Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/niQFRmaD8icaBJaiSNVAM1Yf3sU.roa
File:                     niQFRmaD8icaBJaiSNVAM1Yf3sU.roa (raw, json)
Hash identifier:          mqptMUKiU4KG7CPVTSlP0CRzzipxKpcjRsiyYtS6cWA=
Subject key identifier:   9E:24:05:46:66:83:F2:27:1A:04:96:A2:48:D5:40:33:56:1F:DE:C5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B2D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/niQFRmaD8icaBJaiSNVAM1Yf3sU.roa
Signing time:             Wed 29 Sep 2021 02:46:15 +0000
ROA not before:           Wed 29 Sep 2021 02:46:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6957 (0x1b2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9E2405466683F2271A0496A248D54033561FDEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:b0:a6:c6:f8:99:b8:bf:ce:0b:92:1c:02:
                    78:aa:8e:b7:d6:ed:b2:2b:2a:d1:50:55:5b:bc:38:
                    3a:9b:89:b2:bc:32:0c:a0:c5:9e:4c:56:79:84:19:
                    ee:21:70:04:1b:5a:d0:38:da:f0:bc:69:4f:71:1c:
                    b0:05:25:80:1a:09:59:e5:b4:bd:c8:f1:d5:33:cd:
                    35:c4:af:46:0f:7a:74:bb:03:f9:54:45:98:a9:96:
                    4c:b6:98:bb:07:99:3f:cc:37:a1:24:e8:61:cc:83:
                    b2:74:1b:77:e1:f6:d2:6e:e4:dc:b2:26:cc:af:02:
                    d5:af:90:6a:c9:f8:3a:b0:79:1a:2c:e4:8f:53:e9:
                    b8:e9:1f:cc:5a:a2:e4:c0:7e:0e:ac:03:b7:ee:27:
                    2d:92:2c:5a:de:f6:f7:86:e9:50:95:a9:e8:6b:32:
                    0b:07:50:40:06:4e:4f:44:de:3a:dd:e7:23:61:4d:
                    0a:21:19:d9:00:ab:88:b5:28:73:55:47:cf:92:86:
                    c7:ec:cd:7f:0a:f5:fb:42:96:60:b0:c1:61:0f:cf:
                    40:b1:04:37:a0:be:18:10:8c:f0:2f:e9:72:35:3e:
                    82:75:8f:c3:a0:ba:9b:20:82:a7:6b:53:5e:be:1c:
                    97:55:4e:0a:0f:f7:ad:64:dc:49:a3:d7:9d:c3:44:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:24:05:46:66:83:F2:27:1A:04:96:A2:48:D5:40:33:56:1F:DE:C5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/niQFRmaD8icaBJaiSNVAM1Yf3sU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:4f:31:86:50:fb:70:5b:e1:9e:89:a7:bc:b9:26:13:a8:
         78:f0:27:ee:10:4a:e6:f3:81:48:d5:22:00:7f:77:e3:69:26:
         fd:7f:d8:8d:d7:e5:20:1e:36:f4:05:93:11:a0:c2:49:f8:e4:
         47:fa:78:78:f5:1b:dd:fa:97:bd:c3:ec:f8:5a:f5:e2:ec:52:
         3b:5f:f2:d4:33:9f:66:8d:ce:75:b1:63:ea:d3:0b:70:fb:9e:
         94:34:9f:36:59:96:a3:c6:03:be:58:a0:0b:ec:0c:18:9e:9f:
         88:b0:16:23:c9:dd:e7:c7:73:31:e7:be:35:aa:70:0f:71:da:
         0f:0d:7c:25:fc:4f:49:0a:0e:dc:1b:27:dc:0c:dc:40:be:6c:
         2d:a2:f8:01:b2:66:0b:83:40:4e:f1:55:9f:6a:c1:ec:9c:49:
         36:9f:aa:5f:76:2f:ff:8e:b8:20:28:e1:68:67:18:77:5e:5b:
         ac:3a:b5:c5:6b:7e:8b:58:92:c3:fc:3c:69:e5:06:ad:6d:5d:
         9e:ca:fd:01:92:be:6e:cf:12:61:78:2c:56:e4:2b:89:50:fb:
         fc:80:f3:3d:b7:a1:09:22:3c:16:9f:68:75:bc:ca:5a:ae:5c:
         f1:a9:7e:c4:68:94:7e:cf:e5:62:68:8f:11:0f:2f:e6:4f:9f:
         7f:4a:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----