Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HG-CUECijlTfCZ3zzZwx38F8iTc.roa
File:                     HG-CUECijlTfCZ3zzZwx38F8iTc.roa (raw, json)
Hash identifier:          42w9KSfSFyKRj3tzDQc4Owuijd5w8EZCYYueOpjpSfI=
Subject key identifier:   1C:6F:82:50:40:A2:8E:54:DF:09:9D:F3:CD:9C:31:DF:C1:7C:89:37
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D5F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HG-CUECijlTfCZ3zzZwx38F8iTc.roa
Signing time:             Wed 29 Sep 2021 02:48:55 +0000
ROA not before:           Wed 29 Sep 2021 02:48:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7519 (0x1d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1C6F825040A28E54DF099DF3CD9C31DFC17C8937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9f:2c:98:54:84:6c:da:bf:24:49:4b:4a:40:
                    12:0c:56:13:a8:db:93:1e:b7:ba:11:9a:46:f1:8d:
                    a9:45:1b:5f:96:5d:8d:66:23:b6:59:d8:d5:77:42:
                    8e:6e:71:47:9f:71:57:4d:0e:53:87:64:96:cf:6a:
                    46:ba:02:dc:de:c3:35:d5:25:a1:e4:99:83:37:87:
                    65:6b:30:62:df:89:90:cd:20:7d:03:a2:80:66:d7:
                    01:cb:78:3d:c7:80:a8:15:17:49:fd:6c:98:a1:32:
                    20:e5:52:15:3a:a4:b0:6a:ad:b4:a6:2a:12:2c:04:
                    74:7f:30:2d:68:59:38:a8:9a:91:5d:a5:e8:14:ad:
                    f4:46:70:d6:7d:46:c9:0a:1c:e8:c0:22:f8:d9:10:
                    fd:54:e9:bd:f0:41:52:72:d1:59:a7:80:fc:e5:dd:
                    56:2c:8c:0d:d4:d3:36:0d:e9:c8:d0:77:49:f7:b6:
                    d7:d0:ee:ac:69:ba:0e:85:63:c8:06:9e:80:e9:2b:
                    ab:15:cb:50:4f:fa:6c:0f:23:1d:18:34:f3:8c:85:
                    fe:82:52:15:a6:75:a5:15:e6:e9:1c:1c:c4:01:a6:
                    07:a0:1a:7e:3a:de:9b:61:12:8a:1b:b5:64:5d:82:
                    cf:57:d2:f4:3d:dd:27:b5:f5:ff:67:a2:55:d0:14:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6F:82:50:40:A2:8E:54:DF:09:9D:F3:CD:9C:31:DF:C1:7C:89:37
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HG-CUECijlTfCZ3zzZwx38F8iTc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:30:54:c7:9b:75:b7:1d:57:77:10:98:f1:58:ce:d0:17:ca:
         50:e6:a0:d5:c7:9e:b8:23:3c:6f:db:4b:b1:a5:cc:50:26:df:
         1e:40:19:0d:70:e0:1c:6c:47:6c:b5:2a:b9:cf:e9:87:13:1f:
         28:fa:d0:95:32:19:6e:47:03:c2:f4:f6:9a:27:c7:d5:0f:9b:
         01:59:f2:b3:a5:10:b6:bc:5f:1c:ae:a0:1f:af:6f:3e:b3:76:
         40:52:bd:98:81:09:d8:84:46:ff:0a:6a:f2:df:a3:37:e4:b4:
         dd:c7:37:7f:17:77:8b:af:7e:40:f0:d7:cd:4b:58:20:9d:98:
         64:20:9f:d5:69:55:f9:91:6e:34:8a:ff:6f:bf:5d:84:6a:52:
         64:8b:d7:e4:03:63:3c:3f:1a:75:9a:10:4e:22:00:58:91:12:
         b1:ec:a7:4a:a2:2b:2f:32:52:38:71:aa:eb:0d:3c:40:6e:33:
         e9:f1:3d:7e:78:9f:88:3b:c6:d0:5c:76:ea:39:74:16:94:33:
         2a:1d:5a:b6:e8:ac:1a:57:e4:d8:60:d1:61:92:d8:80:53:b6:
         e9:2c:96:f2:79:91:a5:fa:9d:6a:1a:e5:6b:48:f4:e8:32:05:
         5b:55:6e:d6:09:33:16:98:1d:b3:cc:c8:f8:79:54:aa:f2:ba:
         08:c8:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----