Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dq_R6is9fj-Hg_ZUvy40ITrvkT0.roa
File:                     Dq_R6is9fj-Hg_ZUvy40ITrvkT0.roa (raw, json)
Hash identifier:          tD0/dV8NYUNrSaP8Hvqp67EzJMW0qSoPV82kHbrxJz4=
Subject key identifier:   0E:AF:D1:EA:2B:3D:7E:3F:87:83:F6:54:BF:2E:34:21:3A:EF:91:3D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D36
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dq_R6is9fj-Hg_ZUvy40ITrvkT0.roa
Signing time:             Tue 29 Sep 2020 09:54:19 +0000
ROA not before:           Tue 29 Sep 2020 09:54:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3382 (0xd36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0EAFD1EA2B3D7E3F8783F654BF2E34213AEF913D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:98:0d:71:13:57:a8:97:ad:04:9f:e2:5c:
                    36:de:46:ce:d7:79:f9:78:bc:d4:c0:c9:60:72:64:
                    8f:5f:96:d3:0b:20:1a:d8:13:8e:74:cd:89:ad:e5:
                    dd:51:2b:09:5a:99:65:f1:65:7e:af:35:42:ba:92:
                    70:84:78:af:13:27:d3:b1:67:23:39:81:e1:66:96:
                    3c:b8:49:dc:59:9c:58:a7:61:f0:3c:a4:82:31:65:
                    2e:9b:da:dc:5f:1e:79:55:69:4e:ba:9d:78:66:73:
                    b1:5f:a0:f0:3a:9d:cc:56:4b:31:4b:af:b3:4c:ef:
                    f2:df:5c:5a:a9:1f:b2:38:03:b3:30:8b:fb:6c:e5:
                    f2:44:1c:37:07:2f:3e:86:85:02:e4:b1:7f:56:5c:
                    7c:dd:13:47:3a:35:f1:23:7c:ed:66:78:8b:c9:68:
                    5a:c4:e4:d3:59:e4:8d:e3:79:26:3d:4e:41:53:c3:
                    09:cb:08:66:83:9d:e1:64:fc:3a:61:d1:87:1d:ad:
                    03:c5:cb:93:76:ff:22:d7:59:f3:9c:57:30:f1:90:
                    a0:26:3a:5f:ed:98:17:8c:0f:d2:fd:39:cb:4b:4d:
                    d5:38:ca:90:59:4a:d0:47:ac:2e:a2:f5:0e:31:4e:
                    7c:ce:ad:22:34:61:43:a8:4a:a4:a9:bd:dd:78:7f:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AF:D1:EA:2B:3D:7E:3F:87:83:F6:54:BF:2E:34:21:3A:EF:91:3D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dq_R6is9fj-Hg_ZUvy40ITrvkT0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:04:4e:56:39:19:36:5d:30:b9:6c:92:6b:f5:47:de:14:e9:
         21:dd:92:bd:b4:57:8c:07:7e:7c:45:c9:09:f9:e6:58:0c:0d:
         eb:f6:2c:59:82:57:85:9a:94:07:97:ae:e2:2a:35:d9:68:01:
         22:1c:aa:91:98:82:92:98:56:be:88:7f:03:33:00:6d:2e:79:
         ee:aa:c6:0a:ad:b7:4b:8f:7b:72:3e:99:a3:f7:17:d3:d8:cf:
         05:8f:c8:4c:ab:21:9e:3f:85:b1:12:22:eb:4a:39:51:e5:d9:
         2a:e5:2e:92:1b:fb:9c:76:25:85:4c:f4:79:e8:b0:5d:38:0b:
         03:59:e0:a3:f5:3d:63:ff:c4:09:0a:b1:6b:22:87:97:c9:a7:
         ab:f5:cb:d0:b4:64:5a:d4:b9:7c:93:59:f4:e4:45:9c:b5:62:
         5c:c8:67:45:52:7e:3d:32:60:1f:35:d4:ee:f4:98:7f:5c:f1:
         50:31:1c:3d:24:1f:2a:3c:87:ab:a6:89:a1:b1:aa:8a:98:19:
         02:bb:0f:93:92:eb:d9:6e:fc:2a:03:4f:20:4b:0d:a9:9b:aa:
         38:5b:81:10:4b:c9:ef:54:b6:53:08:0e:a5:0a:79:2b:a6:89:
         70:30:02:37:32:77:3e:d1:07:8f:df:df:00:3f:84:e0:a8:86:
         f9:8a:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----