Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TeEs7vNG3VjOcU5vgQaiEqm5kZE.roa
File:                     TeEs7vNG3VjOcU5vgQaiEqm5kZE.roa (raw, json)
Hash identifier:          3Ur5m3kq8x698PT2eOtJ+u7BUo/F3bqcVF32U2kL6i8=
Subject key identifier:   4D:E1:2C:EE:F3:46:DD:58:CE:71:4E:6F:81:06:A2:12:A9:B9:91:91
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1815
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TeEs7vNG3VjOcU5vgQaiEqm5kZE.roa
Signing time:             Sun 07 Feb 2021 12:26:07 +0000
ROA not before:           Sun 07 Feb 2021 12:26:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6165 (0x1815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:26:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4DE12CEEF346DD58CE714E6F8106A212A9B99191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:7c:a3:af:eb:69:85:bd:4a:a2:26:ca:b2:
                    08:53:48:ec:94:19:39:0a:9c:24:e0:6c:8b:5a:23:
                    7f:1d:7b:1d:84:61:bc:1f:2d:ea:df:16:3d:a6:28:
                    c2:9d:c4:20:36:5a:f9:44:82:ab:23:13:a8:6d:50:
                    bd:4c:9b:3e:5f:0b:2e:bf:d7:36:85:56:e7:66:aa:
                    52:bd:dc:a2:75:34:72:fe:8e:94:08:fa:98:7c:de:
                    72:f8:15:02:8e:01:88:f8:58:e8:77:64:a6:29:b4:
                    75:31:da:22:71:fb:e1:33:51:74:36:65:cf:58:c9:
                    c5:bf:72:98:c6:ab:27:83:ee:f8:43:dd:d1:46:05:
                    0b:ef:90:11:4e:c9:84:91:4e:d1:17:8b:b8:42:09:
                    95:8c:f3:4f:d1:43:db:db:ec:ee:fe:47:6c:87:9b:
                    7e:3b:05:35:c6:7e:bf:d0:42:b4:03:be:d4:59:0f:
                    2a:57:b0:d9:73:96:98:81:18:8d:f4:37:6f:ce:2c:
                    05:71:35:3e:16:3f:dc:58:69:93:5c:de:21:51:0f:
                    ee:e4:98:25:eb:9d:6c:c0:9b:ac:a7:e1:4c:ea:34:
                    be:e3:e4:6c:65:2d:fc:97:50:b4:05:2d:03:40:c8:
                    a9:64:4a:54:5d:42:f6:ca:d1:14:1f:e5:8b:04:da:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:2C:EE:F3:46:DD:58:CE:71:4E:6F:81:06:A2:12:A9:B9:91:91
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TeEs7vNG3VjOcU5vgQaiEqm5kZE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:e1:71:45:18:6b:cd:3d:9d:76:bb:bd:e1:85:47:23:a2:
         86:3b:23:f8:95:c4:30:2e:dc:6c:1b:95:a5:00:04:30:e1:bb:
         ab:63:15:9e:05:5b:5b:05:8a:13:15:ed:a4:cb:37:bf:6a:ea:
         17:3c:8d:58:a8:fa:b4:bd:f2:60:a6:a8:66:8b:d3:19:20:ba:
         20:a4:89:a7:aa:d9:d0:ed:96:e5:13:b7:66:0d:14:e3:55:64:
         11:ec:e4:0a:14:40:75:e4:0e:e9:97:77:da:f4:f7:75:c4:42:
         c4:7d:bd:ff:70:dd:ad:7d:11:3b:8e:91:ba:b5:38:08:7e:19:
         ca:1f:99:ef:b4:4f:25:b3:9d:f1:30:37:73:de:c4:71:73:65:
         cf:e6:cf:ed:7c:24:34:1f:b5:36:5d:01:f2:12:cb:b4:9f:92:
         74:41:d2:d1:7a:a9:5a:49:bb:e3:b9:de:8e:85:d9:81:5c:0d:
         f4:6a:60:a3:30:49:3f:85:de:9b:2a:46:e3:fa:82:aa:ea:51:
         6d:b2:c3:7c:6a:7c:ca:bc:e9:48:03:90:11:e8:9c:c0:dd:ec:
         65:a0:45:76:96:b1:40:10:e4:ef:16:b8:5c:6d:a5:1f:47:91:
         0c:c0:43:d3:3c:18:17:61:3f:79:27:1c:2c:a8:95:e0:88:50:
         97:db:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----