Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7HU0wmgKWR_6YntFRU3xjJZpJuY.roa
File:                     7HU0wmgKWR_6YntFRU3xjJZpJuY.roa (raw, json)
Hash identifier:          /QAvy+Hy9VNXuHcYUa0qqEVUiTZL3IieVFkInkm1cH8=
Subject key identifier:   EC:75:34:C2:68:0A:59:1F:FA:62:7B:45:45:4D:F1:8C:96:69:26:E6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E30
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7HU0wmgKWR_6YntFRU3xjJZpJuY.roa
Signing time:             Tue 29 Sep 2020 09:55:27 +0000
ROA not before:           Tue 29 Sep 2020 09:55:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3632 (0xe30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EC7534C2680A591FFA627B45454DF18C966926E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:05:1b:b6:62:3e:3c:a4:a0:36:35:2d:95:
                    c5:a0:38:b8:8c:f7:1f:ac:43:1e:b6:db:1b:57:55:
                    c6:6f:a7:06:9b:df:7d:50:85:50:a8:47:78:b5:35:
                    cd:ac:3f:bf:4a:3b:c1:53:12:cd:eb:07:15:51:bc:
                    da:e0:f3:36:02:a2:7e:c5:ca:5e:ba:02:21:ba:88:
                    99:0d:50:37:b0:31:7e:06:3f:32:1a:80:cc:0c:c5:
                    66:1a:48:6d:16:86:16:fa:29:87:a6:6b:48:6e:d7:
                    29:c7:fe:7b:fa:5f:8a:e1:7f:c1:e4:7e:4e:52:5a:
                    50:ac:8b:52:ea:9a:4e:35:b5:27:7b:57:f4:ea:29:
                    41:e1:9a:5d:4f:14:63:12:fb:91:c3:c5:32:c6:9f:
                    b2:5f:7b:d2:66:a5:80:12:d3:48:c0:fc:63:0b:12:
                    b3:9e:bc:32:0d:7f:44:c6:04:d6:2c:8c:b9:48:d5:
                    0b:28:62:b9:06:56:04:34:c2:26:c9:60:67:45:88:
                    fc:20:f9:97:fd:cc:75:f4:db:06:c3:b5:4b:38:8a:
                    cc:96:0b:02:f9:8a:74:0d:9e:fe:5d:6f:31:d4:e7:
                    a2:c8:08:49:0d:06:87:3d:e5:e4:6e:42:32:5d:f7:
                    6f:6e:e9:79:b3:ce:38:72:02:83:10:c0:c4:35:82:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:34:C2:68:0A:59:1F:FA:62:7B:45:45:4D:F1:8C:96:69:26:E6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7HU0wmgKWR_6YntFRU3xjJZpJuY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:99:c5:f7:28:8f:47:d7:7c:82:ac:50:07:14:ba:ba:c9:
         1b:e8:a9:c9:46:b0:41:fc:40:fa:b8:60:ea:f8:55:26:cc:41:
         e1:e9:b2:3f:74:04:12:02:b3:4e:0f:60:f2:ac:6b:30:14:29:
         bc:71:fe:aa:77:96:4e:79:19:72:d9:19:62:c4:6c:03:dc:98:
         c3:8e:05:50:73:21:24:5c:c8:5e:e5:d7:1f:81:75:65:7c:e2:
         bc:32:2d:5f:b5:44:08:20:5e:e8:2c:62:80:67:01:15:7d:7f:
         48:1a:b4:1b:05:34:36:bf:65:4e:3b:5a:11:ff:b8:2a:19:e8:
         b3:9e:dd:11:db:8b:75:b6:4f:5e:04:70:99:a7:e8:ec:7d:4c:
         3f:b0:89:68:04:85:cd:8b:67:3c:05:62:f4:e6:a0:02:44:d6:
         f0:bd:8b:ff:59:f1:83:69:cf:06:eb:51:4b:13:50:9e:2a:8d:
         48:b6:a4:12:5e:27:2a:ab:6e:1c:ef:a0:96:49:bd:93:95:26:
         25:b2:de:63:b2:f9:58:cf:38:12:68:13:9a:ea:f9:26:21:45:
         f0:cf:a5:c5:bd:97:2c:4d:fe:bc:f0:2c:88:b0:1b:38:3b:d5:
         00:4a:e1:8b:12:5f:16:6d:5e:a5:bc:3a:78:da:c3:0a:83:b5:
         32:43:fd:ff
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVDNzUzNEMyNjgwQTU5
MUZGQTYyN0I0NTQ1NERGMThDOTY2OTI2RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeAQUbtmI+PKSgNjUtlcWgOLiM9x+sQx622xtXVcZvpwab331Q
hVCoR3i1Nc2sP79KO8FTEs3rBxVRvNrg8zYCon7Fyl66AiG6iJkNUDewMX4GPzIa
gMwMxWYaSG0Whhb6KYema0hu1ynH/nv6X4rhf8Hkfk5SWlCsi1Lqmk41tSd7V/Tq
KUHhml1PFGMS+5HDxTLGn7Jfe9JmpYAS00jA/GMLErOevDINf0TGBNYsjLlI1Qso
YrkGVgQ0wibJYGdFiPwg+Zf9zHX02wbDtUs4isyWCwL5inQNnv5dbzHU56LICEkN
Boc95eRuQjJd929u6XmzzjhyAoMQwMQ1gltlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7HU0wmgKWR/6YntFRU3xjJZpJuYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdIVTB3bWdLV1JfNlludEZS
VTN4akpacEp1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYcwDQYJKoZIhvcNAQELBQADggEBAJf/mcX3KI9H13yCrFAHFLq6yRvoqclGsEH8
QPq4YOr4VSbMQeHpsj90BBICs04PYPKsazAUKbxx/qp3lk55GXLZGWLEbAPcmMOO
BVBzISRcyF7l1x+BdWV84rwyLV+1RAggXugsYoBnARV9f0gatBsFNDa/ZU47WhH/
uCoZ6LOe3RHbi3W2T14EcJmn6Ox9TD+wiWgEhc2LZzwFYvTmoAJE1vC9i/9Z8YNp
zwbrUUsTUJ4qjUi2pBJeJyqrbhzvoJZJvZOVJiWy3mOy+VjPOBJoE5rq+SYhRfDP
pcW9lyxN/rzwLIiwGzg71QBK4YsSXxZtXqW8OnjawwqDtTJD/f8=
-----END CERTIFICATE-----