Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D1w7v4Nh6lxJHqyqmaW-7xgcomo.roa
File:                     D1w7v4Nh6lxJHqyqmaW-7xgcomo.roa (raw, json)
Hash identifier:          hMbWL1SKl1gDslZaLl0sqi8k5nTEdI4OnwrWVvXeyGU=
Subject key identifier:   0F:5C:3B:BF:83:61:EA:5C:49:1E:AC:AA:99:A5:BE:EF:18:1C:A2:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D09
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D1w7v4Nh6lxJHqyqmaW-7xgcomo.roa
Signing time:             Tue 29 Sep 2020 09:54:06 +0000
ROA not before:           Tue 29 Sep 2020 09:54:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3337 (0xd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0F5C3BBF8361EA5C491EACAA99A5BEEF181CA26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:6d:d3:64:60:72:5b:ae:65:ed:1b:eb:ea:
                    1e:c6:5a:2e:9d:c8:0a:49:3a:22:b8:ef:d8:02:90:
                    e5:c1:1d:4e:f4:17:5b:20:2a:dc:45:0a:c8:e4:35:
                    c7:ad:5e:e4:df:11:95:f6:9f:c7:8d:c9:62:5a:23:
                    f7:80:da:53:2a:09:b5:d0:67:01:b2:22:fe:20:e9:
                    34:de:a5:2a:d5:65:a0:70:1d:61:15:4b:b2:32:cd:
                    fb:36:fe:38:1a:f9:ba:34:f0:84:77:bd:84:ce:ca:
                    4a:16:02:a1:6f:ec:ef:69:49:36:01:27:ae:0c:9b:
                    56:7d:96:e7:0d:0c:37:63:96:a6:68:a5:7c:03:c6:
                    b3:30:63:62:b5:6f:4b:71:df:5f:e7:cd:19:de:f9:
                    ff:39:5c:39:69:b2:80:2b:24:f5:52:7c:82:6d:e7:
                    43:27:8c:85:5e:7c:03:c8:44:1a:dc:e9:d2:49:0f:
                    8e:a1:b7:7b:ba:7e:35:0d:11:c6:5a:f9:a7:22:33:
                    af:8b:88:4c:06:2a:e7:85:01:89:b6:54:ed:f4:a6:
                    96:cb:54:b3:39:42:3c:de:f0:1f:00:9b:bd:d9:c3:
                    f5:38:bb:1c:bd:7f:47:89:91:0d:84:52:66:7c:7a:
                    0e:86:be:1d:e5:32:d8:2d:f4:f6:d3:40:e9:c7:15:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:3B:BF:83:61:EA:5C:49:1E:AC:AA:99:A5:BE:EF:18:1C:A2:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D1w7v4Nh6lxJHqyqmaW-7xgcomo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:97:12:55:46:ca:6f:7e:45:5c:28:94:de:f1:ca:3c:87:59:
         1c:3e:ae:7d:4f:f9:e3:4e:00:89:76:25:aa:1c:8f:4b:e9:35:
         4d:12:85:67:41:43:b9:98:06:2c:82:10:5a:35:06:3e:1c:5c:
         01:88:c9:be:88:cc:f8:37:95:38:e1:d8:f6:7f:c9:4c:cc:76:
         8a:6e:c4:e9:ce:a7:c6:6d:91:f3:04:bf:78:73:e4:a1:48:21:
         c3:f2:83:f6:ac:0d:c9:d6:78:73:69:ca:c8:93:fa:91:da:27:
         a5:6e:a5:57:52:6b:e3:7b:7d:71:24:80:49:0b:c2:eb:2a:00:
         b6:1c:c1:3c:b2:61:cc:6e:da:34:a0:31:38:3b:eb:a5:ae:a2:
         00:dd:4b:f0:3a:08:1d:cc:63:32:50:18:9f:e0:97:8e:05:58:
         5e:63:e4:1d:b0:15:4a:39:34:dc:30:ad:75:0c:61:76:63:33:
         ac:fd:97:31:fc:fc:b4:b9:2a:f1:0e:0f:86:86:39:9a:a7:07:
         b4:92:1f:6e:35:a5:d3:3f:43:79:38:88:a2:f3:c8:1c:f1:f1:
         8f:10:fb:f0:aa:c0:7f:e9:12:d6:d7:1a:5e:04:80:93:72:cc:
         42:6a:cd:5a:f2:51:78:04:e7:14:36:3f:61:52:3b:2f:a5:a2:
         df:c9:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----