Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9TO8dqV49sE1qJtBA-zJQ29E4w.roa
File:                     k9TO8dqV49sE1qJtBA-zJQ29E4w.roa (raw, json)
Hash identifier:          9GXDUYCbRMylftUXQhSQplhwVSxrRaPRwvNnY+aylH4=
Subject key identifier:   93:D4:CE:F1:DA:95:E3:DB:04:D6:A2:6D:04:0F:B3:25:0D:BD:13:8C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E63
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9TO8dqV49sE1qJtBA-zJQ29E4w.roa
Signing time:             Tue 29 Sep 2020 09:55:40 +0000
ROA not before:           Tue 29 Sep 2020 09:55:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3683 (0xe63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=93D4CEF1DA95E3DB04D6A26D040FB3250DBD138C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:34:20:ec:cb:9c:ef:b1:e0:90:2d:e6:ca:f8:
                    e0:69:ae:72:23:e4:07:df:4c:b9:2a:6f:2f:d5:9f:
                    48:3c:f7:60:5f:c4:52:ae:49:d0:1e:ca:3d:a7:00:
                    c3:ca:eb:6f:c7:b3:e5:e7:fe:d2:a0:c2:6a:3d:d5:
                    17:b2:9a:4d:ad:73:f6:42:06:0d:60:d5:b9:ba:aa:
                    d8:98:79:f1:db:0f:a5:b4:42:d3:0f:6d:eb:a3:ac:
                    26:3e:01:73:b5:e9:07:63:84:e5:48:47:a8:48:b5:
                    70:a9:cd:9a:93:87:9b:ac:d4:36:ef:c5:48:03:c6:
                    c1:e3:d2:fc:01:88:40:64:db:2c:69:ad:98:fb:0a:
                    80:64:ce:0b:33:bc:7b:e6:70:11:98:b9:81:c0:80:
                    aa:6e:ec:51:32:b6:5f:8b:16:24:44:52:fb:19:07:
                    1e:50:cc:57:07:2d:8f:c0:f9:54:79:b4:db:d0:63:
                    81:1f:89:7e:e5:d8:21:4c:3d:42:1e:fd:c9:b7:c7:
                    90:27:33:d7:d4:ec:ba:40:1b:46:7b:5e:94:5b:ac:
                    bc:66:68:9c:ee:89:02:55:5c:20:ac:59:48:96:5e:
                    3d:ca:18:16:2a:d2:bc:a1:c8:c6:e3:ca:89:79:63:
                    8a:bd:f7:f4:62:c7:f8:75:3e:70:56:f5:8c:6c:3f:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D4:CE:F1:DA:95:E3:DB:04:D6:A2:6D:04:0F:B3:25:0D:BD:13:8C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9TO8dqV49sE1qJtBA-zJQ29E4w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:5d:83:f1:f3:94:8d:85:81:ab:97:d3:73:e3:f0:d0:03:
         3e:a5:ee:a4:92:a6:30:72:10:d5:81:96:c4:5c:1b:62:cf:1c:
         2b:19:62:dc:e6:85:53:e4:c6:42:c8:15:5b:a2:93:59:92:40:
         df:80:50:61:7b:ac:13:ce:11:40:d7:fa:1e:e2:ee:f6:6a:89:
         63:a8:42:e0:93:00:53:ee:df:5c:dd:13:01:b8:26:3e:ef:39:
         f5:42:0c:d7:21:2f:8d:78:ef:aa:52:b9:2d:b5:1c:b4:63:16:
         79:ef:92:14:0f:b3:d4:0d:ca:d1:63:ed:76:39:fc:54:98:8d:
         df:2a:aa:0c:d4:aa:41:12:db:09:13:5f:d4:b6:70:27:8f:2a:
         f4:5d:b1:e1:e4:61:6a:7d:73:18:c3:da:af:38:40:94:fc:0d:
         85:f8:c8:c8:d8:05:46:60:18:b8:4b:71:c6:be:52:bd:15:b1:
         4c:ce:9b:34:74:81:98:64:39:26:d6:dd:f9:08:70:6d:70:ae:
         21:d7:72:58:84:30:79:04:d0:dc:bb:13:4c:dc:3f:5a:87:7e:
         6c:3f:5c:5f:b0:04:14:bb:78:90:d2:4c:13:85:cc:79:a3:64:
         90:f2:f2:0a:74:f3:ed:00:34:0c:37:f8:d8:7e:ef:4f:3e:17:
         db:0d:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----