Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MYwvDvy-h39axwSIlH1yjTdW0x0.roa
File:                     MYwvDvy-h39axwSIlH1yjTdW0x0.roa (raw, json)
Hash identifier:          /q9eeiLKx/1FNnQ4r3M20DeC2lu/KhDKFAVYb9tFteo=
Subject key identifier:   31:8C:2F:0E:FC:BE:87:7F:5A:C7:04:88:94:7D:72:8D:37:56:D3:1D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       189D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MYwvDvy-h39axwSIlH1yjTdW0x0.roa
Signing time:             Sun 07 Feb 2021 12:50:22 +0000
ROA not before:           Sun 07 Feb 2021 12:50:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        106.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6301 (0x189d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:50:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=318C2F0EFCBE877F5AC70488947D728D3756D31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:da:88:bf:2f:f7:cc:62:41:85:4e:00:46:
                    9f:ff:06:e2:63:bc:b1:76:3c:6f:f2:2b:24:54:95:
                    23:48:37:c7:31:d3:37:52:b5:c6:41:9e:df:9c:86:
                    c9:dd:0c:84:6b:02:f0:79:25:67:70:42:e8:45:89:
                    d3:eb:9f:53:92:4e:5a:2e:24:0e:ea:ba:65:2b:88:
                    a7:40:31:85:f4:e8:8f:90:1b:ee:46:c8:b1:80:5f:
                    17:f0:b3:b1:02:d5:fc:3c:03:e8:ef:11:e9:a7:2b:
                    8a:3f:8a:0f:ac:9f:99:05:a6:44:8a:07:4f:83:0d:
                    08:5b:fc:80:d4:1c:33:57:4e:8a:6b:69:ff:a5:b3:
                    69:37:a0:66:20:d4:63:3b:36:54:f4:e3:3f:4f:c9:
                    2f:39:c3:01:87:ba:51:09:e3:07:0e:23:73:15:f6:
                    cc:5c:3e:bb:c7:92:43:19:b9:7e:ac:fc:3c:b0:6d:
                    32:28:c7:f1:69:83:80:a2:34:a6:89:ad:70:99:91:
                    00:d4:4e:53:b1:26:63:4c:21:51:a0:ce:87:af:1a:
                    03:f1:91:a5:21:9c:29:81:2b:31:60:c0:88:a6:61:
                    0e:00:79:df:d9:99:be:85:f6:63:15:71:89:c1:9b:
                    29:ef:11:a2:58:b8:7a:d0:60:8b:00:6f:f4:60:d1:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:2F:0E:FC:BE:87:7F:5A:C7:04:88:94:7D:72:8D:37:56:D3:1D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MYwvDvy-h39axwSIlH1yjTdW0x0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:db:f6:6d:2b:66:9e:71:d0:3b:ea:72:74:34:0b:c7:e9:7f:
         16:79:c5:3f:5b:ef:00:af:5f:ea:1e:57:2f:a4:fd:05:8f:7f:
         74:d4:ad:a1:19:d1:50:53:90:8a:e3:6f:34:ec:ab:28:13:bb:
         00:53:5d:7b:7a:74:c4:c3:b8:6e:34:d3:27:55:33:14:df:a9:
         c3:64:cb:33:45:e4:80:b0:91:42:e5:7b:29:d4:60:f4:d5:fa:
         aa:49:f2:ab:d7:f8:d5:42:44:82:c6:de:fe:65:a6:af:a3:54:
         9f:ff:48:ee:32:85:14:b4:04:05:62:a5:5b:f9:16:c1:d8:40:
         33:1f:f6:cf:48:66:b1:79:32:de:c0:90:54:9c:0b:11:96:9d:
         00:2f:e9:66:ea:1e:94:4a:44:55:c8:c5:1b:f3:30:d9:e4:ee:
         d6:f6:97:18:b4:af:18:33:47:f3:20:61:c0:67:e0:c1:3e:1c:
         6f:50:7b:b6:99:84:3e:40:14:dd:ec:9f:c9:6d:21:1e:31:7f:
         84:13:1c:f6:37:4d:9e:87:4b:08:45:e5:10:e3:4f:bd:08:9f:
         6f:83:89:01:84:07:d5:e3:20:e6:9f:70:b6:e0:15:9f:09:f3:
         f9:76:c5:1a:c0:4d:f5:ca:67:b0:17:f8:af:d2:d6:33:bc:1e:
         6e:64:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----