Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1iW4chUZsSHJsnfHBErkaJpcE-0.roa
File:                     1iW4chUZsSHJsnfHBErkaJpcE-0.roa (raw, json)
Hash identifier:          i0xG1aygmwhrwKPcp+c/Vv1BsacnjBVkuS39Qp+WodE=
Subject key identifier:   D6:25:B8:72:15:19:B1:21:C9:B2:77:C7:04:4A:E4:68:9A:5C:13:ED
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       181D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1iW4chUZsSHJsnfHBErkaJpcE-0.roa
Signing time:             Sun 07 Feb 2021 12:26:24 +0000
ROA not before:           Sun 07 Feb 2021 12:26:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.52.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6173 (0x181d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:26:24 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D625B8721519B121C9B277C7044AE4689A5C13ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:87:41:20:cf:ae:4b:6e:70:59:91:c9:8c:
                    3d:c4:57:8c:1f:49:98:ab:c1:ac:5d:20:88:2a:f6:
                    f5:d0:44:7f:7d:e1:23:85:dc:a1:ee:1f:d1:94:40:
                    0c:b7:85:a9:f4:b4:49:38:a6:cb:6f:47:eb:27:25:
                    b2:8f:0a:47:c9:e6:d3:84:0d:24:72:09:51:ca:34:
                    1a:0a:58:10:e1:17:18:98:ec:8f:b0:e5:99:c9:41:
                    a3:fd:05:0f:30:55:cc:4e:8e:e5:d1:b1:e5:c6:2d:
                    7b:66:8e:7c:e4:b2:69:c5:fa:af:98:55:04:70:71:
                    3c:7a:a2:f3:fc:8d:b5:3c:3c:97:d8:5b:16:25:1d:
                    92:27:b2:b4:4b:45:82:f7:f3:10:a8:3a:5c:94:28:
                    36:87:ef:a0:ca:de:bd:dc:a4:ae:73:20:2e:76:9e:
                    fd:56:3f:84:6b:66:5a:57:d7:6d:f9:40:35:93:7e:
                    15:c1:19:24:66:57:3c:91:bf:2b:6a:6b:af:99:90:
                    d5:f6:13:02:8e:63:1b:7c:b9:e0:07:3f:63:cc:ab:
                    2a:5e:62:fd:b5:73:00:2a:6e:94:cc:29:aa:33:21:
                    98:3d:3f:f5:d0:f8:27:fb:e6:68:c6:e7:59:6b:9c:
                    20:b5:c6:77:b3:47:4a:94:6b:85:1a:19:b6:25:b1:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:B8:72:15:19:B1:21:C9:B2:77:C7:04:4A:E4:68:9A:5C:13:ED
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1iW4chUZsSHJsnfHBErkaJpcE-0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:6d:10:43:ed:33:f9:61:89:cb:f6:d4:66:82:86:67:31:
         f8:e8:09:36:16:06:cc:3f:32:d9:6f:0a:8c:98:19:cd:cd:ca:
         57:9a:78:a7:f8:e5:b5:46:5f:5b:ca:c9:24:ff:3a:00:e2:d4:
         fd:fb:53:db:87:6e:0a:ae:eb:03:f0:29:77:3c:2c:11:24:f9:
         ee:1f:21:80:da:2c:2b:e3:91:39:cd:4e:05:7b:40:4f:34:78:
         72:f4:dd:db:3a:e0:e2:0a:7c:78:d5:70:b9:71:3f:10:85:78:
         5f:fe:57:15:3f:47:a4:df:36:9d:47:8f:12:95:99:07:0a:7e:
         48:91:cc:68:c2:a8:0b:b4:9d:8c:37:ac:64:54:08:c9:86:56:
         72:a0:71:21:8c:00:bd:22:27:7f:e3:8a:4d:ca:b4:b2:01:93:
         63:55:47:d0:81:9c:27:a8:4f:1d:c7:2f:96:c7:69:d9:35:81:
         68:2c:00:ba:50:df:f7:27:72:18:5d:03:cf:4a:da:7e:14:52:
         98:7e:c7:0d:47:38:b5:fb:64:f8:9f:c0:7e:f3:bf:e9:87:86:
         40:f5:6b:ec:3d:d5:95:12:a1:a3:9a:a1:d4:60:88:6d:45:ee:
         ef:7d:43:b5:ea:40:85:ac:57:88:2f:b2:7d:0f:66:bf:56:64:
         9b:df:85:2e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI2MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ2MjVCODcyMTUxOUIx
MjFDOUIyNzdDNzA0NEFFNDY4OUE1QzEzRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfGodBIM+uS25wWZHJjD3EV4wfSZirwaxdIIgq9vXQRH994SOF
3KHuH9GUQAy3han0tEk4pstvR+snJbKPCkfJ5tOEDSRyCVHKNBoKWBDhFxiY7I+w
5ZnJQaP9BQ8wVcxOjuXRseXGLXtmjnzksmnF+q+YVQRwcTx6ovP8jbU8PJfYWxYl
HZInsrRLRYL38xCoOlyUKDaH76DK3r3cpK5zIC52nv1WP4RrZlpX1235QDWTfhXB
GSRmVzyRvytqa6+ZkNX2EwKOYxt8ueAHP2PMqypeYv21cwAqbpTMKaozIZg9P/XQ
+Cf75mjG51lrnCC1xnezR0qUa4UaGbYlsbX/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1iW4chUZsSHJsnfHBErkaJpcE+0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFpVzRjaFVac1NISnNuZkhC
RXJrYUpwY0UtMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATQwDQYJKoZIhvcNAQELBQADggEBABB9bRBD7TP5YYnL9tRmgoZnMfjoCTYWBsw/
MtlvCoyYGc3NyleaeKf45bVGX1vKyST/OgDi1P37U9uHbgqu6wPwKXc8LBEk+e4f
IYDaLCvjkTnNTgV7QE80eHL03ds64OIKfHjVcLlxPxCFeF/+VxU/R6TfNp1HjxKV
mQcKfkiRzGjCqAu0nYw3rGRUCMmGVnKgcSGMAL0iJ3/jik3KtLIBk2NVR9CBnCeo
Tx3HL5bHadk1gWgsALpQ3/cnchhdA89K2n4UUph+xw1HOLX7ZPifwH7zv+mHhkD1
a+w91ZUSoaOaodRgiG1F7u99Q7XqQIWsV4gvsn0PZr9WZJvfhS4=
-----END CERTIFICATE-----