Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mPiFK6L89eDoNIciJyYSeCSSd8.roa
File:                     7mPiFK6L89eDoNIciJyYSeCSSd8.roa (raw, json)
Hash identifier:          /x1J26fhKEwNcV9KCg+UBvhISkI9BBh4R/zvdmOX5vw=
Subject key identifier:   EE:63:E2:14:AE:8B:F3:D7:83:A0:D2:1C:88:9C:98:49:E0:92:49:DF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       155B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mPiFK6L89eDoNIciJyYSeCSSd8.roa
Signing time:             Sun 07 Feb 2021 12:04:12 +0000
ROA not before:           Sun 07 Feb 2021 12:04:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5467 (0x155b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:04:12 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE63E214AE8BF3D783A0D21C889C9849E09249DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:22:6d:13:15:bd:07:b0:23:f5:67:9c:28:
                    3e:b5:20:d3:70:fc:e3:f1:6c:ba:96:92:ef:d8:33:
                    f7:64:75:2f:0b:93:15:c3:1e:c9:47:1c:7e:4c:04:
                    b3:59:8e:4e:af:d4:17:f4:3e:99:bd:ac:56:97:61:
                    d4:6e:79:4e:27:20:49:4a:d1:00:35:6d:5a:9f:bc:
                    2a:61:7b:c1:d7:2f:97:9b:a4:7a:64:81:29:f4:ed:
                    e0:ad:e1:00:7d:83:23:3f:9f:b2:31:50:38:ab:fc:
                    a6:13:0c:69:0a:ee:b5:bc:57:22:e3:8a:47:e6:8e:
                    31:9c:94:c5:ea:e5:26:46:5f:ab:c1:a0:63:aa:35:
                    bc:9f:f8:5d:9c:cc:f3:07:f4:5b:cc:46:87:dc:73:
                    43:3d:ba:3d:76:5c:96:5f:21:f2:e1:0b:45:ac:46:
                    ba:44:0b:03:46:88:07:79:0a:e7:c7:ad:64:c8:25:
                    9e:c2:82:d1:11:55:55:16:d4:f2:57:80:66:7a:07:
                    b1:bb:ea:da:22:4f:d7:66:cb:87:f9:37:d3:a8:34:
                    fa:ab:70:87:c8:39:db:5c:7c:e4:d0:e3:6e:2f:6a:
                    74:59:fd:8c:ad:0e:26:d1:c0:91:a9:bf:76:97:65:
                    30:9f:87:ce:3a:15:72:8e:80:09:4d:5b:66:1d:eb:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:E2:14:AE:8B:F3:D7:83:A0:D2:1C:88:9C:98:49:E0:92:49:DF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mPiFK6L89eDoNIciJyYSeCSSd8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:a3:5d:8a:91:02:96:03:67:ac:4f:f3:b1:b1:72:82:0f:
         3f:6b:0f:39:50:75:14:e1:76:07:9f:f8:6a:b6:bf:aa:5f:c5:
         e0:bf:37:23:7e:43:01:3e:ec:0c:37:e1:a9:82:7d:d3:d2:90:
         05:41:e6:4b:96:9a:2f:fc:c6:3d:20:2b:6e:e6:46:ce:d1:9a:
         e7:71:2c:53:e0:87:07:bb:31:60:aa:56:b7:61:61:5f:8b:01:
         46:bb:3f:20:a6:e2:26:b9:9f:0c:8f:63:b8:e8:d5:46:54:b9:
         48:18:b4:99:09:20:82:a9:09:58:ab:7c:0a:0c:24:cb:eb:b5:
         37:13:cc:ae:12:bc:ae:95:75:a5:b7:ef:a5:cc:26:fb:4a:28:
         2e:5c:ef:e2:40:50:c2:c0:df:1e:14:0f:37:7f:1b:f2:08:9d:
         4d:4e:f6:f6:ab:6b:92:5a:fa:31:4a:34:45:62:74:84:83:1c:
         09:00:53:1d:a1:8a:c9:8c:87:6b:3d:7c:cd:57:2e:7c:03:e1:
         a3:5d:9d:5e:ee:e7:3e:a5:76:e9:db:2d:ff:48:81:61:15:4b:
         81:0f:ca:e1:23:04:6b:bb:71:f3:0a:25:c4:d9:a7:14:02:ef:
         4d:70:9c:c4:b3:4e:dc:37:39:07:82:af:67:ee:14:2a:cc:32:
         a4:db:2b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----