Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JoG22Ys6actQPatE0m_k8WuuHbc.roa
File:                     JoG22Ys6actQPatE0m_k8WuuHbc.roa (raw, json)
Hash identifier:          sXs9mf/eAWUx/aChnmzcJLy92jFj4gTqN8Ms6P/AOlI=
Subject key identifier:   26:81:B6:D9:8B:3A:69:CB:50:3D:AB:44:D2:6F:E4:F1:6B:AE:1D:B7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CFE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JoG22Ys6actQPatE0m_k8WuuHbc.roa
Signing time:             Tue 29 Sep 2020 09:54:02 +0000
ROA not before:           Tue 29 Sep 2020 09:54:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2681B6D98B3A69CB503DAB44D26FE4F16BAE1DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:7f:32:6d:7e:1d:c5:18:01:23:e3:a8:e8:
                    8b:33:a7:d4:6c:f9:50:f8:a7:ea:a4:03:d4:e0:1d:
                    87:8c:96:8b:be:bf:d1:f2:44:3a:4a:7c:e8:90:b5:
                    b8:a0:4d:8a:4d:fb:dd:c6:05:24:44:99:1a:e2:8d:
                    39:78:2a:5d:aa:1d:97:50:77:33:8b:c0:1c:00:15:
                    f9:2f:40:f9:3d:b7:13:28:c7:01:52:46:d2:d3:23:
                    69:ac:f2:58:66:57:03:40:62:fc:e0:7f:dc:d5:83:
                    b2:59:7e:07:0d:9f:0f:63:d2:bc:46:db:bc:92:d1:
                    ce:88:02:1b:cc:0e:08:da:71:13:3a:c5:d7:c0:8a:
                    c6:8d:7f:7d:c2:9b:5f:b8:f8:9f:22:2a:62:15:2e:
                    69:c9:e4:14:09:10:0f:ea:c6:42:39:6d:61:c2:03:
                    ca:54:ca:e3:fc:1f:ff:b2:e1:98:dd:4a:1b:6d:6f:
                    16:1a:00:25:67:b8:68:47:10:cf:e6:5d:e9:d8:5d:
                    aa:78:06:38:6b:27:dc:93:95:14:90:c7:18:6e:17:
                    5b:8b:b4:99:92:72:60:0c:6b:c3:21:12:6d:67:2a:
                    3b:71:00:d6:0f:82:24:7b:1f:43:85:d8:8a:7a:96:
                    15:6f:20:8a:22:d7:a6:8b:0a:39:34:f7:1f:3b:84:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:81:B6:D9:8B:3A:69:CB:50:3D:AB:44:D2:6F:E4:F1:6B:AE:1D:B7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JoG22Ys6actQPatE0m_k8WuuHbc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:89:ce:ed:ef:6a:9a:fc:9a:a3:52:b5:73:e8:8e:a1:f8:ca:
         7a:b1:c3:ba:94:2d:ce:ca:45:81:4d:57:cf:3e:32:20:4c:60:
         09:be:a2:87:a2:57:09:95:1c:8b:49:11:e1:8d:12:32:4f:ab:
         1c:af:ff:7f:84:ee:ee:29:ce:a5:ca:44:ed:e9:06:02:ca:a8:
         56:9c:56:c2:21:c0:e4:8f:9d:a3:51:03:5f:39:db:6b:19:74:
         1c:f1:73:57:51:7a:2f:83:e1:4b:63:a1:4e:55:ec:54:fe:00:
         46:dd:13:95:cf:a0:bb:bf:c2:1f:65:8b:dd:0a:de:c5:fe:ae:
         a5:57:be:af:72:6f:4a:2b:40:c0:60:08:b7:01:17:d5:12:4a:
         3e:00:9b:99:f6:1d:10:14:e2:e4:86:c6:e2:db:b3:d1:4f:ff:
         8e:02:3e:fc:84:77:db:76:22:e6:53:5b:ae:b1:41:04:a3:aa:
         8b:ed:11:7a:8f:5b:8f:ad:85:03:0a:c3:4e:b5:8f:65:32:8d:
         99:ec:71:2c:82:d7:9d:ab:1b:ef:01:70:3b:05:0a:6e:a0:dd:
         12:20:ab:b3:4b:67:0e:cf:98:c0:35:d8:83:f5:5d:42:cd:c9:
         3d:e6:20:e6:91:b4:69:d9:50:d0:ec:a3:53:c2:37:89:44:72:
         cc:79:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----