Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZb0djB7rPCmxLsWUj1OEv03fg0.roa
File:                     vZb0djB7rPCmxLsWUj1OEv03fg0.roa (raw, json)
Hash identifier:          8Z9lIhI2k3yk9LojrWWNsGlhxzIo48DJT2gjbCdudnY=
Subject key identifier:   BD:96:F4:76:30:7B:AC:F0:A6:C4:BB:16:52:3D:4E:12:FD:37:7E:0D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AD0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZb0djB7rPCmxLsWUj1OEv03fg0.roa
Signing time:             Wed 29 Sep 2021 02:45:47 +0000
ROA not before:           Wed 29 Sep 2021 02:45:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.219.192/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6864 (0x1ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BD96F476307BACF0A6C4BB16523D4E12FD377E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bc:6f:b8:b8:31:5d:47:8b:11:29:71:0d:b0:
                    d3:04:a1:64:55:69:6f:e7:73:b7:fb:67:23:7c:0b:
                    10:90:8d:43:40:65:2f:84:ac:40:2a:4e:ff:05:91:
                    40:2b:87:9b:f0:98:11:2f:54:ef:46:11:ae:ee:42:
                    ef:cb:a3:54:46:17:bc:01:71:da:7b:8d:02:84:2c:
                    f6:49:d2:f2:ec:18:8d:83:54:85:96:d2:5e:b7:46:
                    0f:fa:3e:d1:1d:a4:25:b2:fb:3c:4c:e8:cd:32:4d:
                    e4:b5:13:9b:46:62:92:90:61:ae:e2:4a:33:42:32:
                    a3:a1:dc:9e:e8:96:0f:31:2e:16:9d:b0:7d:a9:b0:
                    13:a5:9e:79:a5:69:ca:df:af:cc:80:bc:19:7b:7e:
                    62:56:3a:bc:71:2f:bb:55:69:82:1a:a4:ff:b6:8a:
                    ab:78:c2:b6:d8:e2:01:70:b9:47:42:ef:2f:1d:41:
                    de:47:02:5f:6b:b4:99:37:77:60:38:ed:2a:df:43:
                    80:44:0f:79:d2:ae:6c:36:18:21:bc:b6:46:14:86:
                    51:6b:f6:27:f9:70:ca:bd:c7:df:37:f0:ee:6e:18:
                    b0:04:86:9c:76:d3:9c:6f:da:98:74:c8:b6:03:8c:
                    b9:ce:28:af:6f:f3:67:bf:a8:d6:ee:38:a8:b8:0d:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:F4:76:30:7B:AC:F0:A6:C4:BB:16:52:3D:4E:12:FD:37:7E:0D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZb0djB7rPCmxLsWUj1OEv03fg0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.219.192/26

    Signature Algorithm: sha256WithRSAEncryption
         b5:d4:e3:5d:ae:a5:3d:34:71:e8:6d:a4:bd:00:b5:31:bd:a7:
         c6:e4:12:35:f8:3b:1b:7f:92:5f:6d:af:2b:04:5d:93:23:a0:
         ce:a0:9c:cf:1c:61:23:0e:34:97:b3:f3:e8:44:cc:b9:f8:8c:
         a3:44:11:65:1f:49:94:df:5e:9c:40:98:ab:12:d1:21:6d:4d:
         7c:3e:9b:4f:2f:2b:44:4c:b3:fc:6f:5f:8b:70:68:66:97:da:
         2a:6b:d2:18:d5:c8:87:8d:4a:44:6d:5b:2c:91:95:cc:1f:17:
         63:29:27:5f:20:3c:b8:ab:56:77:c8:6c:83:40:61:d0:b6:cd:
         ec:37:f0:7e:8a:f3:4a:33:2d:d4:d7:66:d6:0f:cb:48:50:70:
         27:e4:df:45:e9:98:f3:89:84:2e:2a:e0:dd:31:c5:89:85:f3:
         32:4e:ae:6b:fd:bb:06:0d:99:2e:05:c2:fd:76:66:54:9b:a1:
         78:5f:c7:65:a7:f6:b3:e5:8d:2f:e5:83:d0:bc:61:62:20:3c:
         68:4d:3b:d3:8a:97:02:dd:de:61:9c:18:13:c8:d4:d7:28:78:
         dd:2a:17:8c:87:89:ab:2e:5a:7f:aa:ab:b0:da:9f:3f:49:84:
         52:30:16:5d:42:22:d9:09:c6:94:d6:7e:8c:72:52:59:3c:85:
         7d:2d:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----