Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_qA8y19yvXIUnVa9W4K2yRrH6mo.roa
File:                     _qA8y19yvXIUnVa9W4K2yRrH6mo.roa (raw, json)
Hash identifier:          HQWP1xWsu3He+DKL5vfLxgLJ4hIdvQM/BviZbQy8GtY=
Subject key identifier:   FE:A0:3C:CB:5F:72:BD:72:14:9D:56:BD:5B:82:B6:C9:1A:C7:EA:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F60
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_qA8y19yvXIUnVa9W4K2yRrH6mo.roa
Signing time:             Tue 23 Aug 2022 09:31:06 +0000
ROA not before:           Tue 23 Aug 2022 09:31:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.64.0/21 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8032 (0x1f60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Aug 23 09:31:06 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FEA03CCB5F72BD72149D56BD5B82B6C91AC7EA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:93:6b:80:06:57:1b:60:ac:e7:57:70:72:
                    d4:22:e1:37:e6:d1:96:b2:ca:a2:90:b2:46:b5:c1:
                    8f:43:e4:bd:d6:05:5e:e1:57:61:33:b8:fb:b7:23:
                    e9:3f:6b:15:d2:cb:78:62:d6:fa:18:a9:68:63:99:
                    44:f7:7c:ed:7d:b0:35:7a:5c:5b:44:d6:83:00:01:
                    0f:82:dd:b3:65:43:a7:fb:be:16:68:4a:43:14:d8:
                    fe:45:ee:2e:36:b6:2b:43:f2:5e:b3:f3:25:79:6c:
                    44:2e:b4:c7:1a:80:59:02:be:6f:1d:1a:57:a8:92:
                    3a:05:22:14:b5:49:d6:89:ac:18:93:1a:9c:8b:9b:
                    86:a1:b9:a0:b5:ed:05:80:61:e1:e7:a7:84:e6:2b:
                    59:50:45:af:c1:b7:b0:ef:1f:29:f3:7d:1e:48:a7:
                    e8:91:67:7b:bb:40:bf:41:82:a6:2d:84:83:c0:e8:
                    7c:5b:94:5c:e7:dc:cc:db:eb:87:60:b4:6d:a5:74:
                    78:1c:8a:57:7e:f1:43:2a:a3:f9:00:cd:68:89:aa:
                    4d:47:1c:e9:f1:80:a2:22:34:07:fc:b0:b3:bb:28:
                    7d:f4:f4:f9:38:2c:e6:c1:57:c8:fb:7a:24:23:87:
                    8b:35:8c:e6:06:bc:b0:87:ba:72:e7:e9:8b:c0:ad:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:3C:CB:5F:72:BD:72:14:9D:56:BD:5B:82:B6:C9:1A:C7:EA:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_qA8y19yvXIUnVa9W4K2yRrH6mo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:07:3c:a2:e9:b5:f0:96:f4:d0:69:91:ec:21:20:27:d9:
         75:79:4c:36:5e:53:49:39:fa:a6:d8:f1:ef:05:dd:47:a6:be:
         62:a5:e2:98:be:9d:a9:db:a2:85:32:8e:20:b9:6f:dc:3f:9e:
         4a:d1:fa:fd:31:ef:19:46:45:1d:43:55:bb:b3:ca:c7:47:c5:
         35:58:ab:64:e0:a6:13:25:e5:bf:f4:5c:3f:32:6e:1c:30:62:
         3e:8e:4f:1a:37:70:a6:d2:cd:d9:5e:49:4f:ae:73:14:0b:1e:
         52:b5:b0:1f:a3:f3:ba:29:db:82:71:13:20:96:09:07:2e:17:
         21:b4:e0:c7:fa:17:8b:e6:4b:ca:64:e4:5d:fc:42:51:82:a4:
         99:4a:76:73:b1:0f:d3:ad:b7:a3:48:af:a9:09:38:e6:20:7d:
         21:8d:f7:19:33:50:58:ac:4f:a0:c5:f4:df:54:e3:21:2b:14:
         0b:6e:77:8a:98:db:23:5b:89:42:06:bd:11:03:69:21:ae:01:
         31:58:86:d1:b0:50:3b:de:ad:74:8f:35:d8:b4:b5:a6:1e:1f:
         c9:75:e4:fd:2a:8b:16:83:21:d2:dd:e2:ea:49:17:0c:e1:40:
         4e:87:c6:eb:b8:f1:db:0b:dc:7d:b1:90:48:63:5b:f3:d5:bf:
         d4:13:d9:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA4MjMw
OTMxMDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZFQTAzQ0NCNUY3MkJE
NzIxNDlENTZCRDVCODJCNkM5MUFDN0VBNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6JJNrgAZXG2Cs51dwctQi4Tfm0ZayyqKQska1wY9D5L3WBV7h
V2EzuPu3I+k/axXSy3hi1voYqWhjmUT3fO19sDV6XFtE1oMAAQ+C3bNlQ6f7vhZo
SkMU2P5F7i42titD8l6z8yV5bEQutMcagFkCvm8dGleokjoFIhS1SdaJrBiTGpyL
m4ahuaC17QWAYeHnp4TmK1lQRa/Bt7DvHynzfR5Ip+iRZ3u7QL9BgqYthIPA6Hxb
lFzn3Mzb64dgtG2ldHgcild+8UMqo/kAzWiJqk1HHOnxgKIiNAf8sLO7KH309Pk4
LObBV8j7eiQjh4s1jOYGvLCHunLn6YvArQApAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/qA8y19yvXIUnVa9W4K2yRrH6mowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19xQTh5MTl5dlhJVW5WYTlX
NEsyeVJySDZtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AUAwDQYJKoZIhvcNAQELBQADggEBAI2QBzyi6bXwlvTQaZHsISAn2XV5TDZeU0k5
+qbY8e8F3UemvmKl4pi+nanbooUyjiC5b9w/nkrR+v0x7xlGRR1DVbuzysdHxTVY
q2TgphMl5b/0XD8ybhwwYj6OTxo3cKbSzdleSU+ucxQLHlK1sB+j87op24JxEyCW
CQcuFyG04Mf6F4vmS8pk5F38QlGCpJlKdnOxD9Ott6NIr6kJOOYgfSGN9xkzUFis
T6DF9N9U4yErFAtud4qY2yNbiUIGvREDaSGuATFYhtGwUDverXSPNdi0taYeH8l1
5P0qixaDIdLd4upJFwzhQE6Hxuu48dsL3H2xkEhjW/PVv9QT2aU=
-----END CERTIFICATE-----