Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F-zECcRHZ4TVyuo7_STmuiPdkzg.roa
File:                     F-zECcRHZ4TVyuo7_STmuiPdkzg.roa (raw, json)
Hash identifier:          xyhRE9ukqFCdTrW2g2ysNMp1Odgb17X+OecP+Ao3624=
Subject key identifier:   17:EC:C4:09:C4:47:67:84:D5:CA:EA:3B:FD:24:E6:BA:23:DD:93:38
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D2E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F-zECcRHZ4TVyuo7_STmuiPdkzg.roa
Signing time:             Tue 29 Sep 2020 09:54:17 +0000
ROA not before:           Tue 29 Sep 2020 09:54:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=17ECC409C4476784D5CAEA3BFD24E6BA23DD9338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:a9:c9:20:b6:7f:bd:39:a0:53:05:81:6f:
                    e8:dc:4d:db:b2:1a:c5:ed:fa:de:cd:65:8f:18:e8:
                    f3:ce:42:fb:6b:fc:87:6a:c6:91:45:b6:86:10:5c:
                    69:af:e5:64:e6:91:fe:b5:b3:ed:1f:75:9a:2e:c4:
                    53:65:92:48:fb:f2:70:dc:07:b6:71:df:6d:57:a0:
                    84:fa:da:c5:d9:89:ea:e8:4f:75:8a:76:4b:9f:a1:
                    d9:d7:af:3b:7e:bd:8d:e5:b4:02:fa:58:dc:62:49:
                    fd:09:ac:e7:09:95:81:be:e2:4e:21:27:c7:67:43:
                    7b:a9:ff:91:f8:3b:a4:ac:92:26:95:5e:82:ce:1f:
                    e8:5c:46:24:a2:83:d5:fd:4e:6c:f6:b9:7e:98:70:
                    ad:52:b2:b7:ab:5a:9a:f1:07:a9:65:bc:fd:3d:fc:
                    d5:81:a2:0a:fc:d0:55:93:be:ab:16:fd:fe:bd:76:
                    ab:02:c4:28:65:8f:33:fd:b1:a0:bc:9f:6c:56:54:
                    c3:90:60:2b:e5:7a:5e:e1:49:ac:08:99:50:f3:b5:
                    20:64:b8:77:9d:f8:ac:57:95:82:53:97:98:45:50:
                    cf:8f:9f:c9:16:bc:5a:32:c5:32:58:00:a7:2a:2a:
                    13:d9:ab:fe:f7:94:d3:be:78:8d:cd:18:fb:05:fb:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:C4:09:C4:47:67:84:D5:CA:EA:3B:FD:24:E6:BA:23:DD:93:38
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F-zECcRHZ4TVyuo7_STmuiPdkzg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:aa:14:80:8f:7e:3b:16:50:14:1d:1a:e1:e7:65:40:e8:81:
         9d:27:9b:60:b0:da:85:0c:1a:cb:ba:e5:d1:a5:42:e6:1c:23:
         99:09:5a:58:21:bb:b7:dc:71:9e:ae:e5:81:61:c3:1b:f6:d5:
         76:d4:6b:a1:a5:4e:e1:0b:5d:0f:71:7f:0c:af:01:60:e2:27:
         66:17:ab:71:7c:d2:f4:de:c6:bf:e2:bf:02:92:f4:02:05:97:
         c1:dc:56:93:61:7d:e7:d7:e4:b4:6a:9f:b9:46:9a:dd:d9:9a:
         08:d5:26:fe:e5:7e:a5:30:0f:4e:0a:c9:0e:d6:c8:f2:31:aa:
         07:d4:39:e5:d7:90:4d:a1:58:ff:17:d6:b7:06:5f:55:fb:c5:
         33:4b:ec:fb:55:9a:2a:41:40:d0:d6:b3:b2:38:07:69:78:49:
         02:b5:37:2a:e6:ae:8f:35:55:f8:05:db:82:3d:c1:5e:be:e9:
         ea:e6:d0:5e:57:c2:c7:28:1d:ac:68:e7:a1:89:51:46:ec:16:
         8e:80:18:67:fc:eb:82:2e:02:c6:2f:4c:e6:bf:89:97:3e:c7:
         8d:83:17:11:c1:76:ea:d8:f3:e0:be:3a:6a:49:64:ba:ea:cd:
         70:e9:c5:70:92:54:cd:da:0a:a6:65:7a:13:93:0a:f2:7b:3f:
         8c:2a:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----