Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0uY4sYFOtl33uivzyewp797m820.roa
File:                     0uY4sYFOtl33uivzyewp797m820.roa (raw, json)
Hash identifier:          0rCaxU1fwa0erzLFjjmctdJsUgtoIxUncXI/TaPX2OI=
Subject key identifier:   D2:E6:38:B1:81:4E:B6:5D:F7:BA:2B:F3:C9:EC:29:EF:DE:E6:F3:6D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AF1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0uY4sYFOtl33uivzyewp797m820.roa
Signing time:             Wed 29 Sep 2021 02:45:56 +0000
ROA not before:           Wed 29 Sep 2021 02:45:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6897 (0x1af1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D2E638B1814EB65DF7BA2BF3C9EC29EFDEE6F36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:93:7f:7e:a0:6b:5a:57:32:df:08:a4:62:
                    17:89:79:74:ff:d0:15:d4:83:b9:09:87:7b:3f:12:
                    8f:09:ba:5b:f4:a2:1a:85:b1:58:78:05:51:46:a7:
                    b7:92:6c:fc:97:ea:68:72:64:1f:0c:85:79:94:3a:
                    45:ee:db:8b:c7:2e:a5:aa:d6:7e:00:52:7f:b3:54:
                    77:7e:92:92:0e:8a:6e:0c:d7:c1:01:b7:eb:e8:63:
                    38:0a:5e:ce:53:e2:f2:a3:c7:69:41:cc:d1:27:1e:
                    71:4b:ac:6c:91:6d:b9:b8:9f:1d:26:56:b5:3b:68:
                    0e:8c:1b:99:04:a4:1a:0b:b7:76:19:ff:4a:37:1f:
                    97:6c:b8:b5:51:4a:d9:98:43:e6:95:2a:bd:7d:57:
                    11:5e:a0:73:c8:3f:50:ef:5f:9d:0b:2d:f7:ff:c6:
                    92:56:39:4e:f5:fc:5e:04:c7:c8:98:80:0f:90:53:
                    4e:14:b7:e2:7c:0b:d3:52:c2:7a:65:26:ad:11:d2:
                    18:e0:02:b4:e5:1e:f1:f5:b0:64:94:b5:61:1c:b3:
                    05:c8:39:73:a9:27:3b:b1:f8:94:73:e6:1c:8d:36:
                    32:a5:f8:ed:92:da:75:fb:fe:00:f1:84:72:b3:c3:
                    29:49:ed:83:f7:91:46:ac:ce:80:5c:73:fc:69:e4:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E6:38:B1:81:4E:B6:5D:F7:BA:2B:F3:C9:EC:29:EF:DE:E6:F3:6D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0uY4sYFOtl33uivzyewp797m820.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:50:1f:61:c1:4d:88:e9:f1:5b:54:c9:41:db:7f:5a:8b:d4:
         98:2e:99:2f:eb:4c:5f:19:11:c1:4c:00:23:02:9c:0c:14:b7:
         83:43:d6:08:c5:22:20:e2:d0:ff:39:45:79:cc:92:f4:fb:e5:
         ae:fe:c4:51:80:3e:4e:a4:c7:aa:b6:71:6e:b2:6b:9d:43:3d:
         84:41:95:2e:aa:37:79:bb:f6:30:f5:ce:1d:d5:0a:ec:b6:89:
         26:f5:d3:a9:a0:b6:f8:fc:8b:fd:9d:f9:ca:3a:63:b4:ea:9f:
         46:c8:27:90:11:19:9c:b4:30:6b:70:6c:78:a2:19:db:b3:89:
         ad:31:b1:ac:f6:96:c6:9d:71:08:da:82:69:b8:43:f7:7a:03:
         57:e8:bb:dc:4d:d6:a9:c4:fd:7a:39:a4:60:38:37:7e:8e:c3:
         a0:35:64:67:67:23:34:3f:06:57:91:1d:56:a0:13:5d:6a:56:
         2e:d3:5f:bd:33:c4:d7:6d:38:24:26:5f:cd:35:5c:2f:74:11:
         b2:7b:36:c2:ac:71:68:96:ea:0b:03:2a:ba:1a:e4:b6:b6:40:
         d7:ba:f1:25:f2:54:92:df:7b:d3:4b:41:b1:31:ab:a3:93:42:
         30:28:50:03:b4:44:15:82:14:3a:37:bb:44:0e:33:b0:a7:34:
         97:d0:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----