Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMgvOCfHZfFs2qCcslyPifeRNLk.roa
File:                     tMgvOCfHZfFs2qCcslyPifeRNLk.roa (raw, json)
Hash identifier:          VUBBT9IEAhPsWNoBfL3cv8nCwRaZMZrjWFGjxpopltQ=
Subject key identifier:   B4:C8:2F:38:27:C7:65:F1:6C:DA:A0:9C:B2:5C:8F:89:F7:91:34:B9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A75
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMgvOCfHZfFs2qCcslyPifeRNLk.roa
Signing time:             Wed 29 Sep 2021 02:45:22 +0000
ROA not before:           Wed 29 Sep 2021 02:45:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6773 (0x1a75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B4C82F3827C765F16CDAA09CB25C8F89F79134B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:1d:4d:66:43:c8:4c:3b:11:6b:d1:f8:54:
                    40:41:60:65:34:85:42:69:69:29:2d:f9:65:5d:58:
                    ff:4b:62:2f:1f:13:bd:88:04:0a:9b:c4:1e:9e:4a:
                    b0:99:1c:de:ba:78:e7:a1:37:e0:de:0a:bb:1d:8e:
                    81:65:87:45:d0:01:52:2a:a8:8c:91:89:e4:0b:ed:
                    bf:40:32:88:80:ff:63:02:53:8e:3c:fa:be:8d:12:
                    dc:77:ff:18:4e:15:52:2d:5b:b4:6e:40:df:2a:fb:
                    93:19:66:33:da:b7:8e:7e:bc:9e:7c:e8:fe:72:ee:
                    1c:65:2a:20:71:a6:88:ba:5f:4d:e1:10:8e:d2:81:
                    5d:86:ee:41:28:5c:2e:b7:8a:b0:11:35:5a:3d:aa:
                    c9:7f:a3:c3:05:eb:b4:ea:c7:d5:06:d0:4d:83:f0:
                    89:d7:06:45:ac:28:61:47:dd:25:88:1b:e9:6e:63:
                    05:dc:f6:d1:02:6c:20:79:ef:42:64:ca:24:19:d9:
                    63:19:f1:7c:50:b7:ca:da:64:56:5b:4a:19:17:97:
                    68:b8:0d:a8:04:62:e6:ec:bb:53:e3:b1:66:97:78:
                    bc:be:10:4c:4f:b5:9d:e6:79:f2:f6:9b:ae:a6:ff:
                    50:47:5e:a8:40:18:d9:e7:39:20:1a:75:6e:3b:4d:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:2F:38:27:C7:65:F1:6C:DA:A0:9C:B2:5C:8F:89:F7:91:34:B9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMgvOCfHZfFs2qCcslyPifeRNLk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:d3:62:e4:92:39:97:79:e1:f6:3e:48:0d:ac:08:52:fa:51:
         bf:b1:4c:04:7a:79:0d:9d:b2:24:fe:ae:9f:25:bb:d8:bf:d1:
         58:3f:cb:95:71:2d:8b:9f:35:1d:d9:a8:4e:9f:e4:02:d4:54:
         e1:50:d3:6f:50:f5:52:2d:aa:1f:58:37:1a:1b:09:94:7b:fd:
         9d:a2:68:35:61:a5:0e:56:0d:b0:12:5d:82:09:86:64:8c:d6:
         db:7c:a9:62:c9:53:26:ed:a1:7c:2a:61:85:0d:50:b2:d0:e1:
         59:ec:3b:82:3f:e7:10:45:5d:fe:31:ee:d2:a9:fe:df:8a:ec:
         c1:b7:9a:73:64:ff:5d:af:d6:be:9d:d1:66:c9:6d:96:de:57:
         f2:22:29:b0:eb:44:c6:8b:ab:c4:f9:ec:1b:d0:24:6f:4d:4a:
         b6:b0:fa:26:cb:9f:7f:e9:31:22:72:32:85:79:86:db:d7:3c:
         93:0e:a1:9f:66:c8:00:30:51:2b:30:26:07:ab:b2:a0:30:d7:
         08:8e:97:cd:13:b7:0c:69:96:45:36:d1:15:ff:f2:be:62:2a:
         2f:cf:ad:0a:d9:ef:d5:25:14:c4:b3:bc:1f:90:a1:b2:e4:f7:
         ff:f7:54:44:b6:36:87:5c:0a:29:1f:4e:26:4d:04:8e:96:fd:
         a0:39:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----