Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UCROGCddUbYJALgKM2F3uSbJlmM.roa
File:                     UCROGCddUbYJALgKM2F3uSbJlmM.roa (raw, json)
Hash identifier:          FCS55/9nTV1dGBpUGU8muwbeF/dkZgZJnnyMfKl9NiE=
Subject key identifier:   50:24:4E:18:27:5D:51:B6:09:00:B8:0A:33:61:77:B9:26:C9:96:63
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1755
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UCROGCddUbYJALgKM2F3uSbJlmM.roa
Signing time:             Sun 07 Feb 2021 12:18:26 +0000
ROA not before:           Sun 07 Feb 2021 12:18:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5973 (0x1755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:18:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=50244E18275D51B60900B80A336177B926C99663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:3e:40:65:94:06:52:a0:b2:fa:a9:e9:4f:
                    07:28:b1:dd:33:4b:21:a7:9e:c8:81:94:c2:f3:db:
                    56:f2:49:07:ec:79:27:b3:ea:b8:05:a7:7e:ec:e7:
                    0a:b0:63:8e:a3:0b:55:72:2f:b4:8b:81:e8:97:3a:
                    d8:94:14:26:92:1b:59:25:b3:16:51:11:af:24:18:
                    1c:7e:0d:31:62:8b:ec:f3:d9:0d:73:22:60:27:ee:
                    64:6b:97:65:d4:aa:38:3f:c4:91:28:80:c3:78:38:
                    25:6c:8e:67:30:9a:c8:27:f3:94:3b:29:04:38:79:
                    d3:9e:f2:3f:03:70:4b:a0:4a:a7:75:8e:1a:41:22:
                    1a:d3:34:85:ff:d1:f7:df:63:7c:c1:0c:fe:19:b1:
                    07:5a:69:08:79:e9:a3:3a:97:86:cb:fc:de:58:40:
                    33:0d:d3:63:8f:f3:a4:4b:c7:08:fd:7e:b2:2b:92:
                    99:2e:05:f0:7a:b1:9e:9e:85:ae:60:96:61:7c:0e:
                    27:55:49:87:2d:9a:8b:52:0e:9f:80:89:44:b3:a2:
                    cd:9e:98:c9:76:47:55:10:6e:28:8a:6a:cb:7f:b0:
                    8e:cb:e4:9f:8e:18:dd:cd:11:3c:86:cc:88:cf:a0:
                    ba:b0:64:37:c2:3b:8d:46:8f:42:d8:0f:f8:08:e9:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:4E:18:27:5D:51:B6:09:00:B8:0A:33:61:77:B9:26:C9:96:63
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UCROGCddUbYJALgKM2F3uSbJlmM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:38:cf:28:9b:58:c8:78:c6:1f:65:9b:4d:4a:e6:37:d8:41:
         4f:96:d7:16:3f:a3:a2:9a:82:a8:a5:76:c2:1a:d3:5c:e5:9e:
         c4:76:0d:c4:87:53:46:eb:03:8d:62:ab:65:9c:fa:df:93:46:
         70:7e:49:ce:36:0a:ea:f4:c8:f5:52:56:83:a3:05:91:28:b8:
         e5:1f:62:33:db:5c:55:5a:e9:b4:cc:df:c8:59:8f:49:8b:1e:
         5d:b9:de:73:77:ab:76:4d:fe:d7:e3:c3:f3:03:a3:c5:d3:30:
         3f:e9:ee:bc:15:71:81:04:0f:5b:e4:68:21:94:d8:3e:f8:82:
         64:fb:34:05:fc:cd:1f:8b:50:c3:e4:24:ed:9e:60:0f:70:d1:
         6d:b7:26:a1:4c:6b:a2:4c:5e:2e:d7:a2:cf:22:a0:10:1a:69:
         7d:00:96:89:ae:fb:86:8b:50:a3:c2:0c:ba:13:e3:5b:f0:b3:
         f7:5a:52:c2:c3:b6:4d:57:07:58:dd:35:c0:80:3c:a7:fd:90:
         10:94:16:70:3e:77:c2:af:59:fe:f9:22:ad:34:d2:d8:9f:41:
         17:3f:38:51:8b:cf:46:f8:29:cc:92:9f:56:48:b9:ed:00:5f:
         f1:c5:e4:d3:08:e8:a0:51:9e:f4:51:c9:7b:91:ff:d9:3d:78:
         30:9b:60:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF1UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE4MjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUwMjQ0RTE4Mjc1RDUx
QjYwOTAwQjgwQTMzNjE3N0I5MjZDOTk2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPcj5AZZQGUqCy+qnpTwcosd0zSyGnnsiBlMLz21bySQfseSez
6rgFp37s5wqwY46jC1VyL7SLgeiXOtiUFCaSG1klsxZREa8kGBx+DTFii+zz2Q1z
ImAn7mRrl2XUqjg/xJEogMN4OCVsjmcwmsgn85Q7KQQ4edOe8j8DcEugSqd1jhpB
IhrTNIX/0fffY3zBDP4ZsQdaaQh56aM6l4bL/N5YQDMN02OP86RLxwj9frIrkpku
BfB6sZ6eha5glmF8DidVSYctmotSDp+AiUSzos2emMl2R1UQbiiKast/sI7L5J+O
GN3NETyGzIjPoLqwZDfCO41Gj0LYD/gI6RSBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUCROGCddUbYJALgKM2F3uSbJlmMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VDUk9HQ2RkVWJZSkFMZ0tN
MkYzdVNiSmxtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AQQwDQYJKoZIhvcNAQELBQADggEBAAg4zyibWMh4xh9lm01K5jfYQU+W1xY/o6Ka
gqildsIa01zlnsR2DcSHU0brA41iq2Wc+t+TRnB+Sc42Cur0yPVSVoOjBZEouOUf
YjPbXFVa6bTM38hZj0mLHl253nN3q3ZN/tfjw/MDo8XTMD/p7rwVcYEED1vkaCGU
2D74gmT7NAX8zR+LUMPkJO2eYA9w0W23JqFMa6JMXi7Xos8ioBAaaX0Alomu+4aL
UKPCDLoT41vws/daUsLDtk1XB1jdNcCAPKf9kBCUFnA+d8KvWf75Iq000tifQRc/
OFGLz0b4KcySn1ZIue0AX/HF5NMI6KBRnvRRyXuR/9k9eDCbYMQ=
-----END CERTIFICATE-----