Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QR2SkpoLlp4I4HpfxH1fjEVWnsw.roa
File:                     QR2SkpoLlp4I4HpfxH1fjEVWnsw.roa (raw, json)
Hash identifier:          86WvzhVGPN2k5193aa1YcrZAsDpaN0xF8pROoXBIUQc=
Subject key identifier:   41:1D:92:92:9A:0B:96:9E:08:E0:7A:5F:C4:7D:5F:8C:45:56:9E:CC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E34
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QR2SkpoLlp4I4HpfxH1fjEVWnsw.roa
Signing time:             Tue 29 Sep 2020 09:55:28 +0000
ROA not before:           Tue 29 Sep 2020 09:55:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3636 (0xe34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=411D92929A0B969E08E07A5FC47D5F8C45569ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:d8:c2:32:a8:35:08:48:13:c0:09:25:61:
                    08:e6:3e:0e:a1:79:ea:3f:25:40:a0:5d:c9:0e:87:
                    99:96:f3:63:b8:f9:20:d8:b5:b6:b5:b8:5e:c0:c0:
                    ec:c7:00:a2:8f:14:f2:b7:eb:c5:f5:4f:4a:a3:46:
                    d0:10:28:13:a3:7c:75:bb:d5:1d:69:75:f0:98:92:
                    0c:4e:9b:91:37:a9:98:49:34:07:98:38:1e:e0:5e:
                    c9:65:9d:40:d9:f7:39:cc:b8:fa:cf:43:5a:75:87:
                    b9:a0:d0:2f:27:9b:52:51:a6:0a:2e:2b:f0:2a:bd:
                    47:a1:ff:b7:9c:90:53:97:9d:71:cd:2d:b0:d3:6b:
                    ed:d5:a7:37:a4:b5:d5:ab:35:cc:c9:01:7c:6f:90:
                    39:11:db:e7:01:d3:47:e3:6e:87:d6:62:8a:07:fa:
                    72:9d:c7:d4:f1:e7:8a:76:8d:f8:28:97:ad:92:a7:
                    42:3f:79:3d:da:82:af:18:0f:91:22:de:54:e1:40:
                    3b:ec:3a:07:80:15:26:df:16:88:18:fc:07:9f:30:
                    97:a2:7e:f3:ed:a4:f3:d2:b1:5e:a2:c8:ba:6d:9f:
                    aa:f1:a0:74:7b:5e:84:7c:5d:bd:97:8f:1e:42:1a:
                    e4:8d:1d:38:11:c6:2b:74:72:10:06:78:74:ff:ff:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:92:92:9A:0B:96:9E:08:E0:7A:5F:C4:7D:5F:8C:45:56:9E:CC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QR2SkpoLlp4I4HpfxH1fjEVWnsw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:02:6d:95:7d:de:ef:a3:59:39:7d:38:42:06:7e:45:2c:9c:
         9e:c4:67:5d:16:2e:ce:73:4d:88:ec:bc:ae:3a:39:07:f6:c7:
         78:73:9e:ec:79:8b:4d:7c:ac:83:08:72:f9:ad:7b:20:41:dc:
         e1:1b:f4:8f:54:a6:43:8b:ae:7a:f1:c3:47:52:1b:ff:34:a0:
         77:a4:1f:f6:3f:c5:3e:38:82:42:39:b1:72:aa:d4:d3:d9:9d:
         f7:05:1b:cc:8a:9e:a6:1c:29:45:bc:3e:7e:2b:cf:c7:b0:bf:
         5d:6f:d0:53:13:4c:ec:8e:00:f7:cb:96:26:ba:3b:d1:e7:98:
         a3:b2:cf:68:0a:ff:d1:d9:aa:31:8b:e9:76:65:a3:25:75:22:
         bd:b9:08:cd:d4:30:95:c7:a4:de:db:5f:eb:58:da:95:58:97:
         84:09:5f:8d:76:d3:b1:0a:29:ee:82:3c:cc:13:0d:ff:8e:07:
         25:9c:f1:72:2e:07:76:8a:16:b0:ea:d2:3d:80:dd:ec:1e:8f:
         aa:3b:7a:d8:8b:d4:77:11:f5:7d:a6:a8:ba:8d:48:b4:1f:1a:
         b2:05:2b:de:e8:88:ed:22:ba:e6:15:7a:74:43:b9:df:57:e9:
         9a:12:4b:41:18:5e:7e:b8:d8:32:67:70:24:bf:a4:f9:69:fa:
         30:75:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----