Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qRJc15GUWrApDauFGdfDVQldBCg.roa
File:                     qRJc15GUWrApDauFGdfDVQldBCg.roa (raw, json)
Hash identifier:          nbfRgy04vnyP9jtQTEGebp0pE3lISPaX1IctUDUtFFk=
Subject key identifier:   A9:12:5C:D7:91:94:5A:B0:29:0D:AB:85:19:D7:C3:55:09:5D:04:28
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qRJc15GUWrApDauFGdfDVQldBCg.roa
Signing time:             Wed 29 Sep 2021 02:47:55 +0000
ROA not before:           Wed 29 Sep 2021 02:47:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.204.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7310 (0x1c8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A9125CD791945AB0290DAB8519D7C355095D0428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:77:1d:03:d1:d8:4a:41:ee:1f:7a:d8:7a:
                    e3:92:b0:52:b8:bb:e2:61:7e:2a:d5:6b:b5:a6:cb:
                    12:d0:16:3a:2d:96:21:b2:d9:0b:b9:59:fe:8b:27:
                    14:4f:37:55:8a:3d:d2:ed:d3:84:89:0d:17:12:76:
                    07:4f:6b:a6:29:4a:56:9d:4c:02:11:ca:6f:a0:20:
                    1e:a3:3a:4d:0a:d4:1a:3c:dc:74:58:b9:e9:1e:ef:
                    55:85:c6:5f:d1:b2:f0:5e:21:89:fe:70:bb:2a:e6:
                    52:b1:2e:0e:e0:14:f7:c1:5b:19:2b:2f:e9:16:8e:
                    22:64:71:57:d4:15:05:6d:13:65:0a:41:99:fd:e5:
                    53:d3:fc:48:8a:e1:05:b1:eb:01:d1:af:2a:11:4b:
                    05:af:36:c9:2b:59:60:4d:bf:a7:57:60:e0:61:75:
                    40:76:1e:d2:0a:97:cc:3d:17:a6:8b:90:8b:aa:8d:
                    22:a0:66:1d:a0:a7:71:a5:be:0f:b5:11:f1:98:14:
                    21:24:d2:47:68:e2:8b:76:bb:d7:55:14:92:b0:44:
                    f9:90:b0:cd:71:cd:52:15:40:70:29:9a:59:ca:4a:
                    d5:73:ff:23:ca:d6:1f:2f:b1:ea:73:8d:b3:24:0f:
                    2d:6b:85:5d:d5:34:ce:89:3f:ce:1d:74:27:20:c1:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:12:5C:D7:91:94:5A:B0:29:0D:AB:85:19:D7:C3:55:09:5D:04:28
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qRJc15GUWrApDauFGdfDVQldBCg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.0/26

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:eb:2b:d3:c4:c4:f2:5a:93:37:bb:1c:39:82:9c:71:de:
         51:9e:92:3a:9c:df:13:d1:85:a2:59:e6:e7:72:0c:e5:fa:f9:
         17:04:95:c9:ad:82:e7:64:1f:f2:c6:54:82:42:c1:0c:3e:ff:
         0c:48:49:45:92:f7:ea:f6:0c:2c:12:6c:28:8e:da:f4:bf:64:
         82:74:fa:2a:09:ba:98:bb:ff:9d:37:ed:7f:f8:85:92:75:ba:
         1d:04:df:f8:03:96:9d:40:6d:d0:19:b8:72:ba:67:a2:a6:04:
         8a:03:43:d5:d3:60:d7:8b:92:61:82:0b:32:a1:b6:ac:03:6b:
         81:41:9b:21:a9:8b:dc:ab:fc:87:52:c4:d4:d2:44:b3:00:b2:
         77:c9:b5:53:ea:62:01:cf:41:21:01:5c:fc:83:4c:27:f2:71:
         49:9f:85:b3:f2:64:48:37:1d:1a:bf:a6:2e:ac:1b:af:b0:2e:
         84:b7:8b:e8:98:3b:16:af:1d:bb:df:59:e1:c6:1f:7a:90:52:
         80:c4:18:28:e4:4b:d6:83:04:39:41:09:f3:29:e8:74:87:6e:
         77:c8:20:6e:20:40:76:3b:72:4c:02:4b:1b:3b:c0:2c:8d:01:
         8a:b8:f1:4d:1f:4b:0f:64:04:c3:50:aa:6d:f4:43:78:8a:79:
         03:fe:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----