Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rnCguNK4YHm38NRyXejMHNd0FQs.roa
File:                     rnCguNK4YHm38NRyXejMHNd0FQs.roa (raw, json)
Hash identifier:          mOvc4Jf/mI2lVT29k4wcDxnhaUhmVUSfKmB4hww3C+o=
Subject key identifier:   AE:70:A0:B8:D2:B8:60:79:B7:F0:D4:72:5D:E8:CC:1C:D7:74:15:0B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rnCguNK4YHm38NRyXejMHNd0FQs.roa
Signing time:             Wed 29 Sep 2021 02:48:58 +0000
ROA not before:           Wed 29 Sep 2021 02:48:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7524 (0x1d64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:58 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AE70A0B8D2B86079B7F0D4725DE8CC1CD774150B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:aa:fa:6a:ea:96:cd:c8:79:1f:1a:d8:96:
                    18:00:35:ef:e4:9d:22:72:9f:18:d9:59:4b:12:57:
                    fb:44:99:bc:b7:6e:6a:9e:d6:a5:9a:42:f0:3e:4a:
                    8d:79:22:ac:03:e5:ba:4c:ad:4c:e1:dd:2f:de:74:
                    86:0a:99:60:9e:6d:23:95:d3:8f:a4:55:ce:cb:c1:
                    b2:fb:36:f7:de:d1:b8:6f:c8:69:ff:0f:44:dd:b4:
                    69:db:14:8e:17:f7:34:24:b8:0d:4a:df:c9:4b:7e:
                    ac:6b:c2:58:66:67:84:e9:4c:50:ca:c0:b7:29:c6:
                    eb:dd:d7:12:ae:ef:fd:cc:91:96:fc:01:ea:d3:a7:
                    e2:a1:46:d8:e5:70:6f:c4:74:3f:e2:b4:d3:ac:28:
                    89:d7:e0:5e:40:22:05:a7:1f:af:c9:1c:84:e4:7d:
                    8e:02:05:2a:04:75:a3:35:51:80:d9:9b:49:15:04:
                    78:ef:11:97:19:6b:b7:b3:eb:a2:1b:90:a2:8a:9e:
                    92:57:94:ab:eb:b8:d6:8d:f1:21:95:74:a2:50:e4:
                    88:6f:7e:3c:ec:dc:8d:62:e8:91:22:e7:f7:6e:08:
                    45:70:03:ac:ee:8a:64:5f:a5:5c:a7:e3:25:ea:fe:
                    69:dc:24:61:eb:ae:00:a3:52:13:e7:65:88:82:fc:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:A0:B8:D2:B8:60:79:B7:F0:D4:72:5D:E8:CC:1C:D7:74:15:0B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rnCguNK4YHm38NRyXejMHNd0FQs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:79:0e:de:a9:1b:7a:b9:9f:4a:09:b2:09:3a:de:25:e1:
         72:3a:08:7d:f1:53:76:64:51:68:f5:f1:a0:f9:1b:64:ef:f4:
         67:22:4b:32:03:ca:02:c8:17:4e:eb:64:31:71:c8:4e:dc:5d:
         09:c6:7a:ef:b6:8c:8b:fa:3e:0f:2f:9b:5c:3c:f8:3f:4f:6a:
         b0:50:85:99:d6:44:7e:1e:ab:99:5f:2c:84:a0:fd:7e:27:58:
         98:33:c1:73:89:cc:17:b0:59:94:e0:b5:25:6b:e1:21:a7:24:
         f7:ed:d7:92:09:d7:ea:f5:1b:cf:34:f3:59:5f:8e:02:eb:c9:
         02:32:7e:d1:e2:dd:2b:98:5c:3d:7b:52:30:66:65:87:31:05:
         21:64:2d:97:12:b3:88:56:02:d0:4c:a0:62:1e:eb:b5:9c:33:
         4a:66:62:82:45:f9:03:56:df:41:b9:14:c7:c9:7a:cf:70:b7:
         7d:7d:91:e5:ff:b9:6e:82:9f:47:a7:94:e1:c4:73:9f:4f:79:
         4d:48:97:5b:a1:db:19:2c:23:90:e4:fb:5b:af:80:f0:04:7b:
         5f:ce:1c:2a:91:23:41:42:e4:d2:91:19:c8:a7:44:35:7a:23:
         61:22:7d:44:9f:ff:ce:ba:94:6f:d4:8f:65:3e:cf:bb:71:1c:
         e6:de:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----