Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iSUsea1Qrztdaj3KwrnqIu2exyo.roa
File:                     iSUsea1Qrztdaj3KwrnqIu2exyo.roa (raw, json)
Hash identifier:          sj1yl6ZCB/TPq4LhCosCVF/ax5k20H67ExtuI+MpVjI=
Subject key identifier:   89:25:2C:79:AD:50:AF:3B:5D:6A:3D:CA:C2:B9:EA:22:ED:9E:C7:2A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DF3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iSUsea1Qrztdaj3KwrnqIu2exyo.roa
Signing time:             Tue 29 Sep 2020 09:55:10 +0000
ROA not before:           Tue 29 Sep 2020 09:55:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3571 (0xdf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=89252C79AD50AF3B5D6A3DCAC2B9EA22ED9EC72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:39:45:bc:6a:a6:d0:4a:bb:a4:bf:dc:92:
                    a6:cb:d8:48:e5:18:4a:4c:84:2a:11:8b:02:31:a4:
                    54:5c:76:d8:d3:b2:de:81:16:b0:fb:91:88:b6:9d:
                    af:de:67:a9:f1:27:d2:df:bd:1a:16:25:2a:bd:8b:
                    b4:55:3b:71:04:e8:2e:a0:6b:23:3c:17:7c:e8:2a:
                    a3:e5:0c:26:fd:fb:55:fe:10:6b:ee:b6:31:51:2e:
                    8f:7e:eb:55:17:4e:a7:82:ba:20:d7:e3:73:1e:c2:
                    16:b7:98:28:1d:f8:e9:1a:88:bd:84:f0:13:d1:fc:
                    ef:b5:f7:a6:b5:e5:7d:aa:38:04:9e:7a:0d:9a:76:
                    ca:96:45:fc:32:87:bd:10:dc:92:48:a8:f3:4b:d9:
                    a8:d8:e4:f1:ad:1d:05:a8:81:7c:90:cd:40:c6:86:
                    bb:81:b3:b1:47:cf:a5:0b:85:d4:ac:92:80:93:a0:
                    b0:ae:f9:de:62:d0:43:d1:a0:30:5f:7b:b0:f8:ab:
                    96:7c:10:e9:ac:c9:a0:81:ee:0d:59:54:13:d8:1d:
                    3d:fb:01:49:56:30:cb:7e:5d:68:4f:c5:7d:e1:49:
                    e1:56:07:ef:07:bb:f8:8f:12:3b:a2:a5:3e:12:88:
                    66:e9:d3:4c:8c:44:a1:40:8e:ad:ef:98:ab:1c:a7:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:2C:79:AD:50:AF:3B:5D:6A:3D:CA:C2:B9:EA:22:ED:9E:C7:2A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iSUsea1Qrztdaj3KwrnqIu2exyo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:dc:6d:69:4e:64:03:d3:cb:fa:64:1e:1c:f5:45:7e:bc:
         e6:ea:a8:17:ef:94:ac:e4:c4:5a:87:8f:bb:5b:3a:a1:b0:d1:
         b8:9a:d0:71:eb:93:44:ae:ed:c9:35:59:3d:6d:0d:8c:da:d0:
         bc:f0:1f:ff:c1:6f:c0:52:87:de:4a:b2:c3:bb:fa:78:90:f2:
         05:cc:22:46:5a:aa:a6:35:72:51:69:5a:da:4b:1c:82:64:df:
         32:7c:c9:9c:46:31:a2:8e:25:f4:c3:45:59:18:b4:e3:4b:82:
         1e:ab:3b:f8:5b:a2:43:27:f0:4f:35:81:81:ce:57:34:a4:d9:
         9c:9d:a6:b0:a2:a7:67:87:7d:bc:69:73:3a:a2:99:94:87:62:
         20:5e:1d:50:db:62:f3:a3:91:d7:ea:f7:7f:8c:10:14:04:f5:
         73:1d:6c:8c:44:2c:f9:f2:5e:03:91:4f:42:4b:d8:67:bf:7f:
         1f:3e:f7:ff:32:23:3f:14:b8:3b:54:73:1b:75:ee:2e:83:6b:
         f3:8e:8c:0d:4d:b3:26:73:32:fe:54:d4:27:b2:bb:98:64:7a:
         94:85:3f:b5:bc:2d:29:a0:35:3a:77:9d:6a:c6:9d:c9:6f:29:
         24:f6:3a:33:00:f8:0a:30:63:e8:28:0b:e2:1f:6d:7f:2d:dc:
         d0:a7:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----