Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QObTPQrtskVjZd6N-DA9d2Wkfyg.roa
File:                     QObTPQrtskVjZd6N-DA9d2Wkfyg.roa (raw, json)
Hash identifier:          uErlnkgt/2dltXr34aHqsHwFwjMU1C8Voqzvdh9aODU=
Subject key identifier:   40:E6:D3:3D:0A:ED:B2:45:63:65:DE:8D:F8:30:3D:77:65:A4:7F:28
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B1B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QObTPQrtskVjZd6N-DA9d2Wkfyg.roa
Signing time:             Wed 29 Sep 2021 02:46:10 +0000
ROA not before:           Wed 29 Sep 2021 02:46:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6939 (0x1b1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=40E6D33D0AEDB2456365DE8DF8303D7765A47F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:6d:48:79:51:d2:47:9d:7d:9d:f8:59:ec:
                    e2:cb:5c:bc:82:bc:66:b6:e0:15:07:0e:cf:c1:e7:
                    cc:1c:58:f4:c0:bc:17:c7:fb:49:70:07:35:52:bf:
                    23:17:d0:64:e8:3f:62:51:79:2c:4c:9e:96:ff:eb:
                    a2:48:c6:6e:74:ab:87:2d:69:11:20:d7:47:11:dd:
                    fa:75:cb:09:3d:29:a7:26:d8:3e:f6:0a:ed:a0:8b:
                    88:62:7d:20:5b:6d:39:13:15:3b:a7:0e:d9:ef:5b:
                    f3:38:27:57:d0:a3:fc:6a:05:7e:ea:8e:5d:b6:c9:
                    8e:dd:e2:e4:7c:1e:2d:b7:d9:8c:27:62:88:d9:4a:
                    c4:38:90:da:1d:27:f1:6c:59:94:b0:be:4c:c6:93:
                    80:ae:53:62:fd:9e:97:c9:12:9a:b5:72:11:a8:ad:
                    7b:66:46:92:62:6c:41:48:9e:f2:fb:e5:04:db:7c:
                    87:f0:a7:bb:90:d9:de:dc:8d:73:ef:f8:d9:15:32:
                    e3:82:d3:fa:df:16:e8:56:b8:07:a4:96:0a:eb:26:
                    7a:51:c8:35:95:41:09:e2:67:e4:0e:20:29:6a:ca:
                    5f:03:a0:54:aa:e1:d7:a8:38:08:d3:28:50:27:6e:
                    1d:e1:79:25:f3:53:f8:4f:2b:fd:49:dd:bd:ad:7f:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E6:D3:3D:0A:ED:B2:45:63:65:DE:8D:F8:30:3D:77:65:A4:7F:28
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QObTPQrtskVjZd6N-DA9d2Wkfyg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:da:d4:26:fb:06:18:e2:b5:17:e0:cf:8c:f6:18:a0:8c:
         0d:88:bf:8c:34:cf:f2:8c:38:4b:ac:54:c4:b9:12:49:0f:1a:
         17:e3:cc:44:13:a9:03:6d:5a:b7:3f:22:e1:cf:2d:82:0c:4c:
         6f:b1:bc:e7:47:73:78:03:73:8a:ba:b4:7f:ea:83:b9:53:6d:
         90:73:85:c2:3f:c1:32:22:4e:8a:6f:30:ed:eb:af:65:08:2a:
         ca:37:af:62:d9:41:ed:1f:1a:d7:21:3c:81:d9:4a:7d:e8:83:
         28:a4:23:91:5d:5e:9f:bc:29:bb:0f:c7:78:e2:79:21:4b:2b:
         ea:d6:2b:ad:f5:6e:1c:d4:e2:9e:e5:e3:54:bb:ff:a2:af:28:
         27:99:e5:c1:d6:a1:d5:94:20:71:b0:8b:30:c2:44:01:83:11:
         a2:3c:6c:10:c6:bd:c7:ef:2c:ad:e5:6c:92:00:4d:7f:0b:07:
         76:0f:91:06:7b:47:64:bd:9b:7a:93:0d:91:84:0f:c5:99:00:
         bf:b2:56:6d:64:bc:22:e7:4f:f1:da:e9:31:dd:33:ab:68:f3:
         b4:08:63:bf:96:61:5b:f4:65:d9:0c:18:90:96:6d:2e:28:35:
         da:93:31:d3:02:d7:ef:a8:c7:c4:de:1f:f5:ec:0c:37:d4:00:
         fb:ed:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----