Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us82BuGoWIB_xwJdaCdDM8yxbHk.roa
File:                     us82BuGoWIB_xwJdaCdDM8yxbHk.roa (raw, json)
Hash identifier:          OOfs7yC6gOGenlv0dJ7T9alhRrKH8IqPy4DGQrOFHvI=
Subject key identifier:   BA:CF:36:06:E1:A8:58:80:7F:C7:02:5D:68:27:43:33:CC:B1:6C:79
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BCB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us82BuGoWIB_xwJdaCdDM8yxbHk.roa
Signing time:             Wed 29 Sep 2021 02:47:00 +0000
ROA not before:           Wed 29 Sep 2021 02:47:00 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7115 (0x1bcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:00 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BACF3606E1A858807FC7025D68274333CCB16C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:19:4d:2a:34:cb:a6:b0:dd:ef:ec:15:ed:
                    13:3e:d1:7c:c1:9d:31:16:e4:77:1b:8f:8e:21:fa:
                    92:2c:7e:4f:f3:56:19:38:f5:ba:56:0b:82:4e:a6:
                    98:d3:61:f7:a2:14:41:2a:b5:55:1f:03:c7:a5:59:
                    04:17:0e:c6:d8:84:8e:a3:d1:74:3f:d4:7e:d1:81:
                    c9:fb:96:17:91:1d:0c:99:75:00:88:83:da:be:9c:
                    db:ea:a2:4d:e6:22:04:27:e1:03:51:6d:5c:16:9b:
                    b7:c2:e6:5a:56:a3:c2:d7:39:9f:ed:8a:cb:f8:e1:
                    05:62:66:9b:b4:3f:c0:7c:13:4e:94:ac:0c:96:e9:
                    10:68:de:a5:b6:f8:30:31:1b:87:63:ae:60:7f:c5:
                    ac:d9:d8:a9:41:8e:ce:2e:8d:dd:9d:08:28:70:f6:
                    57:0f:b9:23:61:5c:f0:6b:d4:52:38:a9:59:36:5b:
                    6e:40:24:86:af:df:ed:99:4c:7c:18:2f:ca:27:08:
                    c2:f8:8d:c3:98:88:6d:fa:a6:ad:16:f0:ad:4c:54:
                    fc:7d:f0:08:3d:a8:aa:71:14:df:67:b1:d6:12:78:
                    c8:9e:fc:38:42:3d:9f:89:94:8c:07:2d:fb:df:ab:
                    27:d3:91:51:7c:23:12:5f:87:a7:3a:db:84:ab:ff:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:36:06:E1:A8:58:80:7F:C7:02:5D:68:27:43:33:CC:B1:6C:79
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us82BuGoWIB_xwJdaCdDM8yxbHk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:76:a4:e1:55:4a:f1:e7:8f:a5:06:8c:0f:98:1b:88:4f:d0:
         0c:5b:68:7e:1a:96:0b:61:22:ba:c1:54:2e:9e:7e:45:c2:a8:
         89:56:20:97:73:0e:f7:4d:6c:2b:20:27:8f:e5:31:dc:cc:a0:
         b3:6f:c4:76:16:e9:a6:75:70:81:3e:10:c5:97:95:e5:73:ec:
         23:f0:07:53:e8:8e:e6:0d:ea:5d:13:2b:af:23:ef:c2:49:8f:
         ba:0a:32:c3:c5:1e:81:21:f9:ca:1f:63:53:13:b0:78:60:09:
         2f:8d:52:f3:e9:96:65:c7:8b:78:5b:66:28:ed:76:52:ac:9c:
         54:34:33:f6:02:61:5b:4b:32:cf:7c:f3:93:ac:a6:92:99:bb:
         b8:ae:e6:74:c2:4c:8e:50:6e:af:42:c5:8a:9c:62:4c:28:19:
         fa:00:7e:c1:46:f7:4f:c7:ab:1f:49:99:0e:b8:71:98:19:b9:
         d2:28:c2:11:9b:22:21:d7:4d:87:b6:4e:fd:f9:e5:be:28:eb:
         00:08:bd:41:b5:3f:a2:40:f4:43:29:fa:9e:cd:4b:e3:24:73:
         41:4d:e7:13:a8:5e:91:e3:f4:28:c8:eb:ea:e8:3b:47:9c:5c:
         0d:2c:08:38:90:ed:c6:d4:e6:4b:c0:a5:2b:a6:27:8c:d1:6e:
         e3:03:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----