Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2_3y3tK64ZcUaWmRXD0YcrYiyFc.roa
File:                     2_3y3tK64ZcUaWmRXD0YcrYiyFc.roa (raw, json)
Hash identifier:          8z7WEpmHQ43lF5gN9EF/GT4ypSEXFzauOrC+2qVqAOY=
Subject key identifier:   DB:FD:F2:DE:D2:BA:E1:97:14:69:69:91:5C:3D:18:72:B6:22:C8:57
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2_3y3tK64ZcUaWmRXD0YcrYiyFc.roa
Signing time:             Sun 07 Feb 2021 12:25:19 +0000
ROA not before:           Sun 07 Feb 2021 12:25:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6141 (0x17fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:25:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DBFDF2DED2BAE197146969915C3D1872B622C857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:e5:af:4a:ba:e4:29:3e:2b:18:ef:20:46:
                    00:17:16:70:13:dc:cd:3b:23:fd:a0:75:87:df:99:
                    26:a2:37:b1:b4:2b:85:b7:76:01:b7:a0:e3:bb:6c:
                    2b:d1:3d:4b:70:b1:a7:e2:cd:3e:d3:5d:44:fe:b6:
                    b7:77:86:90:7d:97:d9:4b:b2:48:f9:b9:ca:5a:ce:
                    ae:d1:e7:f2:5c:3a:1e:56:88:98:9f:fc:c6:7b:85:
                    eb:5b:68:05:24:24:0c:cd:c4:7e:52:83:a2:4d:2f:
                    a4:5b:e5:cc:6c:5c:1c:b5:bd:24:fb:fe:00:34:18:
                    ae:34:24:b0:f4:85:a9:c3:06:ad:21:e2:a5:fc:1f:
                    aa:0c:6c:85:bd:fc:d8:d9:e0:70:f4:70:0c:53:91:
                    b9:35:fb:97:96:b8:f5:a4:7a:23:46:b5:3c:4e:54:
                    4d:12:76:dd:8b:e7:52:f9:28:b9:de:09:79:e1:c8:
                    19:13:7a:e3:60:e4:09:b1:b4:5f:3f:eb:f3:bd:d6:
                    ce:2b:c3:a3:cb:e2:44:0d:4c:cc:6a:1d:8d:96:6b:
                    ea:fb:18:e4:c5:e4:f5:31:11:49:a3:54:95:19:b0:
                    b8:8d:e5:11:3b:8e:95:c1:82:d8:43:dc:77:92:00:
                    9b:30:0b:eb:70:b6:46:1c:02:d5:50:57:4a:ef:8d:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FD:F2:DE:D2:BA:E1:97:14:69:69:91:5C:3D:18:72:B6:22:C8:57
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2_3y3tK64ZcUaWmRXD0YcrYiyFc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:bf:82:61:55:93:bd:2a:41:8f:c8:ae:96:f4:2e:5d:53:
         bb:d7:74:74:87:56:c4:84:f2:a7:09:96:aa:67:4d:ff:dd:0a:
         4a:79:b5:75:6f:ea:24:a0:de:26:2a:85:b3:4c:94:d7:b7:a9:
         8c:16:c2:78:5c:37:4f:9c:38:78:03:b3:05:34:2b:79:8a:e8:
         e1:6c:f8:8f:bd:ba:93:e3:3f:ad:6b:de:b8:02:69:59:c5:05:
         4e:1c:e7:50:ee:65:97:a1:18:75:03:60:a6:46:48:34:e2:d0:
         9e:15:9c:0f:a6:ab:b9:44:2e:8b:ec:18:f5:4a:70:0d:d8:cf:
         f3:d3:d7:17:5b:2c:66:7c:1c:a3:2f:89:47:d2:57:9d:d2:8f:
         fc:a0:93:ea:12:1e:c9:8b:5a:1b:99:f3:ce:1b:2b:18:3c:30:
         68:7d:79:e2:4a:bc:61:e0:92:96:9d:13:ee:4c:25:25:e7:fb:
         73:80:d0:cb:5f:15:39:2e:81:23:ca:71:60:59:3d:75:be:1d:
         2d:cd:b5:ad:40:03:d8:b6:0f:25:b9:1f:e9:c2:cc:67:09:ac:
         c1:32:cc:6a:33:0e:79:72:3f:a8:8f:79:bf:3c:04:97:6b:62:
         5f:b4:b7:a0:6c:b9:37:47:3a:c5:5d:b4:41:45:21:26:18:65:
         16:27:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----