Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o9vWqOMGvQsdeFHifuu2bpzD974.roa
File:                     o9vWqOMGvQsdeFHifuu2bpzD974.roa (raw, json)
Hash identifier:          iNHb8mWab0FEB3p9hVLoH50IXapXUICDxIpUE3bZShE=
Subject key identifier:   A3:DB:D6:A8:E3:06:BD:0B:1D:78:51:E2:7E:EB:B6:6E:9C:C3:F7:BE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D45
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o9vWqOMGvQsdeFHifuu2bpzD974.roa
Signing time:             Wed 29 Sep 2021 02:48:49 +0000
ROA not before:           Wed 29 Sep 2021 02:48:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.195.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7493 (0x1d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A3DBD6A8E306BD0B1D7851E27EEBB66E9CC3F7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:7e:f1:b7:76:ae:0a:aa:af:02:60:50:22:
                    27:ae:01:1d:97:30:1f:6c:20:b1:0c:60:48:8a:b1:
                    73:9d:32:93:5a:d8:03:6f:b8:04:9b:f8:eb:a1:3d:
                    59:bc:dc:ae:e7:94:d0:3f:f9:65:e5:46:29:ae:a8:
                    43:f1:b6:ba:2a:30:4e:bd:3c:20:e5:66:0f:20:18:
                    d8:fa:9a:4f:2e:a2:3b:a0:a2:8e:e6:8e:9a:16:4b:
                    22:39:e2:3e:c0:70:d9:4f:dd:cf:bc:c5:66:e7:98:
                    02:7f:8f:e4:08:e4:86:16:96:ca:8b:e3:46:b5:ab:
                    55:7c:d0:03:f9:c4:8d:b8:78:5e:24:e2:11:f0:09:
                    a6:49:14:cd:7f:0b:ce:e5:c0:e1:e6:20:5b:4f:83:
                    6a:33:08:61:b6:a9:64:8b:e1:78:45:0b:94:bf:75:
                    c4:0b:d9:38:f4:5c:fe:fd:bc:29:a1:90:04:d0:22:
                    6a:8d:ee:7e:e7:dc:3a:e0:48:3f:8b:27:50:ec:ff:
                    8a:a1:04:bf:78:0e:e8:6e:82:e6:2e:22:a3:2b:99:
                    80:08:70:de:30:26:3c:d2:e2:f6:03:43:ce:45:0e:
                    9c:f7:2f:4f:7e:9d:cb:05:7b:ad:f1:a8:0a:b2:6b:
                    34:25:0c:ab:79:0d:fa:1d:ee:5c:20:aa:0b:8e:70:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DB:D6:A8:E3:06:BD:0B:1D:78:51:E2:7E:EB:B6:6E:9C:C3:F7:BE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o9vWqOMGvQsdeFHifuu2bpzD974.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:3e:55:94:3c:6e:ff:d2:97:73:08:f8:7c:92:60:50:59:
         bf:18:1c:51:59:c1:16:a3:85:e7:01:60:6c:bd:52:9d:51:db:
         6f:48:fa:b2:e0:56:11:6f:2b:ef:3e:4a:47:0b:b0:74:6f:75:
         52:a4:fa:24:33:65:79:54:af:d5:71:9e:a0:f5:3a:2d:9e:de:
         cf:9c:c7:1f:7d:5c:7d:26:f8:cf:4c:d8:8c:64:2a:f9:74:be:
         db:a9:11:81:bc:4b:f5:46:86:b0:c1:58:0b:93:8e:7b:4b:54:
         ad:06:04:e0:c8:87:cd:a0:c1:56:fb:02:a1:72:a7:70:2a:b1:
         3c:04:2a:b7:e3:a0:76:f1:05:5b:41:ef:62:34:ab:d4:6d:7c:
         e1:d3:eb:45:75:46:99:f9:9c:43:79:80:95:c9:e1:fd:42:b5:
         fc:df:e8:d3:c0:74:b7:30:27:00:c0:2d:9a:2f:06:37:a9:fa:
         b8:60:97:9a:52:4e:13:33:9a:c6:7f:20:0f:c1:e2:42:04:3c:
         2f:3d:00:19:37:8a:6c:d2:72:9f:a2:6b:22:e5:df:00:5a:b9:
         82:1f:f5:5f:cc:1b:d6:92:d9:2e:42:7e:3a:36:7f:86:7b:bf:
         08:ae:78:34:2b:d8:ef:f1:65:bd:ec:db:1a:dd:81:6d:b8:c4:
         a6:ce:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----