Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YRZLq7rN_hkgQ5bPakJM07KE7iM.roa
File:                     YRZLq7rN_hkgQ5bPakJM07KE7iM.roa (raw, json)
Hash identifier:          nUAJahxdAnkWrdRk+668G25GMjhdcVC6DxnwAjmch+w=
Subject key identifier:   61:16:4B:AB:BA:CD:FE:19:20:43:96:CF:6A:42:4C:D3:B2:84:EE:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C0B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YRZLq7rN_hkgQ5bPakJM07KE7iM.roa
Signing time:             Wed 29 Sep 2021 02:47:19 +0000
ROA not before:           Wed 29 Sep 2021 02:47:19 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7179 (0x1c0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:19 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=61164BABBACDFE19204396CF6A424CD3B284EE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:53:4f:f3:45:c6:84:9f:91:83:8c:af:44:
                    5b:28:15:7c:51:9e:92:57:1d:a0:78:cf:e7:20:13:
                    20:07:7b:5b:87:6e:d6:66:7b:72:17:20:46:d1:79:
                    49:1d:b1:21:ab:c8:3d:c1:db:97:e5:1e:3c:52:1a:
                    41:5b:d9:97:4d:3e:13:c8:b4:5e:4c:62:63:b9:a8:
                    8b:b4:3f:7e:c3:f2:e0:51:a2:73:56:ef:d8:03:3e:
                    f4:65:0b:8d:07:ae:4d:70:3e:45:ca:5f:a5:52:35:
                    7e:fb:13:57:0b:bf:9d:1b:3f:45:96:0e:fb:ef:03:
                    2b:1d:7c:90:b6:0e:c2:98:d1:d8:15:71:d0:a0:10:
                    07:a9:24:a3:d1:af:56:ac:66:c4:97:30:1f:66:56:
                    ae:05:80:39:ef:99:51:68:c1:79:86:4e:95:6e:3e:
                    c8:8a:a3:ff:65:7a:2f:8c:8c:d7:61:0c:6b:e1:d7:
                    b3:14:a2:42:a2:21:a0:19:c6:b0:39:ae:d7:5d:07:
                    5b:9c:50:cd:34:8c:05:f9:dc:32:81:e8:a7:eb:85:
                    de:a0:ea:58:53:37:0b:4e:2f:f4:31:8c:d3:d8:f9:
                    a3:3d:9b:40:d6:0a:86:5c:95:89:35:97:cb:db:82:
                    74:ac:27:90:43:68:78:bb:f8:b3:ab:38:7e:77:56:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:16:4B:AB:BA:CD:FE:19:20:43:96:CF:6A:42:4C:D3:B2:84:EE:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YRZLq7rN_hkgQ5bPakJM07KE7iM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:35:27:b0:ee:b1:78:f6:73:73:37:02:8e:7b:08:f7:f7:
         cf:61:19:1b:dd:e0:f8:d5:6c:a4:2e:62:63:1e:71:c3:f4:9b:
         7e:d1:a2:8d:63:d0:97:6c:03:10:31:de:4a:c3:34:38:eb:57:
         8f:e5:93:0d:a5:7c:68:37:73:65:4b:36:bd:5d:95:ce:5d:15:
         14:59:d7:f9:57:b5:09:1f:ad:1a:90:ac:74:a0:d7:a2:90:a1:
         e2:ed:f0:9e:5c:fa:82:39:07:01:89:da:1d:e6:6d:c0:3a:c4:
         9b:de:0e:f8:3c:9f:a3:38:d0:67:22:29:c0:ca:03:67:ae:1e:
         f8:86:ab:b2:3f:13:4d:b3:83:f7:34:fe:ed:d3:ba:cd:4a:fa:
         54:23:05:91:d6:bc:5b:42:a4:da:0a:98:8a:9d:e7:f1:ad:80:
         0d:4f:2b:1f:b0:c4:cf:d4:13:96:da:ac:64:50:ed:b5:41:ed:
         50:d5:50:87:d7:e4:52:29:e2:b3:f3:4b:20:4b:84:49:61:c4:
         d9:0b:e0:c0:ef:eb:32:5d:51:9b:2a:59:37:a8:bb:b8:7f:0a:
         e7:28:aa:b4:ff:e0:8b:71:43:b9:39:bd:74:13:56:7d:51:9a:
         43:f7:aa:fc:67:8d:0a:1c:f0:b8:97:6f:24:3b:76:e8:cb:ce:
         d3:83:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----