Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qHvFMWzZoflz7v8LnIoq9vepSzs.roa
File:                     qHvFMWzZoflz7v8LnIoq9vepSzs.roa (raw, json)
Hash identifier:          +pluSdFto0f/HqRtnO90DX3MQrQ/oN99JFE1uB69iTs=
Subject key identifier:   A8:7B:C5:31:6C:D9:A1:F9:73:EE:FF:0B:9C:8A:2A:F6:F7:A9:4B:3B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C38
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qHvFMWzZoflz7v8LnIoq9vepSzs.roa
Signing time:             Wed 29 Sep 2021 02:47:29 +0000
ROA not before:           Wed 29 Sep 2021 02:47:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7224 (0x1c38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A87BC5316CD9A1F973EEFF0B9C8A2AF6F7A94B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:f7:10:49:4d:20:e5:bc:54:de:34:0c:d8:
                    bd:48:92:2b:a1:0c:28:e5:8d:09:e3:7f:78:1b:c2:
                    6c:41:ce:44:27:e3:ed:6a:5b:e4:a4:ed:aa:c6:5a:
                    4a:74:d9:84:a4:89:cc:d8:50:bb:24:e9:1a:09:c1:
                    57:1f:44:73:a1:66:a0:dd:34:b2:c8:e4:63:fe:55:
                    df:bb:53:cb:04:f6:a1:28:a8:46:48:51:2c:ad:a5:
                    0f:83:e1:6c:d0:d1:57:52:49:a7:27:83:b0:3d:af:
                    94:1a:d8:33:1c:41:66:41:0f:3a:87:3b:97:2e:e2:
                    00:8a:3d:1b:11:3e:28:d8:97:bd:00:65:29:be:74:
                    72:e5:58:86:f9:ef:fe:9f:a8:85:d2:7e:5b:9d:47:
                    c2:ed:21:67:99:f6:17:41:c4:a5:46:98:c7:70:6a:
                    b7:4f:7f:06:b9:b8:26:12:a0:d3:f1:cc:f0:eb:66:
                    0b:3b:f8:28:04:5f:ff:8a:64:22:92:55:ec:fb:3a:
                    95:8d:dc:15:25:b0:c6:fc:5e:5b:df:b7:1c:16:dc:
                    67:b1:c2:78:e6:48:c4:1a:54:36:d8:90:77:10:3f:
                    70:11:77:13:1a:ad:dd:34:0b:ff:79:7b:ea:e6:fd:
                    33:23:14:f8:a3:f8:7a:9e:dd:ae:92:e3:de:47:ee:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:C5:31:6C:D9:A1:F9:73:EE:FF:0B:9C:8A:2A:F6:F7:A9:4B:3B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qHvFMWzZoflz7v8LnIoq9vepSzs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:e4:48:f6:97:2f:78:37:fb:40:9c:aa:b8:1f:6a:59:7d:
         f0:5d:d5:24:70:98:4e:e5:94:10:1f:b7:99:d2:86:88:de:a4:
         46:cb:49:60:71:80:41:40:bf:0b:54:c7:5b:57:09:49:e5:3b:
         33:c7:8b:b1:70:58:42:60:62:3e:96:b0:b0:88:16:c4:3d:26:
         52:47:30:a3:a6:97:94:e5:3f:62:68:a1:ab:4b:dc:72:66:fe:
         e4:0e:ba:c1:3e:f8:5e:1a:a4:dc:4d:e0:9d:dd:b1:c8:6c:9a:
         20:47:b7:1c:aa:1e:44:d8:3e:76:89:ea:2d:8a:c6:ea:42:07:
         94:18:fa:7c:a4:c6:91:cf:90:3e:3c:48:66:c4:21:c1:44:11:
         77:11:cc:eb:c8:fb:92:05:af:12:55:4d:91:c0:5b:4f:a0:68:
         87:0c:49:c0:32:b8:6d:10:86:dc:ef:14:ac:cc:e4:a5:ea:63:
         66:2e:e2:1e:c2:27:29:b0:36:cc:28:ba:52:29:ef:e7:4d:73:
         31:d7:08:1f:2c:63:81:dc:84:9a:8f:a5:51:b6:c9:32:e4:b8:
         2e:26:b8:2e:d0:8d:8b:02:c8:b0:72:88:4b:a7:58:cf:f0:d7:
         c8:e4:71:69:f0:5d:0b:58:7d:c1:12:fd:5a:c2:5f:71:2d:fe:
         35:aa:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----