Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxhlEspwwn9sScmEQRe97S5C11s.roa
File:                     uxhlEspwwn9sScmEQRe97S5C11s.roa (raw, json)
Hash identifier:          QKA0SR92ivCT3dAPrZp0Rr3ockgkCG8QUrajFBLYums=
Subject key identifier:   BB:18:65:12:CA:70:C2:7F:6C:49:C9:84:41:17:BD:ED:2E:42:D7:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CF3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxhlEspwwn9sScmEQRe97S5C11s.roa
Signing time:             Wed 29 Sep 2021 02:48:25 +0000
ROA not before:           Wed 29 Sep 2021 02:48:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7411 (0x1cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BB186512CA70C27F6C49C9844117BDED2E42D75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:ee:ee:87:32:63:67:91:90:f3:c5:8c:a0:
                    ed:32:6d:c2:77:3e:4e:85:62:7f:39:a7:21:95:75:
                    d8:e6:b0:a3:07:1d:a2:4d:d5:e8:74:df:32:f9:5e:
                    78:e9:03:23:c4:db:1c:24:74:e7:99:e1:3c:ae:59:
                    5f:f4:43:b7:dc:ad:6d:51:22:f3:50:09:be:65:42:
                    c1:b5:9b:7b:be:0d:06:34:e8:b6:15:30:ef:ec:82:
                    54:e1:f5:28:d5:65:d8:7d:b5:57:00:46:90:78:03:
                    8a:81:59:69:d5:75:4a:59:c8:bc:55:ca:c8:4a:5b:
                    ef:ee:d4:83:8f:4d:e5:c9:ac:5a:28:79:b9:16:c1:
                    0a:cc:f8:fa:90:31:5c:95:88:be:1e:43:21:f9:94:
                    29:97:ee:55:da:b3:a2:00:ff:49:e5:5d:ec:f9:01:
                    b1:9d:32:5b:75:7c:ab:d1:37:36:60:56:0f:95:a0:
                    a6:f8:96:c7:7f:cb:1b:b3:54:6f:4a:73:7c:59:ed:
                    94:dc:1c:a0:57:54:50:2e:3f:ee:1e:4b:47:89:39:
                    84:b6:5e:b9:34:dc:d4:42:11:ff:d1:82:21:3d:3b:
                    c3:56:72:da:d0:cf:b7:af:8a:99:83:4d:04:b3:13:
                    50:6c:c7:94:3e:c1:41:2e:24:5b:4b:0d:9c:c0:96:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:65:12:CA:70:C2:7F:6C:49:C9:84:41:17:BD:ED:2E:42:D7:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uxhlEspwwn9sScmEQRe97S5C11s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:8d:28:3d:1c:76:d5:5f:b4:16:8b:8c:7e:98:90:8a:1c:
         15:81:8f:82:a8:7f:4d:f3:0d:4a:87:ff:8f:02:86:e9:b3:68:
         a6:92:e9:c7:67:21:93:7a:0e:89:5e:4a:43:47:cb:53:7b:51:
         9f:17:c4:1f:6c:b9:91:22:a2:87:b6:1f:35:05:9f:4b:02:7a:
         78:2d:d9:99:b7:50:6e:8c:0c:4e:b2:bf:9b:1b:0e:b7:9b:a9:
         4a:1f:61:93:e8:54:4a:b1:7f:2f:f3:ab:ee:6e:b5:43:be:86:
         1b:cc:92:8b:04:95:71:c6:09:9d:10:42:46:96:1f:1c:f9:dc:
         65:d6:7d:7c:3e:e8:57:80:a6:85:d9:7a:85:db:64:a9:0e:1e:
         f2:cb:72:16:eb:38:c2:04:f0:2e:26:97:66:54:8a:36:0b:29:
         75:43:ee:b2:c6:4e:40:ab:3d:bf:28:2f:e8:c9:d5:5a:31:9c:
         dc:ec:c5:8e:74:ac:fe:7d:ac:69:68:08:09:7b:03:0d:7f:52:
         a0:91:be:36:0b:f2:9a:58:a8:00:8f:f4:ce:38:ef:63:0f:ea:
         0d:6c:51:21:f1:f4:56:93:b9:d6:50:a4:49:42:24:1e:ba:37:
         26:7b:93:fb:0b:fe:a3:8f:ce:0e:2e:05:b9:2e:f0:bb:9a:ad:
         d7:b3:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----