Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oZrAV_p4T1GygMDfLW6gfFcCSRA.roa
File:                     oZrAV_p4T1GygMDfLW6gfFcCSRA.roa (raw, json)
Hash identifier:          eKWNiXa0K9UKWt7jiqvG8ypIEGujuKeQ5JyP4p5hIkQ=
Subject key identifier:   A1:9A:C0:57:FA:78:4F:51:B2:80:C0:DF:2D:6E:A0:7C:57:02:49:10
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D1B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oZrAV_p4T1GygMDfLW6gfFcCSRA.roa
Signing time:             Wed 29 Sep 2021 02:48:37 +0000
ROA not before:           Wed 29 Sep 2021 02:48:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7451 (0x1d1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A19AC057FA784F51B280C0DF2D6EA07C57024910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:14:56:52:06:e9:1e:a0:80:7b:6b:94:d4:
                    f4:10:14:c9:c2:6c:84:56:09:8e:45:73:89:76:de:
                    35:a0:f7:d2:ba:f6:52:97:1f:a9:d5:40:8b:30:d1:
                    b1:ce:69:1a:e7:1d:76:ab:6c:3f:94:1e:8f:4e:3e:
                    90:00:9d:64:f8:89:e6:42:02:9a:b1:e3:e6:0d:b0:
                    8d:75:ef:52:72:04:82:a6:f8:a1:86:73:0a:46:be:
                    07:e7:d7:30:c1:cd:36:93:16:dd:c6:7d:cc:80:33:
                    05:65:9f:1d:91:a2:f7:bb:ba:91:07:e3:d1:d2:b5:
                    51:88:c4:ee:65:3e:6c:70:74:0e:f5:c3:d6:ba:bf:
                    8d:6a:a9:59:92:09:4a:1c:36:dc:dd:06:b8:f8:9f:
                    1a:84:5f:fb:64:75:a0:24:c6:d7:b4:9c:6b:ca:38:
                    cb:37:d3:b8:f0:d0:68:f7:c9:4d:ad:cc:e9:02:dd:
                    e2:5e:c0:83:27:76:be:d8:6d:b1:7d:02:60:dd:8f:
                    b4:c9:bb:5f:8b:93:e5:43:0c:11:2c:3d:e2:7d:fb:
                    8c:9b:2f:de:18:2a:dc:07:c1:f9:41:fc:4c:aa:d0:
                    57:c3:3e:e3:c4:5d:0e:e2:fe:4e:60:e1:98:7a:0f:
                    20:6e:4f:0a:dc:02:a0:ca:b9:12:1e:cb:ff:2a:23:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9A:C0:57:FA:78:4F:51:B2:80:C0:DF:2D:6E:A0:7C:57:02:49:10
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oZrAV_p4T1GygMDfLW6gfFcCSRA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:d6:6d:6c:64:fc:93:43:26:81:da:5f:a1:f4:a1:f6:f4:
         26:02:a9:ce:6f:4f:d8:9a:73:59:24:eb:f1:ad:ce:60:2b:75:
         23:a5:4b:61:ab:3d:d6:61:03:db:17:79:04:fe:06:5e:d0:0d:
         19:b8:c4:a5:c1:8f:d6:98:7c:3f:fa:3f:59:fd:28:ff:af:13:
         39:ab:80:97:c2:28:24:8d:e4:67:7c:78:87:23:1b:d8:35:dd:
         8e:d2:45:28:e1:1f:86:e0:94:f1:2f:5f:44:07:34:cb:de:b5:
         da:eb:a9:9d:6a:f2:bb:7b:45:fe:ec:1d:49:12:c4:8b:37:10:
         54:66:b6:24:4e:36:6e:43:b6:71:c2:f6:fe:91:92:2d:fd:12:
         8d:b4:99:87:a4:04:0f:32:02:fb:05:9e:b9:bd:1c:ee:4a:0e:
         88:c8:e1:73:a4:a5:5d:1c:4e:fe:eb:ac:97:a4:fc:68:22:7e:
         c9:f1:7e:fc:a3:45:0b:62:2c:37:23:9f:89:d5:85:30:8b:48:
         51:1c:db:d7:c3:bd:bd:56:10:4d:17:f7:2f:e8:c0:9d:91:36:
         50:1b:43:b0:fc:0d:40:3a:8f:5d:8f:c6:25:7a:81:17:36:23:
         7e:69:0c:4a:46:5b:5a:c1:14:7b:53:a5:df:d8:bc:53:cc:e7:
         e3:95:ef:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----