Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ixTP8Hj3qlTcN45G938YaZJ9oac.roa
File:                     ixTP8Hj3qlTcN45G938YaZJ9oac.roa (raw, json)
Hash identifier:          85f7JYwPsV4bTqk+iH385r6XUlHLcYu4wZzU8ShWnoA=
Subject key identifier:   8B:14:CF:F0:78:F7:AA:54:DC:37:8E:46:F7:7F:18:69:92:7D:A1:A7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ixTP8Hj3qlTcN45G938YaZJ9oac.roa
Signing time:             Sun 07 Feb 2021 12:24:58 +0000
ROA not before:           Sun 07 Feb 2021 12:24:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6131 (0x17f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:24:58 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8B14CFF078F7AA54DC378E46F77F1869927DA1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:ab:c1:89:cd:53:4b:86:6a:23:a6:b8:62:
                    bf:b1:7b:2b:e7:70:b5:31:ec:d5:c1:b7:24:60:4a:
                    7e:e6:97:59:c5:cc:13:2e:fa:e6:8a:e5:5d:40:a1:
                    b6:d7:d2:4c:85:a7:fe:67:bc:6f:bb:31:4d:d0:a3:
                    75:81:4d:ba:95:84:1d:8c:cb:4c:f4:83:b3:58:e3:
                    f6:74:18:6c:dc:e9:10:ee:ad:83:8e:e6:99:a0:52:
                    fd:27:0b:c3:39:8f:e1:5b:85:08:a0:8c:4f:0e:02:
                    31:24:fa:60:a5:f0:16:ef:d0:e1:f7:49:e5:87:f9:
                    0d:7d:54:ac:6f:cc:df:cf:de:a0:61:f9:b4:cf:6c:
                    5d:b9:a3:b5:d3:f7:91:b7:f8:89:e8:b3:d1:69:86:
                    86:ed:58:a1:77:5b:eb:0b:fd:9b:91:4c:33:32:e3:
                    db:9a:6f:e6:50:31:92:a8:46:ee:f4:0f:04:bb:4c:
                    97:92:4a:1b:fa:52:14:56:77:2a:56:d0:4c:b9:5f:
                    2f:95:5d:dd:95:dd:39:92:46:7d:70:b1:44:e1:03:
                    4f:00:54:aa:1e:4c:0b:19:cb:9a:87:62:6c:e8:34:
                    a5:75:48:53:25:f0:90:46:16:69:93:f5:1d:43:fb:
                    57:91:a6:01:a0:44:2c:ce:cd:0b:cf:54:c3:8e:d5:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:14:CF:F0:78:F7:AA:54:DC:37:8E:46:F7:7F:18:69:92:7D:A1:A7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ixTP8Hj3qlTcN45G938YaZJ9oac.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:8d:54:19:46:2d:1d:11:b5:6e:74:4b:ed:e2:35:1a:f9:
         7c:1a:51:dd:ca:92:8d:02:f4:da:7d:db:ea:3d:0e:3c:0b:56:
         3b:9b:a5:3d:98:93:5d:e6:02:b6:70:fa:4d:55:d2:3f:71:e7:
         e4:31:b3:eb:84:9a:ef:e4:5c:aa:27:4e:42:69:46:8d:aa:e0:
         9c:11:f2:d6:30:97:30:e9:7a:87:f7:12:3e:01:4c:21:a1:aa:
         d5:0a:8a:22:d7:2f:48:5b:11:8e:37:85:d0:ab:0d:09:ad:3e:
         f4:d2:a9:38:52:53:67:82:88:07:b6:07:42:20:fc:39:95:13:
         8c:31:0c:f5:57:b5:22:e1:ad:47:5a:b3:94:95:13:41:2b:f0:
         a3:6c:77:67:f6:12:95:cd:b6:5c:d8:7d:44:67:89:ef:3b:a7:
         a1:82:49:5b:6b:2c:cf:cf:d6:84:a4:5f:d5:37:87:f6:41:b7:
         d3:ba:8b:97:68:45:ad:cc:c5:01:10:37:a0:16:9b:56:05:e7:
         08:c4:dc:07:6a:4e:12:e2:21:00:ff:18:8b:55:89:18:e6:98:
         cf:0e:28:e9:23:e4:58:44:83:8d:a1:e7:59:69:5c:ad:80:be:
         6e:bd:68:8c:45:24:d3:b0:f4:24:4f:1e:aa:9b:ee:b0:09:27:
         7d:d2:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----