Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5aPIeqbaGQRtlRMtrKnqgDziVuc.roa
File:                     5aPIeqbaGQRtlRMtrKnqgDziVuc.roa (raw, json)
Hash identifier:          8Nc+4k9A83Vcbs8+bVnA1HxrrAiouAP5EaxGwLD49Yc=
Subject key identifier:   E5:A3:C8:7A:A6:DA:19:04:6D:95:13:2D:AC:A9:EA:80:3C:E2:56:E7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C9E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5aPIeqbaGQRtlRMtrKnqgDziVuc.roa
Signing time:             Wed 29 Sep 2021 02:47:59 +0000
ROA not before:           Wed 29 Sep 2021 02:47:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7326 (0x1c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E5A3C87AA6DA19046D95132DACA9EA803CE256E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:0f:06:bc:43:c1:28:42:94:2f:8d:9c:fd:
                    a4:de:44:0e:fa:2c:2c:81:bf:ae:e9:33:ad:6a:77:
                    0e:cd:e1:47:85:d2:27:07:f4:91:51:5d:d7:75:c7:
                    09:5d:58:ba:5b:5d:05:ed:c2:7d:56:94:76:4c:50:
                    37:73:e5:72:b2:ff:1c:a6:ad:9e:dc:db:0a:00:14:
                    17:dd:16:c5:34:ac:b1:7e:2e:5e:3d:33:e1:e2:8a:
                    82:07:87:da:5e:2c:50:9b:ed:3e:16:1b:c5:45:ef:
                    55:78:c5:65:d0:6c:1a:2f:dd:f7:7f:b1:f3:ac:d2:
                    26:66:5f:0b:64:ad:b8:08:1e:86:d0:c0:07:ec:cb:
                    49:09:ed:03:78:a2:4d:b9:4e:7f:ad:69:2a:d7:9c:
                    c0:7a:8c:35:71:08:23:61:36:4c:15:78:a6:e8:6d:
                    03:25:b0:7a:7f:30:b9:9d:a0:7f:74:6e:18:df:12:
                    9d:ff:d2:7a:19:0e:db:bd:f7:15:6a:40:21:1e:aa:
                    d1:16:39:aa:34:ce:3e:58:21:3b:93:a3:ff:90:5e:
                    36:5e:9f:63:d4:27:99:9d:8d:8f:b8:c3:b1:fd:50:
                    1d:2e:08:6c:94:f5:0a:32:b1:2b:dc:a0:fb:d6:48:
                    a9:c3:d1:69:4e:6c:29:91:2c:b0:26:22:4d:55:7c:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A3:C8:7A:A6:DA:19:04:6D:95:13:2D:AC:A9:EA:80:3C:E2:56:E7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5aPIeqbaGQRtlRMtrKnqgDziVuc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1c:0a:83:a6:40:6e:af:2f:04:67:be:01:8a:97:36:ff:32:
         c8:56:c1:e5:94:1e:53:a4:3d:cb:7c:fb:d4:39:d7:ae:25:1f:
         00:24:56:01:4a:22:3b:e9:60:4d:4d:04:b6:99:c8:f1:5a:d4:
         1e:85:01:e8:fb:16:42:14:e0:80:36:23:74:d5:96:a4:42:44:
         be:5a:b4:3f:04:10:6c:72:ad:b7:5d:c8:4f:f8:6c:93:fc:4a:
         21:5b:c3:c7:30:fa:d8:8b:3d:4a:73:11:37:09:46:d3:2c:eb:
         7e:5c:0d:1f:7f:04:76:61:a0:05:75:aa:92:cd:42:fb:1b:47:
         b4:6a:73:bc:5f:0a:0f:af:05:c3:01:04:5e:dd:5c:6c:2a:67:
         a3:35:bd:6b:72:3c:76:e7:6d:9a:81:d0:0b:7c:ed:bb:73:de:
         f7:4a:64:40:55:f4:bb:cf:5f:9e:0c:79:81:6c:ab:16:01:e9:
         ad:5b:14:f6:9c:a9:58:15:ab:8f:07:e6:13:9e:62:26:2c:39:
         6f:8c:15:c6:2b:c2:79:fb:95:a2:74:ce:9c:53:f5:a4:ad:e6:
         55:39:15:c0:df:22:9f:74:31:ee:5c:fe:8f:c1:6b:d1:6d:45:
         7e:69:12:ac:85:dd:34:81:3f:62:d9:e4:33:0f:db:c2:63:b4:
         b0:e7:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----