Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa
File:                     7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa (raw, json)
Hash identifier:          Xwd7hndM4Qsu08L0sTs5POLQIW5mO3meqkbBFqRSmow=
Subject key identifier:   EC:86:9B:49:FF:F0:06:FC:9F:6B:12:81:7C:EE:C6:CF:D4:35:BB:A9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C9A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa
Signing time:             Wed 29 Sep 2021 02:47:58 +0000
ROA not before:           Wed 29 Sep 2021 02:47:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7322 (0x1c9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:58 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EC869B49FFF006FC9F6B12817CEEC6CFD435BBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:1f:48:99:5d:f7:2a:dc:03:d5:ec:9e:bc:
                    94:69:39:1c:09:1c:7b:ad:02:11:90:b2:63:0a:e9:
                    bd:73:30:52:50:81:2e:1d:16:51:bc:71:0d:7b:e5:
                    48:4d:2c:da:12:41:53:e5:53:93:65:65:ae:12:1d:
                    dd:7f:e0:3e:3e:39:51:45:7f:37:94:61:c5:df:b2:
                    c3:07:62:11:99:86:08:bb:6c:42:25:8d:cf:52:26:
                    5e:2e:17:19:eb:e9:82:6c:2d:ab:23:dc:82:90:d9:
                    b4:82:ba:6a:e8:42:14:f2:d8:33:99:5c:d3:71:76:
                    a8:6f:bc:e8:1a:61:c3:3f:f4:08:2b:0c:f2:d4:c8:
                    a9:dc:dd:fa:07:2b:40:95:70:a4:d9:b3:1b:a1:7a:
                    7c:da:3b:8e:8d:0c:10:0d:a3:76:be:42:fa:b2:d6:
                    1c:ae:d7:b9:f0:18:89:12:c6:69:f2:51:28:fa:44:
                    a1:22:35:54:72:89:b3:01:cd:43:98:e5:09:87:e6:
                    6b:63:a9:bf:f8:5d:d7:33:fb:32:ef:4a:a6:9c:f9:
                    a3:d3:76:af:08:15:ba:dd:7d:9b:c5:c0:74:d3:e1:
                    71:f4:dd:37:f6:dd:da:dd:80:23:9f:9b:e3:ac:5d:
                    dd:27:56:c9:9c:71:a3:22:c2:88:69:13:ae:25:9d:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:9B:49:FF:F0:06:FC:9F:6B:12:81:7C:EE:C6:CF:D4:35:BB:A9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7IabSf_wBvyfaxKBfO7Gz9Q1u6k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:00:e9:ff:29:83:6b:cb:f8:c3:a3:fc:27:bd:2f:e6:e8:
         65:e7:bd:4e:18:a7:9c:1c:28:72:2b:3b:10:78:01:fc:61:ab:
         9f:7b:e5:42:53:55:6c:af:32:69:57:a6:03:c8:47:23:04:86:
         44:fd:7c:cc:34:1b:99:e0:7f:10:75:e6:08:f3:ca:b3:ac:c7:
         ef:19:ed:52:47:fd:bf:82:8d:7b:4d:40:7d:c4:8a:ff:e7:d8:
         42:c7:73:f9:01:02:00:80:15:d2:07:6e:d7:64:fc:db:26:9b:
         2c:91:3f:b1:76:0e:26:a1:25:51:67:df:1d:98:dc:5b:06:4e:
         23:54:fb:56:5b:4a:57:fc:8d:c3:c1:ba:25:3f:59:54:99:6c:
         bb:db:f0:14:25:ad:96:da:30:b4:e4:d9:b7:ee:74:7c:33:61:
         0b:8e:dd:b8:00:7d:23:9b:0d:4e:f5:5b:8d:7e:35:fd:fe:f1:
         6f:f2:6b:80:af:fb:99:b9:34:99:25:06:eb:5a:7f:49:6e:95:
         43:4c:71:38:0f:91:5f:0d:1b:e7:b9:7c:c9:5e:02:bb:f9:8e:
         76:33:ab:ef:5a:2a:5c:f9:af:58:97:21:af:31:8c:3e:3e:5e:
         c9:54:76:e5:cd:d5:59:0f:2f:9e:20:06:0b:52:e0:4b:a7:ac:
         f6:20:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----