Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5N9vWIgFXgwgnaqucOU_DJWeeGM.roa
File:                     5N9vWIgFXgwgnaqucOU_DJWeeGM.roa (raw, json)
Hash identifier:          fpW2MMa6A6/Q6wSrZLLSkrRXnnhxIZvx07juM0nwVMk=
Subject key identifier:   E4:DF:6F:58:88:05:5E:0C:20:9D:AA:AE:70:E5:3F:0C:95:9E:78:63
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5N9vWIgFXgwgnaqucOU_DJWeeGM.roa
Signing time:             Sun 07 Feb 2021 12:24:46 +0000
ROA not before:           Sun 07 Feb 2021 12:24:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6125 (0x17ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:24:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E4DF6F5888055E0C209DAAAE70E53F0C959E7863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:e8:54:1d:c7:7b:86:4d:41:03:44:71:b9:
                    ee:b8:08:4e:32:03:5f:7e:b0:50:67:77:16:f1:92:
                    a2:0d:19:2e:0e:b3:00:e0:16:1b:5d:1f:b1:c2:3e:
                    ce:40:a3:15:c3:32:e7:7e:2d:81:f0:8f:98:55:8b:
                    f1:d6:79:18:4b:2d:41:65:81:e4:f8:ec:9f:e3:21:
                    45:91:6b:8f:26:fd:2c:ed:a2:6e:18:cf:b0:aa:d5:
                    ae:2b:37:b6:db:94:0a:6c:d9:c8:c3:b3:3a:9d:46:
                    bd:0c:99:e7:ec:87:4c:fa:3c:63:85:f5:31:b6:14:
                    d7:ba:14:5c:4e:bf:f7:6d:88:90:09:21:7d:da:19:
                    18:af:87:b5:7f:08:48:2c:c1:ea:ce:99:53:fd:34:
                    b2:20:d5:04:54:da:f4:f1:26:86:8f:d2:71:1c:d4:
                    d3:06:24:f3:6b:18:17:9d:9d:01:98:fe:cd:be:dd:
                    26:87:5e:8c:d8:ce:8d:95:49:db:4b:b1:ac:84:8a:
                    1f:5d:b3:b3:eb:c7:97:e1:78:73:d6:83:97:78:17:
                    ab:96:c6:43:6d:3f:bb:7f:d8:bc:68:f8:d1:11:63:
                    e8:ee:75:9a:4b:59:fd:ef:94:7a:62:24:66:22:ff:
                    e8:19:00:6a:fb:69:8a:31:17:bf:02:37:68:b2:5b:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:6F:58:88:05:5E:0C:20:9D:AA:AE:70:E5:3F:0C:95:9E:78:63
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5N9vWIgFXgwgnaqucOU_DJWeeGM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:75:6b:df:91:ee:2b:79:5d:fc:e2:f2:e7:2d:1b:76:26:ed:
         3c:f7:0c:87:cf:73:b4:fd:9f:8e:c5:91:e2:a2:e9:16:47:05:
         13:48:20:70:b9:ea:2f:9d:4b:8e:9c:5f:7a:bc:c8:64:e4:29:
         61:0a:fc:55:ab:17:7c:09:b7:7c:2d:39:90:17:33:db:c9:93:
         6d:26:d0:7e:cb:91:6c:ae:1a:ea:93:0d:b8:7e:62:42:78:bc:
         40:b0:e6:a9:4a:29:a4:13:78:f4:44:81:f3:17:48:41:99:ac:
         49:38:16:a0:64:c2:c7:59:54:a3:c9:04:df:f0:6d:df:52:55:
         9b:1b:33:f2:d1:6f:4a:a5:0f:e0:17:f4:10:66:49:05:55:91:
         73:6d:2f:72:01:f3:4e:2e:61:d1:5d:b5:fd:0c:81:ec:85:b9:
         8d:4c:6e:e4:ce:1d:48:1a:4a:44:a1:03:53:91:83:75:8a:f8:
         2d:e4:a5:1f:25:52:d2:6c:d0:32:81:27:ed:8c:76:a5:4e:84:
         0a:7f:e4:75:f4:b7:7b:22:12:ee:bc:07:84:29:41:24:df:a0:
         6b:2e:98:97:25:79:c9:2d:83:2e:66:7b:a0:99:c7:02:46:9e:
         57:3f:25:ec:66:09:d5:80:16:a4:44:f7:75:d0:80:90:d1:18:
         04:eb:f7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----