Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jNf7mIWoyyeGn78OTD7vWDOpvs0.roa
File:                     jNf7mIWoyyeGn78OTD7vWDOpvs0.roa (raw, json)
Hash identifier:          suOwu2zqiETKDer93ChzX2hTc2RYuQNPg6HqWleDung=
Subject key identifier:   8C:D7:FB:98:85:A8:CB:27:86:9F:BF:0E:4C:3E:EF:58:33:A9:BE:CD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1757
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jNf7mIWoyyeGn78OTD7vWDOpvs0.roa
Signing time:             Sun 07 Feb 2021 12:18:30 +0000
ROA not before:           Sun 07 Feb 2021 12:18:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5975 (0x1757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:18:30 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8CD7FB9885A8CB27869FBF0E4C3EEF5833A9BECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:a7:1f:33:ec:ab:4f:5d:a6:23:64:a9:c0:
                    79:45:0d:c4:8c:39:18:d7:25:7f:30:58:63:3d:ba:
                    19:42:15:1b:e3:a6:b1:82:45:5e:5c:0b:e7:5a:0e:
                    d3:93:b3:89:ba:ab:06:c1:49:c0:16:ad:4d:f0:34:
                    c1:2c:e4:7f:60:0f:00:85:c8:ad:a6:15:a7:12:e6:
                    50:85:1d:0d:7f:cd:79:b8:e4:b8:03:56:3f:c0:b0:
                    5b:86:00:6c:d0:44:f0:8b:f4:df:be:f3:8b:6e:c5:
                    e2:f2:6f:2f:31:be:ec:fd:77:48:19:20:53:1b:96:
                    b7:f2:7d:28:32:4a:60:0f:74:52:84:f2:b4:cb:f9:
                    f5:74:31:69:ef:a5:b9:fb:48:b2:cb:83:18:5e:56:
                    fc:e6:8a:c2:d4:37:c1:1d:14:8a:ed:20:eb:9e:fd:
                    3d:c8:06:62:3e:63:53:9a:26:e8:cc:27:3c:a5:47:
                    ff:7f:23:78:25:3b:d2:6f:60:22:cf:e9:0f:cc:32:
                    60:ac:e1:72:60:f8:55:7f:1b:ab:b4:cc:40:80:e6:
                    af:37:c7:29:73:e7:f2:a8:e4:34:7c:27:7a:da:d7:
                    4d:f0:14:5c:ea:1a:be:55:9f:bd:59:44:33:69:2d:
                    e5:54:47:62:06:80:99:52:d5:70:60:e2:ad:fe:d9:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D7:FB:98:85:A8:CB:27:86:9F:BF:0E:4C:3E:EF:58:33:A9:BE:CD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jNf7mIWoyyeGn78OTD7vWDOpvs0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:4b:ff:37:a9:ee:23:83:3f:1d:56:9a:2a:4b:5d:2f:40:95:
         7b:97:a4:80:30:0f:6b:5e:4a:dc:2d:2d:00:4a:d8:2c:78:b9:
         5a:92:31:81:59:ec:3c:af:b9:d9:af:f1:17:7e:3f:57:15:51:
         64:54:8a:f7:80:a7:5a:12:7f:c1:73:d1:c1:7c:c1:38:79:de:
         7c:56:44:23:d0:7e:48:43:f9:f5:b3:82:86:cc:ef:08:08:49:
         21:1b:98:71:81:a1:2e:da:15:b4:e1:69:41:fe:e3:d3:b6:a0:
         a2:be:02:76:75:08:8c:1a:68:e5:07:43:2d:2f:43:ff:5c:59:
         8c:b2:be:a5:85:e2:e6:4e:01:fe:ff:87:30:ef:fd:50:63:09:
         f5:c7:9a:91:64:28:bc:f6:f6:fe:26:95:cd:a4:04:1f:ff:1a:
         78:27:d0:d6:21:dd:ae:c0:14:c2:c9:2d:ff:60:36:83:0e:8b:
         9d:b7:71:95:78:40:4b:5e:bc:57:a6:96:cf:78:01:e6:3f:7d:
         f0:34:71:e9:24:ab:21:93:fb:82:a8:11:f8:a4:89:2f:65:41:
         38:8b:ef:14:9e:44:7d:a5:91:42:f9:d9:0b:ee:bf:c1:14:15:
         23:f3:96:d9:29:ca:d0:df:a2:0b:fc:af:ab:9b:27:d1:1a:6e:
         c3:ed:41:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE4MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhDRDdGQjk4ODVBOENC
Mjc4NjlGQkYwRTRDM0VFRjU4MzNBOUJFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwd6cfM+yrT12mI2SpwHlFDcSMORjXJX8wWGM9uhlCFRvjprGC
RV5cC+daDtOTs4m6qwbBScAWrU3wNMEs5H9gDwCFyK2mFacS5lCFHQ1/zXm45LgD
Vj/AsFuGAGzQRPCL9N++84tuxeLyby8xvuz9d0gZIFMblrfyfSgySmAPdFKE8rTL
+fV0MWnvpbn7SLLLgxheVvzmisLUN8EdFIrtIOue/T3IBmI+Y1OaJujMJzylR/9/
I3glO9JvYCLP6Q/MMmCs4XJg+FV/G6u0zECA5q83xylz5/Ko5DR8J3ra103wFFzq
Gr5Vn71ZRDNpLeVUR2IGgJlS1XBg4q3+2ZPZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjNf7mIWoyyeGn78OTD7vWDOpvs0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pOZjdtSVdveXllR243OE9U
RDd2V0RPcHZzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ASgwDQYJKoZIhvcNAQELBQADggEBAENL/zep7iODPx1WmipLXS9AlXuXpIAwD2te
StwtLQBK2Cx4uVqSMYFZ7Dyvudmv8Rd+P1cVUWRUiveAp1oSf8Fz0cF8wTh53nxW
RCPQfkhD+fWzgobM7wgISSEbmHGBoS7aFbThaUH+49O2oKK+AnZ1CIwaaOUHQy0v
Q/9cWYyyvqWF4uZOAf7/hzDv/VBjCfXHmpFkKLz29v4mlc2kBB//Gngn0NYh3a7A
FMLJLf9gNoMOi523cZV4QEtevFemls94AeY/ffA0cekkqyGT+4KoEfikiS9lQTiL
7xSeRH2lkUL52Qvuv8EUFSPzltkpytDfogv8r6ubJ9EabsPtQf0=
-----END CERTIFICATE-----