Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa
File:                     tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa (raw, json)
Hash identifier:          bh1Dti7V13ar9uM8VpsLDl645TOZ270QQTh4QWvCz6o=
Subject key identifier:   B4:9C:66:5F:99:DB:D4:45:DB:C1:08:6B:2E:53:82:83:8A:C6:26:7F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D37
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa
Signing time:             Wed 29 Sep 2021 02:48:46 +0000
ROA not before:           Wed 29 Sep 2021 02:48:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.193.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7479 (0x1d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B49C665F99DBD445DBC1086B2E5382838AC6267F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:77:6b:3b:98:ee:48:2d:a3:83:5f:96:51:
                    37:3b:97:77:e3:5a:59:34:01:9e:18:ab:3f:02:25:
                    dd:c9:e5:00:d6:ad:ef:73:31:b1:78:fb:fb:56:4a:
                    85:1d:96:0b:04:41:db:f4:0f:67:d9:d5:38:9f:12:
                    56:c3:67:43:c0:a1:17:02:33:78:4c:3b:dc:be:33:
                    19:b3:5e:9b:9f:0a:cf:3d:e7:4b:04:26:6b:55:40:
                    bd:dd:0e:d7:b7:e2:85:e9:92:2d:83:ac:84:5b:7f:
                    2c:67:8f:ab:78:5c:70:79:0a:5e:c6:15:4d:ca:67:
                    0e:d6:76:a0:dc:f1:b7:02:ef:31:ac:7f:9a:d9:81:
                    1a:32:cf:11:95:88:cb:07:38:0d:a5:99:f4:7b:0b:
                    d7:c5:6d:d1:bb:f0:e0:4c:92:ef:6d:c0:0a:47:f7:
                    45:68:7e:7a:0b:8d:01:bf:a3:2e:45:d1:63:65:7e:
                    74:4d:b2:1b:80:dd:8d:3d:3e:9e:89:9c:58:f1:fa:
                    40:fe:f4:c4:ca:74:39:44:0b:ac:c4:4a:6c:72:4b:
                    f8:6f:f4:72:7c:50:11:1e:48:27:0a:d9:ba:d0:23:
                    13:2a:30:de:6f:51:ba:30:db:95:e1:b5:42:d9:49:
                    b9:36:f9:59:3e:87:e5:bf:f1:f4:6d:5b:7c:11:5b:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:66:5F:99:DB:D4:45:DB:C1:08:6B:2E:53:82:83:8A:C6:26:7F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:19:d4:b6:03:22:e4:84:b9:63:55:b8:36:5a:0d:15:cf:1c:
         91:ee:25:c7:8c:37:cf:36:46:73:fb:02:32:6f:c4:25:da:0b:
         8e:17:8f:af:d0:95:9f:81:c6:c1:ff:c3:a7:bd:0b:93:95:08:
         3b:0e:90:f7:23:02:d7:8e:25:b3:c8:c1:d1:15:2c:7e:0b:f3:
         2c:58:6a:9d:dc:de:45:8f:81:a7:4d:2d:4c:23:26:d9:eb:5a:
         bb:5d:49:bb:f8:66:1d:ed:f2:eb:e8:81:b9:f9:58:ec:d6:25:
         da:62:01:be:d8:b1:60:77:67:d0:bf:79:b2:43:53:58:c2:dc:
         0d:3e:85:bc:46:a3:f9:b2:7f:36:0e:6c:eb:80:92:a4:f3:b0:
         3c:39:60:5a:ab:14:33:b5:36:9e:d5:b9:95:80:17:fe:46:f8:
         d0:00:a9:a1:26:6c:2d:92:0f:39:9e:4e:6d:1f:b4:86:ae:32:
         79:6b:11:36:52:5f:1c:88:2b:ca:b3:21:60:b0:8f:65:24:bb:
         39:35:29:b4:8b:cb:de:46:e1:f9:ba:f2:ba:8f:3e:c4:87:79:
         1a:d3:7a:56:07:b3:dc:6b:e7:62:7a:4e:22:a6:90:cb:cd:d1:
         ca:fb:9f:dc:5c:7e:9a:ea:b2:31:49:0f:31:16:af:b7:15:89:
         5d:35:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----