Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxEZc1c-K5J7m2ygViYFInqJauo.roa
File:                     WxEZc1c-K5J7m2ygViYFInqJauo.roa (raw, json)
Hash identifier:          dwXLDiNU4QSAPRF01qFLgkEMqt/1RM1tAgaUwEc//LQ=
Subject key identifier:   5B:11:19:73:57:3E:2B:92:7B:9B:6C:A0:56:26:05:22:7A:89:6A:EA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AF2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxEZc1c-K5J7m2ygViYFInqJauo.roa
Signing time:             Wed 29 Sep 2021 02:45:56 +0000
ROA not before:           Wed 29 Sep 2021 02:45:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6898 (0x1af2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5B111973573E2B927B9B6CA0562605227A896AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:21:a9:f5:38:76:c8:d7:b6:a3:04:24:93:
                    c5:ec:2b:b4:71:ae:1e:18:64:55:c3:3c:16:f5:50:
                    26:80:27:88:90:70:3b:e7:07:84:aa:37:62:e2:53:
                    cb:61:55:ec:90:34:0c:c9:cc:44:72:f6:dd:a6:e6:
                    77:b6:c4:d0:df:8f:de:7b:92:fb:4a:af:4e:b9:8f:
                    47:68:bd:72:0d:1e:b6:9b:7f:33:70:80:d0:62:01:
                    af:f5:ed:bf:ac:14:e5:4a:6d:64:a8:5e:af:fc:b5:
                    1d:6c:c4:b4:a6:74:fc:c4:e9:bc:df:9c:f4:3c:65:
                    62:09:86:db:14:ee:55:0f:4e:cf:1c:2a:5f:7f:d2:
                    60:99:26:66:d2:46:cb:c5:a1:bc:9d:19:5f:60:2a:
                    3a:10:cd:15:ec:f7:e3:84:59:80:3f:00:4a:af:b7:
                    36:5d:9b:ea:e3:3c:f3:8c:a2:04:89:7d:bf:a2:e5:
                    f7:0f:ea:52:91:74:0a:40:98:c9:01:ad:13:2c:1b:
                    10:7d:94:60:ee:ef:e9:d0:30:aa:58:e7:22:4a:4f:
                    e1:fa:af:43:8a:d2:3a:2a:51:ee:29:59:a1:de:1e:
                    c4:69:ed:60:d5:94:3f:b8:42:30:a3:d6:f4:c0:5b:
                    ce:36:7a:9d:35:a4:2e:86:a4:9d:56:99:41:8f:c5:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:19:73:57:3E:2B:92:7B:9B:6C:A0:56:26:05:22:7A:89:6A:EA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WxEZc1c-K5J7m2ygViYFInqJauo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:60:fd:18:95:42:c6:ac:d8:88:b3:a0:d0:c8:69:26:5b:
         65:ed:50:00:c5:85:2f:a9:fb:91:ba:cd:12:2e:db:e3:00:b2:
         71:5f:de:03:1e:89:06:02:f1:3f:a6:c7:ea:5a:97:fb:af:de:
         69:b3:35:3d:38:06:90:0c:39:d1:f9:be:31:5b:39:8d:9b:81:
         d3:28:44:79:7f:4e:b3:5f:4e:aa:cb:69:3b:59:8e:b3:4a:a6:
         34:96:0b:76:60:66:e7:01:26:ac:0b:17:85:69:51:0e:c8:24:
         6f:50:37:a0:f5:85:77:d9:c8:d9:80:ba:82:d0:0f:b8:8c:de:
         f0:f0:fb:91:3c:1d:43:54:91:5e:90:ed:6c:f5:cf:21:81:cb:
         af:d8:ae:2a:22:46:9a:37:56:50:1b:24:a8:35:25:07:5e:28:
         66:73:4a:19:b0:65:50:91:6d:28:3b:75:2c:29:b7:72:f6:a8:
         9a:77:2b:90:a3:b6:fe:7e:2f:39:d3:d0:16:c8:f5:f5:85:fd:
         5d:46:c4:cd:8c:71:d4:fc:60:c7:54:17:6e:6b:ab:18:e9:19:
         1d:e0:2f:1e:92:08:a6:ce:d0:f7:1f:f2:9c:56:05:56:5c:7a:
         53:94:e8:f6:0d:26:36:4e:d4:c6:cf:69:b5:bb:28:ab:62:c8:
         84:3b:fa:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1NTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDVCMTExOTczNTczRTJC
OTI3QjlCNkNBMDU2MjYwNTIyN0E4OTZBRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY9SGp9Th2yNe2owQkk8XsK7Rxrh4YZFXDPBb1UCaAJ4iQcDvn
B4SqN2LiU8thVeyQNAzJzERy9t2m5ne2xNDfj957kvtKr065j0dovXINHrabfzNw
gNBiAa/17b+sFOVKbWSoXq/8tR1sxLSmdPzE6bzfnPQ8ZWIJhtsU7lUPTs8cKl9/
0mCZJmbSRsvFobydGV9gKjoQzRXs9+OEWYA/AEqvtzZdm+rjPPOMogSJfb+i5fcP
6lKRdApAmMkBrRMsGxB9lGDu7+nQMKpY5yJKT+H6r0OK0joqUe4pWaHeHsRp7WDV
lD+4QjCj1vTAW842ep01pC6GpJ1WmUGPxSTTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWxEZc1c+K5J7m2ygViYFInqJauowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1d4RVpjMWMtSzVKN20yeWdW
aVlGSW5xSmF1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS4wDQYJKoZIhvcNAQELBQADggEBAGeNYP0YlULGrNiIs6DQyGkmW2XtUADFhS+p
+5G6zRIu2+MAsnFf3gMeiQYC8T+mx+pal/uv3mmzNT04BpAMOdH5vjFbOY2bgdMo
RHl/TrNfTqrLaTtZjrNKpjSWC3ZgZucBJqwLF4VpUQ7IJG9QN6D1hXfZyNmAuoLQ
D7iM3vDw+5E8HUNUkV6Q7Wz1zyGBy6/YrioiRpo3VlAbJKg1JQdeKGZzShmwZVCR
bSg7dSwpt3L2qJp3K5Cjtv5+LznT0BbI9fWF/V1GxM2McdT8YMdUF25rqxjpGR3g
Lx6SCKbO0Pcf8pxWBVZcelOU6PYNJjZO1MbPabW7KKtiyIQ7+js=
-----END CERTIFICATE-----