c1:77:93:09:ab:c8:b4:ca:18:59:75:2f:14:e1:ab:a1:
         d9:1d:02:8f:bf:bd:e0:86:2e:28:c7:53:52:00:2a:ab:61:a5:
         a0:f2:38:61:68:a9:d6:64:10:7a:bd:4f:e9:05:82:92:b4:59:
         0b:e6:b9:67:7b:12:76:fd:f8:e9:f5:75:a3:f9:44:b1:eb:1f:
         3d:fa:62:67:57:a4:81:4f:dc:af:fe:7b:e7:67:40:9a:77:c8:
         50:ff:09:b8:d0:11:79:48:f1:dd:ac:e7:2b:1f:0f:d1:92:26:
         32:1d:42:33:81:25:8b:2e:fc:eb:13:99:a7:70:6b:46:eb:07:
         b3:d6:54:85:93:60:7c:ba:fd:4c:b9:29:87:f0:03:f6:39:22:
         4c:da:0c:3b:db:d5:17:4d:33:22:ec:f0:34:57:d6:7c:a1:a7:
         24:b6:d4:6d:d6:f9:dc:c8:cd:79:16:bb:2f:a0:a6:ec:92:f4:
         3c:33:11:de:21:f8:ee:21:98:e0:c1:8f:b5:d8:31:bb:1c:be:
         0b:68:d8:d5:56:03:f8:b3:f9:67:87:df:14:97:db:f0:e4:3c:
         08:1d:c5:b6:fd:89:87:61:d2:1e:17:1c:d2:28:92:40:53:32:
         d7:bb:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----