Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/01dhErGVLS7LmgV83-4cowXje0g.roa
File:                     01dhErGVLS7LmgV83-4cowXje0g.roa (raw, json)
Hash identifier:          mBtjcm2n0X12jU33JMhvstDcvq0s+xsJOqloNfMixjI=
Subject key identifier:   D3:57:61:12:B1:95:2D:2E:CB:9A:05:7C:DF:EE:1C:A3:05:E3:7B:48
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E4B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/01dhErGVLS7LmgV83-4cowXje0g.roa
Signing time:             Tue 29 Sep 2020 09:55:34 +0000
ROA not before:           Tue 29 Sep 2020 09:55:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3659 (0xe4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D3576112B1952D2ECB9A057CDFEE1CA305E37B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:7b:a9:92:12:67:e0:b3:f7:16:cb:63:a6:
                    fa:a5:5b:38:b1:eb:3d:53:0f:fd:3d:b9:10:8b:81:
                    25:d6:46:a4:d3:5a:37:80:d9:78:99:4e:dd:11:41:
                    91:7e:19:22:33:73:aa:b7:4f:86:33:cc:ef:8a:5c:
                    68:5f:71:57:f7:16:b7:06:f0:8b:a7:c7:6d:8e:c2:
                    81:2e:d3:96:e9:bd:40:e9:cd:b7:db:91:37:dc:03:
                    10:6d:c6:5f:d6:85:6c:b9:cf:20:f7:60:8c:b3:42:
                    7f:e3:3b:2b:0e:af:e8:69:3a:21:45:6b:26:e6:f2:
                    a0:61:6c:7e:69:5f:3e:55:58:91:38:db:f5:a1:0c:
                    c6:ae:16:3e:26:7d:87:e9:b6:31:ad:95:41:8a:42:
                    3d:1d:79:9c:8f:64:66:78:a5:6c:46:99:e3:85:b6:
                    84:cc:92:72:46:33:5c:60:46:47:5f:55:c7:a0:13:
                    a9:87:1a:26:e9:59:08:64:cd:fc:86:f7:d8:56:9f:
                    d0:5a:70:6f:d3:eb:9c:0a:30:ee:cd:0f:70:7a:7e:
                    95:7e:18:ac:74:c8:e5:3c:2d:98:04:c6:bc:eb:60:
                    ab:82:aa:0d:51:1d:8a:4f:85:80:58:5e:c1:f7:e8:
                    c6:f1:8b:3a:60:68:5d:fa:aa:b5:3b:2a:b9:d2:af:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:61:12:B1:95:2D:2E:CB:9A:05:7C:DF:EE:1C:A3:05:E3:7B:48
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/01dhErGVLS7LmgV83-4cowXje0g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:9a:2d:c6:18:ac:bb:ab:2b:8f:4f:5b:cc:2b:a2:dc:ca:
         66:7e:fb:6b:25:03:61:38:a3:a8:b4:6d:51:e2:1f:ef:8e:6e:
         e2:bc:3b:1d:bb:82:a1:b7:77:32:db:52:2c:d1:58:77:19:4d:
         86:f7:2b:da:89:45:63:2c:72:52:f8:67:44:03:4f:0c:42:07:
         86:a4:f8:dc:96:d1:23:88:e2:5d:e0:d2:22:32:5a:c0:56:2f:
         a6:f9:d4:88:bb:5f:21:35:04:30:66:25:02:0e:a4:72:6a:8c:
         30:22:aa:f4:51:4c:7e:3b:0a:47:90:01:10:bc:8f:b4:95:f3:
         c3:a3:4a:9d:28:78:2b:dc:b4:e1:27:31:d8:4c:9d:5a:3f:7e:
         fb:11:dd:28:e4:c2:5e:5a:92:08:b4:db:f7:0e:d3:31:bd:34:
         a9:2f:2a:b1:ac:05:83:1c:16:ff:dc:3a:76:fc:71:6f:e7:ab:
         e5:6e:5e:5e:6b:f6:94:ea:6d:30:4b:34:7e:c7:1a:8c:04:ed:
         0f:23:3e:36:2e:f6:44:1e:2a:03:84:8c:98:e1:c8:75:77:91:
         53:22:b2:7f:57:3a:dd:2c:ea:3c:3f:9b:24:e7:c9:a0:ed:1d:
         38:53:77:56:ae:95:06:91:97:cd:37:90:8c:99:9c:ef:80:4b:
         bf:fb:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----