Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/42mJEpg8SzjHkx3KlxJSWIPKfQA.roa
File:                     42mJEpg8SzjHkx3KlxJSWIPKfQA.roa (raw, json)
Hash identifier:          wpoEnc9HIB8vS8PAGjVvlSUb6jucumcqNLthPSV5WRY=
Subject key identifier:   E3:69:89:12:98:3C:4B:38:C7:93:1D:CA:97:12:52:58:83:CA:7D:00
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D18
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/42mJEpg8SzjHkx3KlxJSWIPKfQA.roa
Signing time:             Wed 29 Sep 2021 02:48:36 +0000
ROA not before:           Wed 29 Sep 2021 02:48:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        106.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7448 (0x1d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E3698912983C4B38C7931DCA9712525883CA7D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:7f:a1:6c:c8:e4:13:a3:47:8d:83:3c:d0:
                    cf:12:a5:76:6d:57:84:20:7a:4d:3d:e3:05:a9:32:
                    42:1e:5b:ed:73:be:f3:61:ab:79:7c:9e:9f:ec:d3:
                    51:47:97:fe:fe:83:0d:0a:f1:f1:cc:3c:22:7b:0e:
                    c2:33:e5:8e:0d:78:d2:12:ef:0c:31:34:57:4b:d3:
                    ca:78:ce:86:1b:3c:39:55:58:c4:3a:a5:c5:25:12:
                    74:be:07:49:88:d7:11:70:28:67:86:42:40:27:82:
                    c8:7e:95:ce:4a:33:2d:7d:f9:d4:89:3b:3e:94:a3:
                    26:75:02:fe:9d:de:9f:fd:31:61:06:f8:64:b1:8b:
                    17:05:c8:64:4d:ed:44:0c:8a:04:5c:13:4b:ac:1b:
                    6a:99:06:e8:af:dc:d3:de:98:0c:f8:5e:bf:08:ef:
                    6c:f1:80:99:82:74:d5:e5:c1:61:4d:83:96:eb:5b:
                    99:8f:77:0d:a6:32:18:34:5e:15:13:b9:65:0b:f1:
                    c6:e0:af:fc:7a:cf:c9:1b:e5:4e:88:10:cb:b9:0c:
                    c1:b0:a7:aa:62:1a:5f:78:40:a6:56:68:f9:86:ba:
                    b4:bf:38:47:f0:93:8a:20:5a:99:53:ce:ac:dd:27:
                    8a:5c:c0:58:de:dc:5a:a7:04:3b:11:6e:08:19:a8:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:89:12:98:3C:4B:38:C7:93:1D:CA:97:12:52:58:83:CA:7D:00
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/42mJEpg8SzjHkx3KlxJSWIPKfQA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:d6:95:c5:fb:25:ec:77:02:df:f4:eb:eb:10:eb:54:7c:
         07:cc:14:96:ca:af:dd:26:c4:ce:a5:db:33:c5:87:9a:d7:bc:
         ba:4e:46:d8:4c:b9:c7:1d:24:d6:42:46:1d:e6:98:70:17:21:
         7d:26:24:a3:44:39:cb:0c:1a:c3:e4:e1:e4:7d:99:9c:6f:b2:
         25:8a:81:e3:05:1e:32:1c:2c:5c:47:20:04:5b:47:24:3c:4e:
         78:e9:07:ef:ee:5f:19:9b:81:d5:99:93:17:63:39:73:42:22:
         e8:1e:d2:13:34:79:37:9a:c5:2d:2e:fc:5c:59:54:c2:ea:78:
         48:61:3f:e1:ae:4c:82:5e:f5:25:f8:cc:7e:cf:e1:4b:25:30:
         d5:a3:17:24:25:88:2b:18:eb:f9:36:c0:a6:9d:40:18:94:33:
         04:0c:47:3a:fb:2e:7a:b1:d2:56:b3:76:90:d8:34:ed:f5:0c:
         7e:f6:c5:6c:29:8f:0d:1f:a5:d3:39:07:92:6e:9b:95:cb:ff:
         db:08:73:35:3b:05:59:a7:e8:2a:10:d3:17:c2:19:6e:b4:e8:
         72:0d:d8:72:87:50:f6:9d:21:4a:c4:8c:54:0b:6c:60:ae:86:
         61:01:83:2c:1f:4a:d8:e1:f0:2e:f6:51:7d:17:bc:2a:e6:11:
         5b:6b:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----