Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MHyXjMdAupjAi1DqKGK4vhk9www.roa
File:                     MHyXjMdAupjAi1DqKGK4vhk9www.roa (raw, json)
Hash identifier:          9tuqvpAoYZSQ03K/OZXW3+WKy4ZICNgjNu9fwePtd68=
Subject key identifier:   30:7C:97:8C:C7:40:BA:98:C0:8B:50:EA:28:62:B8:BE:19:3D:C3:0C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A86
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MHyXjMdAupjAi1DqKGK4vhk9www.roa
Signing time:             Wed 29 Sep 2021 02:45:27 +0000
ROA not before:           Wed 29 Sep 2021 02:45:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6790 (0x1a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=307C978CC740BA98C08B50EA2862B8BE193DC30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:5d:05:7f:e0:6d:a2:40:a0:d1:b2:c7:35:
                    59:05:2f:36:3e:46:0c:05:dd:24:a8:9b:11:01:59:
                    50:b1:e5:a6:11:75:c8:11:3a:b2:d1:37:f9:f0:97:
                    b2:9d:9b:91:c9:bf:c2:1d:5d:be:1d:15:41:dd:81:
                    1d:43:40:81:2a:19:c0:a5:c4:9a:ad:12:07:63:9b:
                    39:e8:fa:39:05:7b:cf:62:f3:49:96:93:8a:61:ff:
                    d1:49:29:bb:57:15:8f:e3:34:96:5e:6d:c3:c3:51:
                    c6:2a:3d:56:d6:2c:b0:87:85:a0:67:ae:bd:c9:a1:
                    5a:1f:14:a8:c3:31:d4:15:26:8d:a1:12:5a:6a:d4:
                    a0:18:8c:93:df:99:d8:2d:33:a5:9e:51:dd:50:8d:
                    af:17:dd:53:be:5b:a7:2f:6f:24:fa:10:a1:be:e2:
                    1f:31:23:6a:02:ea:31:41:72:b4:11:57:99:c1:11:
                    e7:93:ec:98:d0:85:6a:e2:f4:33:3b:94:a5:e0:2d:
                    e3:5f:3c:d8:cd:b9:bf:a0:3a:62:78:b3:b8:55:fc:
                    6b:4d:be:9b:77:d4:34:7e:ff:08:97:54:23:0a:da:
                    2a:91:13:28:c6:37:a8:7b:d2:ba:fb:c6:4e:b3:bb:
                    ed:7b:c9:77:69:dd:bd:09:b7:42:42:83:9c:4a:c2:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7C:97:8C:C7:40:BA:98:C0:8B:50:EA:28:62:B8:BE:19:3D:C3:0C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MHyXjMdAupjAi1DqKGK4vhk9www.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:54:a1:49:63:b6:94:6f:6d:55:c6:32:70:76:f6:1e:cb:cb:
         ca:89:cb:2f:8d:86:e9:11:38:1f:01:e1:cf:ed:e8:39:0a:69:
         3f:ac:49:78:23:4e:75:80:44:4f:67:d2:15:09:ef:a8:56:c4:
         57:8f:1c:1f:06:19:24:4b:54:3a:a1:a6:54:28:4c:a8:58:77:
         b0:78:41:ab:e1:dd:dc:1c:6d:e1:2f:46:22:80:6f:2e:b6:0e:
         ab:5f:38:b2:7c:67:ce:3a:38:2c:03:77:ec:8d:c6:92:2a:5d:
         b1:4d:ed:e2:f2:62:39:b4:84:99:69:2e:02:70:be:cc:b2:9b:
         d9:b0:57:49:62:2e:af:16:42:10:f7:fa:57:23:48:2f:f5:94:
         5c:e6:1a:f7:47:28:ae:95:12:25:96:f3:25:94:48:e9:27:1a:
         2d:d3:d7:ac:cb:50:61:30:95:ae:15:e5:6b:08:ca:b3:85:80:
         1a:bf:5c:1b:eb:4a:74:64:bf:b2:00:c0:2c:67:63:19:54:ba:
         58:99:3d:8a:d1:49:33:49:ae:e7:a6:6b:db:73:1b:af:10:41:
         f5:d5:7d:a3:d0:bb:f0:fc:0c:35:c7:1e:18:2b:3c:a9:2a:a3:
         b4:39:4d:78:5e:25:6f:2f:29:e2:41:f4:e7:e5:cd:d1:8c:8f:
         7f:d5:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----