Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRoCw3_fp539Smge3gju2PE1IRc.roa
File:                     tRoCw3_fp539Smge3gju2PE1IRc.roa (raw, json)
Hash identifier:          zyuUkWAU2sMZVoeGCDTQTAlQbAHtnsk7VBe29QhV76o=
Subject key identifier:   B5:1A:02:C3:7F:DF:A7:9D:FD:4A:68:1E:DE:08:EE:D8:F1:35:21:17
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRoCw3_fp539Smge3gju2PE1IRc.roa
Signing time:             Wed 29 Sep 2021 02:47:10 +0000
ROA not before:           Wed 29 Sep 2021 02:47:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7149 (0x1bed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B51A02C37FDFA79DFD4A681EDE08EED8F1352117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:c6:e0:d9:80:7e:37:d8:7e:32:69:3e:b4:
                    df:1f:20:3b:aa:6f:e9:43:b2:d0:46:95:6a:f5:73:
                    34:cd:dc:d3:65:0f:11:63:7e:18:f5:3f:6d:78:07:
                    30:54:48:62:d7:16:60:98:03:52:4e:da:ad:c9:0e:
                    5b:de:73:49:84:5c:c3:7a:c6:9d:c3:5a:26:91:48:
                    f2:1b:40:df:6a:7f:b3:70:cd:23:a1:7e:e5:1d:55:
                    8a:fe:14:67:27:47:6d:8e:ba:0c:71:27:1b:d9:40:
                    29:18:f5:ac:9f:fb:c1:18:c1:e0:7c:f9:71:75:37:
                    0f:50:03:dd:2d:4a:d5:a9:30:35:0a:40:52:02:9f:
                    2f:34:42:16:65:67:a2:89:2a:5f:7a:de:b3:12:2a:
                    79:ab:88:d3:6b:55:4d:69:ee:5d:2c:52:28:ff:8f:
                    d4:4c:44:3e:bd:bd:28:b6:d1:6a:2b:8c:bd:05:8a:
                    ef:91:f7:9b:45:7a:c7:b2:69:0a:11:1c:76:45:fc:
                    ab:2c:9e:7d:e0:b3:37:22:5e:00:16:ab:84:f9:c0:
                    8d:d1:94:6b:49:76:cf:d3:70:8b:4a:c3:f3:fb:ec:
                    b9:5c:70:9c:3a:d9:45:6a:5e:0d:82:46:3f:2c:3a:
                    ec:58:7b:56:61:30:9a:88:d8:d2:ad:93:a4:98:ea:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1A:02:C3:7F:DF:A7:9D:FD:4A:68:1E:DE:08:EE:D8:F1:35:21:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRoCw3_fp539Smge3gju2PE1IRc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:fb:25:25:87:6d:b8:59:be:7f:d4:75:81:ad:b7:49:97:
         6b:5c:b2:58:b4:7e:bb:64:92:0c:a8:ef:4b:8b:79:b0:43:17:
         9a:31:be:f5:38:15:dd:48:35:39:d5:7c:56:77:0d:e5:19:63:
         ad:14:1a:fc:29:3c:a1:1f:32:11:90:72:b4:7c:6f:1d:55:3f:
         7e:9a:f4:bc:15:3a:29:6b:9b:47:80:fb:e3:64:51:1b:4c:d8:
         2d:1b:fb:2d:9b:e3:5e:ed:7d:1a:cb:72:44:f8:d7:53:35:1d:
         a2:51:23:46:98:14:65:21:69:b7:58:34:0d:64:dc:3f:43:be:
         80:2d:44:07:d9:f6:41:50:29:a6:90:fa:67:b5:d7:4c:9e:95:
         de:3f:f8:e9:b1:79:ed:80:aa:97:43:7d:b9:f9:ca:2c:46:c9:
         d9:55:1a:be:3e:d9:6c:71:f5:12:48:8b:14:27:c6:95:b2:d9:
         65:61:5e:6c:0a:32:47:7f:f0:b0:38:2c:0d:88:79:da:b6:76:
         18:d4:a0:95:21:cd:51:b6:a2:ce:73:02:38:ba:16:3d:0d:7e:
         ed:02:f9:ee:26:91:fd:7a:37:22:ea:86:47:bf:d8:04:6c:ab:
         db:ee:46:ac:34:dc:6c:5b:a7:1b:ef:10:c7:f1:84:1f:cf:f4:
         f4:86:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----