Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqqW4yJcQq7ZrnPsWaLyV-0H6l4.roa
File:                     bqqW4yJcQq7ZrnPsWaLyV-0H6l4.roa (raw, json)
Hash identifier:          v++t4tNN/+d+BwL0pRCQRA9nT4m6OniqDeJStmSiIkM=
Subject key identifier:   6E:AA:96:E3:22:5C:42:AE:D9:AE:73:EC:59:A2:F2:57:ED:07:EA:5E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C53
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqqW4yJcQq7ZrnPsWaLyV-0H6l4.roa
Signing time:             Wed 29 Sep 2021 02:47:36 +0000
ROA not before:           Wed 29 Sep 2021 02:47:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7251 (0x1c53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6EAA96E3225C42AED9AE73EC59A2F257ED07EA5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:81:7f:54:92:f2:3c:b7:b0:30:e4:06:12:
                    fb:33:43:50:e5:7a:d5:a4:b8:2f:f8:6f:c0:f6:b3:
                    10:ce:e6:b4:20:54:0f:29:b1:73:54:6a:43:0b:1f:
                    00:5d:70:65:a2:e0:08:9d:a1:2c:d8:0a:a4:67:9f:
                    de:e9:b4:21:f9:e0:29:03:ba:9d:aa:56:81:c0:50:
                    43:d7:a7:95:8f:0f:d3:c5:0f:e4:f8:1e:3b:67:1e:
                    d0:73:a4:fe:b9:e1:00:b5:f1:14:48:15:a4:ee:d3:
                    26:2e:5e:d5:f3:5c:fe:67:f3:53:98:3a:1a:f9:b1:
                    38:fa:85:f4:8f:ff:a5:1c:9e:fa:43:5f:06:8a:e2:
                    ce:c9:43:d6:d2:56:1a:2a:98:fe:12:49:c8:ac:9d:
                    3e:0d:d8:90:4c:66:2f:b1:21:32:74:37:de:40:dd:
                    56:d4:25:14:49:cb:10:2b:92:38:45:07:e6:71:ab:
                    31:30:3d:02:8a:21:32:55:ae:4b:87:83:99:27:11:
                    5f:6d:94:c8:c1:b2:cf:ca:ae:91:a3:05:d8:a7:0e:
                    30:c1:5e:69:f6:0c:db:7d:66:28:54:e4:54:9a:58:
                    e3:f2:2d:c8:bd:68:a3:96:7c:7c:29:21:05:6d:aa:
                    58:b3:b2:71:3f:a0:f3:04:ba:ea:1c:72:07:d3:0f:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AA:96:E3:22:5C:42:AE:D9:AE:73:EC:59:A2:F2:57:ED:07:EA:5E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqqW4yJcQq7ZrnPsWaLyV-0H6l4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:eb:a7:11:65:78:b6:4b:05:13:21:62:97:8f:18:69:07:
         d4:30:18:ec:21:22:35:09:d9:cf:26:95:b4:f9:92:b9:e1:43:
         5c:f2:f0:c7:4d:4e:4f:d1:3b:97:28:9d:6b:a8:0b:ef:e7:63:
         ea:0a:03:38:1d:13:b8:29:3c:4a:9d:bc:77:c3:90:6e:3e:d3:
         25:c6:11:76:2f:8c:1f:ff:18:9d:c1:05:60:a7:ca:3d:86:2a:
         7a:0b:7e:6c:34:8e:25:dc:ca:55:43:36:45:f8:8a:13:79:f7:
         4d:f1:71:08:2a:85:b2:e8:66:9d:5d:7b:57:b6:b5:d0:0f:8d:
         1d:d4:e6:f0:b1:77:5e:c9:31:7f:33:63:54:cb:79:4b:c4:98:
         4f:11:a3:17:7b:87:cb:f4:ed:29:2a:c2:4c:68:57:da:c7:b3:
         cd:41:de:ad:4a:83:e2:81:f9:33:ca:54:c2:41:27:77:eb:78:
         6d:9c:50:59:49:47:c7:46:2a:a7:7d:65:41:b4:3a:d0:29:52:
         ef:6b:3e:4a:ae:c0:27:c6:1e:89:04:4f:5a:29:ee:92:06:ca:
         87:e8:53:f5:6d:ff:74:fd:aa:ca:3f:ad:c9:19:1b:1e:4e:7f:
         c2:0a:24:96:27:7c:da:dc:36:e7:f0:68:43:6b:92:0d:77:38:
         3e:4b:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----