Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us95PCo5hPKsEX80Kcjfr_So8sI.roa
File:                     us95PCo5hPKsEX80Kcjfr_So8sI.roa (raw, json)
Hash identifier:          8MLNE56l7X8vcYXRtomsPc6LUbvo4EDOMmentlC8Ivk=
Subject key identifier:   BA:CF:79:3C:2A:39:84:F2:AC:11:7F:34:29:C8:DF:AF:F4:A8:F2:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C7B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us95PCo5hPKsEX80Kcjfr_So8sI.roa
Signing time:             Wed 29 Sep 2021 02:47:49 +0000
ROA not before:           Wed 29 Sep 2021 02:47:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7291 (0x1c7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BACF793C2A3984F2AC117F3429C8DFAFF4A8F2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:0f:90:1f:e6:6e:b6:ea:39:e7:17:39:ec:
                    3b:82:07:c8:cc:21:73:3c:4d:30:39:35:cf:e9:57:
                    6e:64:c1:e3:6c:e2:1a:3a:90:33:7b:bd:9f:66:1f:
                    2f:64:7e:07:c1:58:b2:4c:18:bc:ef:86:a6:c3:69:
                    c4:bb:c9:a4:f7:8e:14:1b:6c:99:eb:c5:11:ea:2a:
                    69:44:59:ab:6f:68:68:70:2a:b7:6d:2b:a5:52:29:
                    2f:b5:30:78:58:e3:82:5c:53:5d:30:c2:41:65:1c:
                    c3:e3:08:45:e4:b7:2d:91:34:a3:ba:96:f4:ea:8b:
                    9f:1d:61:ff:9c:b0:a6:30:f3:fe:3a:b9:d7:c5:84:
                    ba:a2:72:6c:0c:38:f7:7e:29:a7:4d:6e:9e:53:83:
                    c0:99:4f:ff:12:9f:39:42:db:8b:b7:48:ca:86:11:
                    a7:02:5f:01:6d:39:e4:db:03:03:3a:68:9b:99:27:
                    1d:56:09:10:cc:2d:fe:37:c0:74:b7:f8:2b:2a:04:
                    fb:c5:ed:2a:7d:66:6a:a0:8d:6d:61:8d:a5:65:90:
                    54:47:87:15:ae:d7:89:74:86:31:56:99:3f:4d:02:
                    c9:34:23:5c:b5:35:b5:e8:9b:58:e2:d5:a5:4f:62:
                    66:ac:60:c8:26:42:ff:cf:5d:da:ad:ab:b4:61:58:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:79:3C:2A:39:84:F2:AC:11:7F:34:29:C8:DF:AF:F4:A8:F2:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/us95PCo5hPKsEX80Kcjfr_So8sI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:51:0a:59:6c:17:eb:6e:0f:61:be:b5:e7:1f:e9:39:ba:
         eb:90:a3:11:b2:92:00:4f:5b:41:45:71:73:94:60:91:ea:66:
         a1:ef:12:b3:e2:d2:c3:1e:fd:c3:67:e9:e0:b5:9c:80:48:8a:
         a9:ab:69:e2:58:c4:53:24:ff:e9:8e:48:7d:04:c8:06:4d:4a:
         2f:86:a0:e5:50:d3:5a:09:55:84:5e:fd:7e:04:f4:1e:24:43:
         d0:c4:0a:86:64:a2:1d:7c:c0:e8:26:1f:b2:b9:bb:aa:4a:5b:
         a7:22:23:f9:89:38:15:03:f9:3f:8e:23:7f:e2:9b:c0:14:e5:
         1d:7b:4a:8f:6d:f4:26:1f:b3:7e:ba:23:b1:87:64:51:5d:fa:
         f7:80:68:cb:3b:4c:aa:45:b5:6b:cc:35:fa:50:e3:d2:38:04:
         43:9b:62:2b:b0:82:82:26:47:84:44:b8:2a:37:88:ce:b0:3a:
         7e:c9:c8:d7:8a:2d:88:95:31:59:82:36:26:91:69:d5:3a:42:
         49:e9:ef:b5:b6:ef:ec:b9:cf:57:b7:d1:64:13:8c:6b:09:21:
         f9:97:5d:d1:47:f7:3d:54:df:c6:db:1c:6d:7c:03:8d:61:c1:
         89:b1:dc:58:6d:d5:b7:cf:4d:3f:51:c2:df:ec:76:8f:ab:28:
         9f:2f:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----