Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wBDOY5NxhWLhrr1RcqrIKWgfUAA.roa
File:                     wBDOY5NxhWLhrr1RcqrIKWgfUAA.roa (raw, json)
Hash identifier:          eN+GRpbQvGBvT84VA2eoukMuVyNHP5FlrTEtVWEIOHY=
Subject key identifier:   C0:10:CE:63:93:71:85:62:E1:AE:BD:51:72:AA:C8:29:68:1F:50:00
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wBDOY5NxhWLhrr1RcqrIKWgfUAA.roa
Signing time:             Fri 25 Nov 2022 04:39:10 +0000
ROA not before:           Fri 25 Nov 2022 04:39:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff08::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8407 (0x20d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C010CE6393718562E1AEBD5172AAC829681F5000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:fd:b2:67:57:83:c1:0d:97:fb:a6:34:7b:
                    84:eb:1f:4d:b1:da:e8:93:f7:1d:68:3d:b4:2d:7f:
                    e1:d0:a4:2f:9c:67:ee:80:34:59:c8:ab:73:2b:53:
                    00:40:7b:b2:d8:27:5e:7e:a9:8a:49:7d:31:c2:0c:
                    8e:08:3a:84:23:9a:ac:0c:ef:4b:2a:bc:54:38:4a:
                    08:3b:eb:0e:a7:5f:90:69:ee:70:6b:83:73:85:df:
                    96:96:17:92:0d:5a:eb:4b:02:f4:ff:a6:86:9f:0d:
                    86:0e:8b:28:f7:81:93:51:e9:87:dc:6b:54:e6:50:
                    00:dd:cc:fe:16:56:b2:75:0b:b5:e1:bf:1f:84:3c:
                    4a:b4:8d:4d:34:1a:b9:37:ef:44:f2:23:26:c8:ed:
                    d3:0a:e3:5a:30:72:d2:5b:a1:18:5b:a0:2f:c7:75:
                    d1:38:8b:ec:59:d4:67:52:1e:c9:83:b6:ce:b9:ce:
                    a2:5d:20:76:97:b3:e7:2c:3e:77:25:25:47:75:0f:
                    ca:74:9f:61:12:63:ef:51:4a:e2:26:4c:85:58:1c:
                    c3:66:5c:b1:41:b3:bb:25:fa:f7:0b:f6:a3:a2:47:
                    09:6e:c3:3c:65:8e:77:6b:ea:3f:e6:6f:96:ac:51:
                    02:0f:46:9a:02:ee:4c:e3:7a:ec:7d:77:db:a2:d2:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:10:CE:63:93:71:85:62:E1:AE:BD:51:72:AA:C8:29:68:1F:50:00
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wBDOY5NxhWLhrr1RcqrIKWgfUAA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff08::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:52:a7:fd:0d:49:0b:fd:9a:d4:7e:89:7a:a5:f2:80:72:
         aa:db:a9:25:fb:a4:b8:f8:86:f9:8b:95:16:bf:ec:a0:e5:0f:
         e1:fc:22:65:cc:7f:49:fb:a0:8c:7f:19:14:b2:be:ab:92:c3:
         e0:b9:e2:4b:d3:35:cb:96:32:99:63:ad:74:8b:51:c2:6b:ae:
         de:48:89:35:d5:4b:ce:9d:7e:39:90:2d:d2:64:87:07:9f:74:
         3f:14:e4:aa:eb:d7:b1:80:20:d9:c8:40:89:83:5f:f8:07:13:
         30:94:df:6f:9d:ba:79:d0:f8:d7:70:ae:6e:b8:61:4e:db:0b:
         9c:8f:ea:f0:c1:ac:12:1f:52:ce:8b:b3:64:61:ba:c9:6d:d8:
         80:75:28:4f:70:2c:db:28:2e:73:33:f9:55:4c:61:6e:28:4e:
         54:7f:c3:76:2e:1e:fc:6c:90:a6:dc:9f:ea:10:f1:72:44:8e:
         08:7d:fa:11:5f:90:d9:75:87:e2:63:56:36:57:87:84:fb:83:
         7d:ee:42:ab:12:9e:f0:02:b9:51:f8:85:d3:ab:8e:d0:ef:90:
         f9:37:13:ae:73:aa:19:cd:bd:07:4a:9e:a6:af:5f:b3:c5:0d:
         6b:d0:2e:8d:85:95:ef:83:c9:da:54:8c:73:89:68:29:cf:ed:
         f1:14:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----