Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OZY7Jw98guNu_TQa8UCMyt4W448.roa
File:                     OZY7Jw98guNu_TQa8UCMyt4W448.roa (raw, json)
Hash identifier:          2ml1T+GomuRe/xu6ZSi7ge2nX1M2hrw0HwwJww4BhSc=
Subject key identifier:   39:96:3B:27:0F:7C:82:E3:6E:FD:34:1A:F1:40:8C:CA:DE:16:E3:8F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OZY7Jw98guNu_TQa8UCMyt4W448.roa
Signing time:             Sun 07 Feb 2021 12:24:30 +0000
ROA not before:           Sun 07 Feb 2021 12:24:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6117 (0x17e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:24:30 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=39963B270F7C82E36EFD341AF1408CCADE16E38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:e2:c4:38:3a:59:e1:90:8e:6b:47:63:62:
                    3a:57:fd:48:59:95:d0:1b:95:7f:33:b1:8a:a4:e8:
                    a6:f6:c6:69:c1:83:7d:69:f2:02:39:73:eb:d0:03:
                    34:54:41:c7:26:87:3e:90:d8:88:94:ce:c9:bb:18:
                    24:33:75:b9:fe:f6:ad:d1:5d:67:d5:3f:79:4a:d8:
                    87:a2:4c:b5:c5:c9:11:30:07:7a:fa:1a:06:0c:11:
                    1b:5d:2d:a2:ab:b3:1f:fd:19:cf:9f:0b:74:de:29:
                    ce:cd:b9:bf:09:2a:4f:a5:88:3e:89:89:81:a8:05:
                    1d:7d:ba:41:37:34:6f:1f:26:06:47:38:6f:fa:09:
                    86:b4:d9:74:17:04:51:79:e0:86:f9:93:ef:9f:60:
                    14:64:ca:04:dc:6c:12:28:e6:cb:9b:13:37:94:70:
                    b4:01:c1:d7:97:66:04:48:88:26:c1:55:0f:ad:31:
                    1c:fb:25:10:fc:eb:d1:58:74:ee:cb:78:a0:db:c1:
                    2a:71:f1:2f:19:f8:9e:7a:07:75:b2:4f:33:c4:e7:
                    e7:16:06:c2:23:c6:6a:f0:a0:41:e2:d7:ce:a1:01:
                    7f:0d:4f:ae:89:35:4a:04:a3:ac:f4:5f:a1:3a:be:
                    23:86:69:4f:39:21:97:df:8d:81:64:13:a3:aa:17:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:96:3B:27:0F:7C:82:E3:6E:FD:34:1A:F1:40:8C:CA:DE:16:E3:8F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OZY7Jw98guNu_TQa8UCMyt4W448.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:41:bf:7f:87:d2:34:ef:95:41:8e:84:1f:ea:69:a4:90:c7:
         a3:1e:e2:08:6d:e7:f4:de:7a:c0:0f:83:2a:47:82:9e:a7:0c:
         2b:37:13:7c:21:c5:97:ff:a8:49:e1:57:0d:38:e1:06:53:39:
         fa:c1:80:f7:c7:cb:7d:7c:ba:0c:9b:c8:da:1b:7a:fb:63:c4:
         59:38:38:6e:0e:ca:19:11:a5:73:3c:ac:d2:eb:0e:b2:33:09:
         8c:b2:e0:32:16:f0:78:57:6e:05:0d:2e:2f:93:6c:8a:af:4a:
         bf:c8:27:a9:23:16:e4:f5:98:a0:24:00:c8:f9:4a:84:3f:8f:
         26:d3:7d:39:37:e2:2c:53:4a:22:04:63:76:2c:e4:ff:6f:47:
         68:a3:e8:e3:f6:50:92:d1:bf:56:8d:8d:f4:ad:62:24:5b:68:
         d2:20:46:1f:bd:46:fa:13:3c:39:ff:a4:b9:a8:93:67:b8:98:
         c8:d4:68:22:7e:6e:be:cd:77:49:94:92:3d:1f:22:d1:e7:a2:
         91:a5:f8:e8:9b:13:d3:18:a9:97:9e:3a:d7:be:23:8c:ef:8b:
         9e:92:ab:b9:6c:ee:6d:94:2b:d1:95:6d:52:7d:2a:4b:3b:2e:
         ed:61:32:78:3f:ad:97:c1:35:10:ff:a4:16:1e:a0:ad:39:c5:
         7d:bb:3f:de
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI0MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM5OTYzQjI3MEY3Qzgy
RTM2RUZEMzQxQUYxNDA4Q0NBREUxNkUzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJWeLEODpZ4ZCOa0djYjpX/UhZldAblX8zsYqk6Kb2xmnBg31p
8gI5c+vQAzRUQccmhz6Q2IiUzsm7GCQzdbn+9q3RXWfVP3lK2IeiTLXFyREwB3r6
GgYMERtdLaKrsx/9Gc+fC3TeKc7Nub8JKk+liD6JiYGoBR19ukE3NG8fJgZHOG/6
CYa02XQXBFF54Ib5k++fYBRkygTcbBIo5subEzeUcLQBwdeXZgRIiCbBVQ+tMRz7
JRD869FYdO7LeKDbwSpx8S8Z+J56B3WyTzPE5+cWBsIjxmrwoEHi186hAX8NT66J
NUoEo6z0X6E6viOGaU85IZffjYFkE6OqF6NrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOZY7Jw98guNu/TQa8UCMyt4W448wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09aWTdKdzk4Z3VOdV9UUWE4
VUNNeXQ0VzQ0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AYAwDQYJKoZIhvcNAQELBQADggEBAA1Bv3+H0jTvlUGOhB/qaaSQx6Me4ght5/Te
esAPgypHgp6nDCs3E3whxZf/qEnhVw044QZTOfrBgPfHy318ugybyNobevtjxFk4
OG4OyhkRpXM8rNLrDrIzCYyy4DIW8HhXbgUNLi+TbIqvSr/IJ6kjFuT1mKAkAMj5
SoQ/jybTfTk34ixTSiIEY3Ys5P9vR2ij6OP2UJLRv1aNjfStYiRbaNIgRh+9RvoT
PDn/pLmok2e4mMjUaCJ+br7Nd0mUkj0fItHnopGl+OibE9MYqZeeOte+I4zvi56S
q7ls7m2UK9GVbVJ9Kks7Lu1hMng/rZfBNRD/pBYeoK05xX27P94=
-----END CERTIFICATE-----