Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/owg7HCZ1C8Rm7KaAaF2hJgCDS0U.roa
File:                     owg7HCZ1C8Rm7KaAaF2hJgCDS0U.roa (raw, json)
Hash identifier:          IJYHRYs+jKrceiF7SMqHaLHs67HJgKlhYUyEMMltkjo=
Subject key identifier:   A3:08:3B:1C:26:75:0B:C4:66:EC:A6:80:68:5D:A1:26:00:83:4B:45
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       219D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/owg7HCZ1C8Rm7KaAaF2hJgCDS0U.roa
Signing time:             Fri 25 Nov 2022 04:40:07 +0000
ROA not before:           Fri 25 Nov 2022 04:40:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        118.233.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8605 (0x219d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A3083B1C26750BC466ECA680685DA12600834B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:09:b7:c5:01:fd:36:55:45:3a:30:da:d5:
                    71:b9:b7:e1:5b:25:9a:e3:80:7c:ce:cc:d7:c7:cb:
                    bb:56:84:de:85:6c:6b:94:0e:d4:cb:8a:34:33:02:
                    b6:88:89:6d:6a:2e:91:57:bc:10:26:50:99:fa:67:
                    4d:09:79:a3:7f:ec:15:c2:dc:b6:ba:73:f0:50:9c:
                    e5:29:51:9f:cf:42:0d:8b:65:3f:23:e6:07:10:c9:
                    41:8b:b9:c4:eb:09:0a:34:db:6c:56:e4:fe:4b:58:
                    00:fa:24:55:90:a1:c6:58:98:ea:f0:7e:f2:8e:01:
                    ff:0d:83:b7:5a:21:2b:2b:97:4b:d8:0e:82:6c:a2:
                    d8:24:f3:69:78:97:7e:74:76:97:3b:c4:c9:5c:07:
                    c1:dc:90:97:48:e4:32:0b:ed:be:7b:9b:ef:8e:19:
                    1f:66:2c:8a:70:53:c0:a7:e6:f7:cc:3c:4b:4d:4f:
                    53:68:11:5d:f4:0e:1c:ed:7f:e2:2c:3a:fe:c3:b0:
                    a3:ea:7d:12:4b:82:de:2c:10:1f:a3:e8:97:dd:df:
                    c1:85:d3:34:9a:a3:fd:5f:06:28:3e:5e:ad:da:c6:
                    54:b0:37:77:10:30:08:7a:fa:d8:5d:73:06:0d:23:
                    4f:a8:af:23:10:7c:82:70:23:67:95:39:cc:5a:87:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:3B:1C:26:75:0B:C4:66:EC:A6:80:68:5D:A1:26:00:83:4B:45
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/owg7HCZ1C8Rm7KaAaF2hJgCDS0U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a8:36:84:49:fc:fe:2d:0c:d9:e0:01:c6:31:b5:08:ca:81:50:
         f3:9f:10:30:67:a2:d3:e0:75:bb:69:ff:41:22:0e:16:97:bb:
         4d:59:59:2e:b9:00:cd:0e:23:c7:bb:35:e1:63:75:f3:fd:a1:
         6e:f6:fe:10:62:09:a7:2b:b7:ac:00:9d:58:e7:29:f2:61:b4:
         54:4e:f0:aa:16:ae:02:ee:ba:3f:02:ae:e1:7a:1c:09:c2:49:
         6f:cd:18:8d:7f:6d:0f:11:c9:5f:2e:6c:d1:82:95:0a:1d:0c:
         17:4e:67:2a:a8:b3:2f:d2:c9:83:e0:c2:09:70:88:a2:cf:ee:
         97:6f:46:f3:55:4e:83:0b:68:2f:03:e5:45:82:75:6d:40:d6:
         37:98:62:6e:7f:93:97:3c:e4:91:1f:a8:30:1f:b7:e8:54:38:
         42:c4:b6:0b:c0:b8:c1:66:f8:bb:f4:fe:39:fd:cb:22:a7:d3:
         dd:7b:67:9f:ce:50:a3:e6:ac:47:4f:b1:3d:e4:42:9d:ad:d0:
         45:ef:12:aa:d6:c8:b4:1e:18:b2:b5:a3:2e:7a:35:81:4a:da:
         c4:3f:8c:a0:eb:6b:66:6e:63:af:f9:72:bc:5d:43:15:d8:4b:
         32:79:07:3c:ba:88:24:a2:f4:47:3e:59:67:f2:b1:a9:35:71:
         94:c1:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----