Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ktvR6BPrgMtgrSa3QUWjVVCTmv8.roa
File:                     ktvR6BPrgMtgrSa3QUWjVVCTmv8.roa (raw, json)
Hash identifier:          IZ/oMYqaT3qM+o6LppoBwh91JSnQSgqqdzuDWOwQ+vI=
Subject key identifier:   92:DB:D1:E8:13:EB:80:CB:60:AD:26:B7:41:45:A3:55:50:93:9A:FF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1801
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ktvR6BPrgMtgrSa3QUWjVVCTmv8.roa
Signing time:             Sun 07 Feb 2021 12:25:26 +0000
ROA not before:           Sun 07 Feb 2021 12:25:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6145 (0x1801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:25:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=92DBD1E813EB80CB60AD26B74145A35550939AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:fc:5c:9e:e3:4b:ab:20:5f:5b:bb:b3:f8:
                    3a:94:5d:89:0d:f4:b3:64:fd:ab:08:b3:d3:f4:fd:
                    b4:6b:1b:d7:1e:8d:33:bd:66:95:24:3d:fa:17:4f:
                    4b:ff:ec:df:a9:6b:22:4b:27:a4:71:b5:13:f7:fc:
                    6d:19:5f:3b:84:5e:a6:eb:e2:1f:9e:27:c0:d1:92:
                    22:a8:3b:59:1c:8f:6d:58:53:47:d7:45:1b:d2:5e:
                    ab:2d:eb:90:37:a0:c1:6f:ee:18:95:03:26:a0:48:
                    ad:a6:cf:09:5a:18:e7:99:f9:7a:88:49:1f:cc:ef:
                    02:12:f9:99:da:d6:b7:de:a9:c1:66:22:08:58:ff:
                    80:b5:d5:22:24:f1:a2:3a:a0:83:3f:a5:22:4f:f2:
                    98:93:69:77:65:5f:f0:b4:6e:6a:77:36:1e:70:2a:
                    1f:e2:cc:2c:8b:65:96:fa:e9:91:32:c3:40:ee:e2:
                    d7:70:eb:2a:28:74:56:b7:62:96:8e:fd:df:ba:ee:
                    86:17:8f:c6:1c:e7:8a:08:58:1e:ea:21:26:cf:90:
                    1d:69:8c:95:78:55:88:a0:b6:d8:18:45:d2:da:12:
                    0d:0a:73:49:22:06:57:74:75:ee:ea:71:fd:e4:55:
                    85:d0:8d:93:86:2a:b3:9c:92:4b:6d:48:39:25:c2:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DB:D1:E8:13:EB:80:CB:60:AD:26:B7:41:45:A3:55:50:93:9A:FF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ktvR6BPrgMtgrSa3QUWjVVCTmv8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:e5:eb:e0:09:65:8a:b6:a8:66:c1:9a:c5:b0:22:1b:3b:d1:
         0f:3d:0d:67:9c:49:92:64:51:74:92:3f:2c:2e:87:e9:8d:df:
         e7:36:4f:78:80:02:dd:ea:87:de:08:95:aa:bf:7d:50:9a:4a:
         29:bb:63:3c:34:01:67:ff:b0:37:20:bd:66:d1:ce:3a:67:32:
         49:ad:83:26:7b:74:66:a1:e2:ff:2f:c4:76:f6:21:8b:2d:cf:
         65:d9:9d:ee:ab:40:49:7d:91:04:07:0c:1e:40:2c:b6:93:f4:
         06:54:24:36:e0:4a:04:5e:6b:32:a1:b8:39:2c:75:92:ae:0a:
         d6:19:02:f9:d5:5b:98:fe:b3:91:e4:ef:ef:0c:ca:78:6d:66:
         5e:6f:70:e1:62:cf:25:18:66:6b:af:9e:e8:25:08:60:24:6a:
         2b:7f:f4:85:a5:e9:f8:72:58:35:ba:16:3e:c1:81:eb:f4:95:
         a7:5c:37:b5:ac:9a:6a:ec:98:f7:4d:c2:dd:24:73:a6:c7:c5:
         13:0b:95:9a:53:04:10:30:78:5f:fa:8b:79:9e:c4:82:a5:f6:
         6f:a5:90:dd:4e:80:b5:7b:62:94:5e:89:95:62:c9:26:3a:33:
         f9:61:32:73:83:5d:90:cc:f4:5c:25:2d:c0:1a:0c:b8:08:df:
         a5:b8:21:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI1MjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDkyREJEMUU4MTNFQjgw
Q0I2MEFEMjZCNzQxNDVBMzU1NTA5MzlBRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC42PxcnuNLqyBfW7uz+DqUXYkN9LNk/asIs9P0/bRrG9cejTO9
ZpUkPfoXT0v/7N+payJLJ6RxtRP3/G0ZXzuEXqbr4h+eJ8DRkiKoO1kcj21YU0fX
RRvSXqst65A3oMFv7hiVAyagSK2mzwlaGOeZ+XqISR/M7wIS+Zna1rfeqcFmIghY
/4C11SIk8aI6oIM/pSJP8piTaXdlX/C0bmp3Nh5wKh/izCyLZZb66ZEyw0Du4tdw
6yoodFa3YpaO/d+67oYXj8Yc54oIWB7qISbPkB1pjJV4VYigttgYRdLaEg0Kc0ki
Bld0de7qcf3kVYXQjZOGKrOckkttSDklwiSvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUktvR6BPrgMtgrSa3QUWjVVCTmv8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2t0dlI2QlByZ010Z3JTYTNR
VVdqVlZDVG12OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AY0wDQYJKoZIhvcNAQELBQADggEBALbl6+AJZYq2qGbBmsWwIhs70Q89DWecSZJk
UXSSPywuh+mN3+c2T3iAAt3qh94Ilaq/fVCaSim7Yzw0AWf/sDcgvWbRzjpnMkmt
gyZ7dGah4v8vxHb2IYstz2XZne6rQEl9kQQHDB5ALLaT9AZUJDbgSgReazKhuDks
dZKuCtYZAvnVW5j+s5Hk7+8MynhtZl5vcOFizyUYZmuvnuglCGAkait/9IWl6fhy
WDW6Fj7Bgev0ladcN7WsmmrsmPdNwt0kc6bHxRMLlZpTBBAweF/6i3mexIKl9m+l
kN1OgLV7YpReiZViySY6M/lhMnODXZDM9FwlLcAaDLgI36W4IQM=
-----END CERTIFICATE-----