Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ml10RXFJdWGiADysW5XJfiPa5O8.roa
File:                     Ml10RXFJdWGiADysW5XJfiPa5O8.roa (raw, json)
Hash identifier:          zk+1yl75UWBOuBbKNhkc7wvRqW1QkZOxasPyd86bNKY=
Subject key identifier:   32:5D:74:45:71:49:75:61:A2:00:3C:AC:5B:95:C9:7E:23:DA:E4:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F4E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ml10RXFJdWGiADysW5XJfiPa5O8.roa
Signing time:             Tue 29 Sep 2020 09:56:46 +0000
ROA not before:           Tue 29 Sep 2020 09:56:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3918 (0xf4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=325D744571497561A2003CAC5B95C97E23DAE4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:96:1d:20:3b:11:3e:0d:36:dd:25:7d:74:
                    87:b5:bf:0b:43:72:ec:f6:7c:96:86:83:35:77:c0:
                    cc:c8:fb:32:eb:61:2b:e7:22:02:56:ea:65:1d:0f:
                    5f:ef:d0:3f:2e:fd:dc:59:46:24:69:de:6c:ec:db:
                    d0:bc:f2:7d:8b:f3:15:3b:1d:61:5e:a5:76:c7:6b:
                    94:b0:12:28:43:98:0c:26:d0:76:79:50:fd:54:89:
                    0f:bf:3c:d1:fb:d8:d7:a5:8d:9f:c5:80:12:0a:15:
                    bb:bb:b5:9d:bf:cb:6c:3d:99:0a:63:2d:59:da:69:
                    76:d0:5a:a6:13:b8:00:8a:8a:00:7b:fa:1d:24:ee:
                    15:7f:37:21:8c:2c:18:26:f3:b5:fa:75:51:34:10:
                    79:a6:77:92:c6:9b:e1:70:8c:db:f5:0b:bd:84:64:
                    d5:47:54:ea:c8:ad:a3:43:a6:05:c8:cd:d6:54:ce:
                    6c:37:5d:05:d3:24:f9:75:31:e5:ea:aa:ef:02:2d:
                    7a:b5:70:45:ee:50:48:87:3e:1a:df:10:f6:2a:b6:
                    30:5a:f0:1c:db:be:6a:28:68:24:fc:ba:d7:11:77:
                    b3:c9:b4:36:48:02:7a:a1:b9:01:93:f8:e5:7a:90:
                    b8:7e:79:77:10:db:4d:a6:4a:f1:f5:2b:8e:d8:92:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:74:45:71:49:75:61:A2:00:3C:AC:5B:95:C9:7E:23:DA:E4:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ml10RXFJdWGiADysW5XJfiPa5O8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:11:07:33:14:79:dd:9b:5c:31:ca:5c:bb:90:ab:63:ab:45:
         9a:85:93:2a:9f:fa:53:5f:dc:85:7c:40:09:e0:3e:ee:64:24:
         52:46:8b:1e:2e:a2:fe:8b:75:b5:ba:a0:ce:f3:f6:82:43:ad:
         ea:17:e9:e9:fe:8d:43:d6:81:27:3c:74:ea:f6:f0:64:34:63:
         74:a0:e7:b6:fb:7e:89:14:40:de:e9:8d:66:9c:8c:ed:1e:0e:
         48:0c:34:83:98:7a:69:55:7e:4a:ed:a6:4e:44:8f:cf:d3:40:
         d4:ae:8d:9e:be:38:43:c3:28:5f:04:3b:90:22:93:2d:2e:71:
         f4:b0:fa:ad:60:83:2b:1a:04:4d:c5:ca:42:c2:74:2b:96:0f:
         21:8e:d4:fc:26:62:10:f8:0f:45:75:56:70:28:86:6e:7a:c2:
         7e:4b:ce:b7:2a:ad:a7:81:25:a5:7e:f4:4a:00:74:3d:d7:6f:
         17:fe:d5:92:ab:3e:ea:4f:27:f2:6a:38:3c:e8:ad:4b:82:18:
         87:42:3a:fe:d5:bf:59:55:c4:22:ab:a8:02:30:68:eb:a6:d8:
         fa:8f:dd:04:49:0a:97:9f:c4:b1:25:42:bd:72:00:b6:ea:13:
         33:74:1d:d7:c4:b1:1c:fe:60:3a:95:ad:24:8d:08:13:f3:f6:
         e7:66:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----