Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qpEg57m3SEtQ6baEqo83yEFeuzc.roa
File:                     qpEg57m3SEtQ6baEqo83yEFeuzc.roa (raw, json)
Hash identifier:          XnpKjWPHn1TJzQ3DUDvzkMFKfF6wEyYmpgdpYq49H60=
Subject key identifier:   AA:91:20:E7:B9:B7:48:4B:50:E9:B6:84:AA:8F:37:C8:41:5E:BB:37
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D1D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qpEg57m3SEtQ6baEqo83yEFeuzc.roa
Signing time:             Wed 29 Sep 2021 02:48:37 +0000
ROA not before:           Wed 29 Sep 2021 02:48:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7453 (0x1d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AA9120E7B9B7484B50E9B684AA8F37C8415EBB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:bd:5e:8b:65:f9:1e:16:0c:2c:f0:09:a2:
                    89:94:2c:a8:34:b1:91:85:51:a5:ee:fc:fa:f2:36:
                    d0:19:65:cc:f1:c6:74:62:4f:a2:a6:dc:d0:b8:a7:
                    87:28:c9:17:1e:23:97:91:23:35:5a:d1:ee:b6:62:
                    82:60:7c:bb:df:0a:bf:4a:4b:d2:36:80:e2:88:f7:
                    d0:7f:0e:8a:bb:17:b5:86:df:c0:4b:4a:bf:6a:9e:
                    78:e4:a1:88:0b:37:5a:d8:a1:f3:5c:b7:fa:cc:d7:
                    15:43:c7:d2:44:80:d8:51:d1:8d:f6:72:d2:a5:0e:
                    00:62:f5:48:8d:08:78:d5:85:69:1d:db:f5:7b:9c:
                    31:7d:d4:b7:3a:10:cb:fd:95:75:56:44:62:aa:70:
                    62:e3:51:4e:39:b1:3f:96:28:30:3b:af:c8:1b:34:
                    07:c1:28:c7:c4:99:ce:c9:e5:5e:49:88:7e:3c:dc:
                    a1:61:89:3f:58:33:ea:52:5b:cc:07:94:93:a5:13:
                    74:4e:d8:44:be:64:fc:2b:fc:22:28:3b:9d:dc:c7:
                    b7:3b:c5:3d:38:6e:1d:27:90:29:26:17:a9:db:4c:
                    5a:7a:dc:f2:48:bc:53:17:34:df:99:fc:5a:91:ad:
                    a3:58:13:e7:e3:64:f5:8c:8c:a3:ef:40:e4:fe:15:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:91:20:E7:B9:B7:48:4B:50:E9:B6:84:AA:8F:37:C8:41:5E:BB:37
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qpEg57m3SEtQ6baEqo83yEFeuzc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:a7:d3:57:3f:ff:e9:98:39:ec:2d:fd:a6:89:86:22:44:
         e5:79:ac:21:0c:1b:ea:31:dc:88:04:b6:6e:ef:c5:f7:7f:42:
         76:21:ae:cb:ac:9f:dc:b8:b4:97:35:3c:9d:b0:3d:7d:e0:5b:
         e1:fe:1e:78:83:a0:15:ed:0a:98:9d:ba:62:be:a2:5c:35:ad:
         56:11:78:9c:45:07:7a:02:84:50:19:17:b2:bf:4f:37:64:a4:
         54:8f:01:35:c1:63:4d:c8:f2:96:21:85:e8:91:54:1f:7d:b1:
         65:d7:2a:47:8b:3c:50:a7:46:ad:94:03:bc:b2:db:f8:03:f3:
         e2:17:db:4d:87:ee:63:2f:d0:3f:df:79:2f:3c:8c:af:77:c7:
         7f:e8:eb:d5:6b:6d:86:29:5b:b1:55:33:7c:eb:f1:45:c9:9f:
         e5:71:59:aa:01:c6:89:d1:f8:dd:6f:1b:48:a3:95:9c:64:0f:
         e9:23:8e:3a:30:a4:88:60:f3:17:05:e3:8f:a3:5d:6b:18:61:
         6f:3d:19:82:3d:84:5d:f0:80:44:f9:d6:aa:2c:28:e9:1a:1d:
         c2:36:76:15:7d:7e:83:24:94:1d:1c:29:93:67:33:50:4e:35:
         7f:3a:e4:a7:dc:04:c0:ee:3c:6e:b0:8b:27:0d:fc:eb:db:db:
         25:90:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----