Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wye8eDKIjWtLT7z3dTtGXtOoE-A.roa
File:                     Wye8eDKIjWtLT7z3dTtGXtOoE-A.roa (raw, json)
Hash identifier:          8ufKvFYn2EKITnX5djkF4n3Ln+Ni2SpsJlYC0EcoE3c=
Subject key identifier:   5B:27:BC:78:32:88:8D:6B:4B:4F:BC:F7:75:3B:46:5E:D3:A8:13:E0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C54
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wye8eDKIjWtLT7z3dTtGXtOoE-A.roa
Signing time:             Wed 29 Sep 2021 02:47:36 +0000
ROA not before:           Wed 29 Sep 2021 02:47:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7252 (0x1c54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5B27BC7832888D6B4B4FBCF7753B465ED3A813E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:0b:d8:d7:3c:70:a0:0c:3f:35:b7:f8:3b:
                    5a:66:54:66:0d:6d:b0:20:8d:7a:88:b4:28:73:c7:
                    44:0f:cf:0a:4f:a9:74:ec:4d:6a:f0:28:1a:88:59:
                    8a:4b:2d:88:e4:5f:78:9b:85:d7:40:2b:bb:e8:0d:
                    a2:af:c6:3b:6f:be:91:63:0c:a1:9c:fc:53:07:5e:
                    9d:6c:fc:6c:09:a6:4f:a6:62:12:ce:d7:95:12:f6:
                    bc:ab:75:91:02:de:10:d8:84:27:62:34:a1:e1:9a:
                    1f:f4:2d:ff:ef:67:a0:43:b6:08:88:75:ff:b8:4e:
                    28:1b:98:42:e8:02:96:f7:63:bc:aa:d2:2a:ca:63:
                    8d:0d:da:02:0b:df:88:31:e8:84:48:b0:64:98:f4:
                    6a:44:ae:22:bf:5b:37:1a:43:e5:29:19:34:3c:eb:
                    7f:54:e9:9b:04:dc:d3:b7:98:a6:0b:b5:79:5b:31:
                    c5:3e:27:6f:52:8a:9a:cc:5d:7e:a2:2d:d0:72:78:
                    52:2f:4f:59:56:5d:85:d7:04:09:fc:d5:ed:e3:f8:
                    fd:af:b9:68:0f:c4:25:6c:2d:8b:ef:7a:9e:d2:0f:
                    e6:c8:6c:68:6a:dc:1b:c5:8e:93:a0:64:dc:a7:b5:
                    47:54:c1:81:b3:7c:1a:58:93:00:bb:ab:62:77:4c:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:27:BC:78:32:88:8D:6B:4B:4F:BC:F7:75:3B:46:5E:D3:A8:13:E0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wye8eDKIjWtLT7z3dTtGXtOoE-A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:08:58:c2:28:28:a2:d0:29:f1:3d:68:d3:16:93:70:a2:
         86:6f:dd:2a:e7:62:3d:63:8d:a0:de:d7:c7:ed:cb:ff:23:01:
         51:48:78:50:7c:49:b6:db:53:a0:01:1b:00:20:01:8a:9b:13:
         41:67:fc:65:49:e7:b9:da:76:1f:52:46:21:c4:0a:42:fb:cb:
         87:cf:46:9c:ed:17:f1:5e:37:70:d0:62:d6:1d:a7:74:87:2f:
         6f:15:55:f4:3f:09:e1:3e:34:1f:f3:2d:e8:ac:21:49:19:07:
         f8:9a:db:b6:45:65:8f:b8:78:09:a4:96:05:2e:78:8d:0d:c9:
         d8:dd:e6:ea:93:36:39:d1:e8:c3:2c:86:6c:cc:48:e5:6b:17:
         df:80:bd:e6:27:4d:1a:d9:32:a4:ec:9c:df:d8:ed:d0:19:e9:
         b9:4f:ac:76:fe:ec:0b:49:de:fa:ad:93:70:ac:eb:a9:2c:ca:
         4e:d0:bf:28:d1:ea:b6:f4:9c:7d:41:32:55:68:1b:6d:80:88:
         9e:f6:fb:80:2c:e4:98:b9:d3:76:05:79:15:ea:a4:d8:0f:2c:
         03:3c:68:24:73:6c:5f:a0:ef:7d:f4:17:56:9f:fc:2b:aa:71:
         cb:2a:8a:43:52:12:c1:49:8e:91:c3:b0:e1:16:14:12:9c:69:
         9f:ad:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----