Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w4S0LwrexhtsW54_P2Pj_VU0eaQ.roa
File:                     w4S0LwrexhtsW54_P2Pj_VU0eaQ.roa (raw, json)
Hash identifier:          7I0WHNaIoPakW1fCyGhoQHUBdx2aJK/ZbnSZnv2TqzU=
Subject key identifier:   C3:84:B4:2F:0A:DE:C6:1B:6C:5B:9E:3F:3F:63:E3:FD:55:34:79:A4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w4S0LwrexhtsW54_P2Pj_VU0eaQ.roa
Signing time:             Wed 29 Sep 2021 02:48:15 +0000
ROA not before:           Wed 29 Sep 2021 02:48:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7378 (0x1cd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C384B42F0ADEC61B6C5B9E3F3F63E3FD553479A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:ce:1e:f0:8c:f2:b1:3b:fe:1a:6e:11:0c:
                    30:0c:d0:6f:83:63:b1:0a:f1:51:5f:e8:79:7a:c7:
                    d1:e0:d9:c1:45:ac:4b:ac:93:94:ea:35:f0:61:99:
                    28:9e:70:75:4c:2e:c6:1d:90:95:4f:95:9a:d9:4c:
                    08:14:34:c5:db:c2:b8:93:a5:11:84:cc:ba:32:58:
                    60:a2:5d:25:a8:a2:46:fd:60:52:f9:da:7e:9d:01:
                    a6:51:02:9f:b9:ce:e6:19:5a:42:f6:c2:6d:e9:8b:
                    2a:e4:d6:61:16:a0:06:89:2a:97:23:56:65:01:27:
                    c7:09:ec:04:60:25:4f:88:34:a3:74:04:4e:56:59:
                    97:16:a7:31:a2:0e:18:40:a7:74:7d:d0:7a:03:b9:
                    d4:ca:c3:5e:a3:ab:fd:88:ca:41:2d:bc:8f:2a:04:
                    56:14:95:28:f4:0a:1e:ce:ee:b5:40:f6:53:43:1d:
                    e9:e1:af:80:aa:af:3a:c6:f1:19:90:52:1d:e5:68:
                    a4:e6:40:3b:1f:68:32:92:84:f3:3c:ff:3d:5f:b8:
                    1d:1c:36:1c:85:56:e5:4d:89:e3:64:c2:4d:26:87:
                    6f:f7:8a:c5:eb:ff:6e:bf:9f:5a:65:d4:4c:12:c1:
                    4e:28:91:5c:00:f5:39:94:d8:54:36:93:ee:be:b7:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:B4:2F:0A:DE:C6:1B:6C:5B:9E:3F:3F:63:E3:FD:55:34:79:A4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w4S0LwrexhtsW54_P2Pj_VU0eaQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:fc:90:a7:30:5c:ce:f1:d5:06:43:ee:7e:8d:a3:06:fb:
         f3:1c:04:15:0f:6a:99:96:de:64:7a:da:31:56:83:1c:ef:ce:
         6b:ce:40:cf:64:49:fe:2f:e4:ff:70:49:51:fc:d5:cc:5d:a8:
         86:c5:b5:ca:6e:75:7d:61:f6:5e:9e:1a:f8:d6:74:6a:14:d9:
         90:f9:51:44:f8:02:69:c8:5c:36:ac:11:81:94:df:3e:b2:e9:
         49:d9:5c:aa:8a:eb:d6:66:1d:90:06:0d:09:d3:55:73:e7:9f:
         f5:33:54:2e:45:c7:5a:22:ef:2f:b7:eb:70:e4:1b:c9:27:ca:
         04:1d:18:af:4e:0d:d7:d0:36:6e:80:19:d6:57:b0:52:c9:ae:
         94:36:cb:3c:28:2d:af:bd:00:91:7e:32:51:d9:d4:d8:2b:97:
         59:cd:c1:76:ef:2d:17:17:b5:3d:6e:c8:56:fe:af:89:4e:21:
         c2:1d:49:1f:1c:a3:5d:c2:82:7b:44:75:ca:cd:09:35:3c:99:
         83:ce:39:5c:06:ff:1b:fc:1e:6c:b8:e7:22:35:3f:f1:2c:63:
         52:24:a5:37:1b:66:d3:90:0a:40:bc:6d:58:16:d0:64:81:e2:
         20:4c:41:1f:49:39:7d:e8:0c:aa:9f:42:36:95:77:dc:54:30:
         f9:52:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----