Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/25rPmzcbX4nooSC59CdKsoyjmNc.roa
File:                     25rPmzcbX4nooSC59CdKsoyjmNc.roa (raw, json)
Hash identifier:          6ilxEs1rQo5oSVI7HGpoy8kkQZEVhk/9QtHeVCSOfw8=
Subject key identifier:   DB:9A:CF:9B:37:1B:5F:89:E8:A1:20:B9:F4:27:4A:B2:8C:A3:98:D7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/25rPmzcbX4nooSC59CdKsoyjmNc.roa
Signing time:             Wed 29 Sep 2021 02:46:49 +0000
ROA not before:           Wed 29 Sep 2021 02:46:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7076 (0x1ba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DB9ACF9B371B5F89E8A120B9F4274AB28CA398D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:03:6a:41:82:f5:9a:ba:d5:17:f6:1a:2e:
                    e5:e5:b0:dc:25:a7:fc:90:bf:93:56:70:41:91:94:
                    b9:01:67:5d:0a:bd:af:a0:f4:d5:29:51:f8:4d:0c:
                    c3:b6:f9:d6:ef:25:74:96:93:e2:ce:ce:53:5f:2f:
                    1c:e7:86:cd:8e:6b:79:62:de:09:8b:31:67:ef:58:
                    cc:54:38:6d:9d:4e:aa:21:c0:3d:77:f3:80:c2:26:
                    6e:16:c2:5c:d3:8e:2d:79:57:57:f3:ea:5a:39:ac:
                    25:2f:fd:c1:d2:c4:cb:a1:1d:44:f6:f4:5b:7c:65:
                    28:0a:fd:6c:3c:7c:b2:09:90:4f:48:29:e9:18:34:
                    e6:2b:e9:a5:96:03:44:f7:0a:84:7b:63:8c:53:e2:
                    29:b8:95:49:6b:c2:47:32:e3:b1:68:fa:81:67:28:
                    19:05:ef:be:f2:ca:ba:5a:33:9c:28:ab:85:ca:14:
                    c7:49:87:54:46:a3:d0:2f:b9:0f:12:0b:33:22:21:
                    93:dd:c0:e4:83:f3:37:77:17:0c:2c:06:43:a2:c6:
                    ea:a4:b5:1a:ca:58:8d:c6:b5:24:b5:dd:98:34:4c:
                    d7:16:b3:0f:08:11:75:ee:df:0f:15:46:40:df:31:
                    ad:1f:8f:4b:cc:c3:a4:a2:d0:1e:7b:ac:7b:ec:14:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9A:CF:9B:37:1B:5F:89:E8:A1:20:B9:F4:27:4A:B2:8C:A3:98:D7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/25rPmzcbX4nooSC59CdKsoyjmNc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:ef:c4:d3:15:d2:55:22:1d:0c:97:89:1e:8b:5e:0a:79:73:
         af:2d:81:66:33:29:e1:3e:90:5a:55:d9:a3:b5:bd:eb:55:3c:
         c2:be:3e:71:9c:e9:3e:ea:09:ee:3d:ce:e1:6a:30:b3:27:15:
         a8:8b:00:59:24:00:4a:ff:70:07:fa:02:7d:64:02:4c:47:e8:
         05:98:0c:02:75:ea:e9:25:72:39:11:64:25:4f:61:75:7b:c3:
         32:5a:7d:b2:31:77:62:52:56:71:8b:c6:4e:0a:e8:f0:83:ee:
         96:3a:ed:0e:ca:51:e2:ce:ec:7c:cc:67:c7:76:19:a8:f9:1f:
         b5:ed:58:d0:c3:b0:66:70:cd:2e:46:dd:25:81:05:b3:7a:0a:
         bb:c2:e3:cf:3e:b5:8c:1d:7c:43:d8:0e:5d:ae:28:44:4b:c5:
         f9:2a:4c:6b:2e:12:43:1f:df:fc:ed:e4:77:4f:9d:a7:8c:b5:
         cc:7e:f8:1c:3f:bb:a5:cb:0d:14:73:f3:d9:88:bd:f1:cb:65:
         a9:ea:82:63:08:0d:ad:a1:13:26:f2:c5:b9:13:b7:01:74:a3:
         c8:95:6b:4c:0e:7c:e4:70:10:fb:cb:79:4b:9e:05:d9:9b:68:
         d2:9e:84:fc:5f:6e:44:21:17:e6:54:fa:05:70:ea:5d:bb:49:
         af:78:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----