Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qyfj0igC-RVMucyoqldjfl1bbNY.roa
File:                     Qyfj0igC-RVMucyoqldjfl1bbNY.roa (raw, json)
Hash identifier:          LRdolAObzchjZBc/WYm7YGiexRsbgQ3H8K3UP/3hLnk=
Subject key identifier:   43:27:E3:D2:28:02:F9:15:4C:B9:CC:A8:AA:57:63:7E:5D:5B:6C:D6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D70
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qyfj0igC-RVMucyoqldjfl1bbNY.roa
Signing time:             Tue 29 Sep 2020 09:54:34 +0000
ROA not before:           Tue 29 Sep 2020 09:54:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4327E3D22802F9154CB9CCA8AA57637E5D5B6CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:08:e5:63:5e:47:ac:71:da:1e:35:e1:3b:
                    b4:d3:61:8c:6e:42:39:34:7a:77:67:2a:16:38:55:
                    e5:a1:95:35:ed:fa:c4:cd:b4:2c:19:1d:bb:e7:d1:
                    a5:f5:7e:89:90:fa:d4:ec:33:5f:07:27:95:2c:9a:
                    d0:c2:b5:eb:c5:47:39:8d:2f:3b:ae:08:6a:32:2f:
                    4d:17:b3:38:30:e6:ff:a2:63:1e:ea:cf:64:81:bf:
                    ca:72:ba:5b:a2:16:cd:27:63:50:54:55:62:16:2b:
                    cf:fa:21:6e:2c:62:26:2d:4a:d1:8e:96:ae:fd:86:
                    44:f8:4a:b6:58:99:7f:a5:65:5f:41:bf:25:80:7c:
                    5f:4c:53:79:d2:cd:35:31:0d:02:7a:45:9a:6a:3e:
                    4b:7f:df:0d:15:8b:33:7d:cb:03:c1:53:dc:6f:ee:
                    07:8b:25:95:49:9f:3a:4a:4c:6f:d8:c1:8b:2a:8c:
                    19:6c:8c:71:5a:25:cb:57:5b:2b:ee:28:05:bf:49:
                    09:c8:cd:e1:c5:8b:52:ab:a1:b7:b5:79:5a:da:f7:
                    7a:16:f5:61:53:ff:24:e4:84:65:e6:cd:02:24:5d:
                    8d:17:0a:f8:17:e1:6f:a1:fc:2c:1e:31:35:68:7d:
                    ca:25:f2:f3:c1:eb:5e:83:58:1b:fb:d1:ff:40:3e:
                    2f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:E3:D2:28:02:F9:15:4C:B9:CC:A8:AA:57:63:7E:5D:5B:6C:D6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qyfj0igC-RVMucyoqldjfl1bbNY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:96:22:b4:04:21:1a:72:1d:99:b8:e1:f4:1f:19:d9:b9:49:
         bd:4d:86:dc:cc:5e:5f:79:1f:c2:46:ef:8d:ff:3e:52:8e:eb:
         91:a2:07:82:9a:eb:eb:3a:5c:3a:eb:31:eb:6d:80:00:02:74:
         13:69:25:d6:1c:ea:01:17:ad:46:f2:68:63:34:a4:b8:3c:0b:
         7b:5e:2c:ab:bb:39:01:f3:de:df:c9:ef:86:ea:19:a1:27:24:
         b1:ad:ec:1a:d1:7d:03:4c:98:5d:b9:c0:a2:0f:68:57:72:1b:
         dc:6d:8e:d8:ad:e6:6f:e7:9a:bc:3c:91:a7:58:c4:84:7e:39:
         d2:e0:49:f7:f5:74:bc:3e:97:60:be:bd:c3:60:7c:49:84:a8:
         4e:f8:55:e1:b2:f9:3f:12:e9:e5:22:ab:92:f7:22:a6:65:e4:
         32:74:7e:a9:28:63:67:a1:4a:41:c3:ab:8a:6b:ac:ae:f7:23:
         60:90:5a:0d:c5:71:72:84:00:a2:40:76:04:34:43:7d:3d:bb:
         52:ee:f9:4d:6c:63:d5:b6:af:0f:ec:65:b2:33:79:b0:ba:6d:
         ac:49:90:08:76:50:e5:2f:fb:50:3e:17:8e:3f:c3:78:a9:dc:
         5d:82:18:9b:cf:18:49:b5:f8:dc:26:ed:2f:61:e1:0e:0a:a7:
         14:59:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----