Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mzTo8bRsULDqgzmlw83eDt5H0lw.roa
File:                     mzTo8bRsULDqgzmlw83eDt5H0lw.roa (raw, json)
Hash identifier:          ZkFEDm7M43wjCYHEtf6ZOdgKH7gYANkxKPqo/9wVWmw=
Subject key identifier:   9B:34:E8:F1:B4:6C:50:B0:EA:83:39:A5:C3:CD:DE:0E:DE:47:D2:5C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E13
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mzTo8bRsULDqgzmlw83eDt5H0lw.roa
Signing time:             Tue 29 Sep 2020 09:55:18 +0000
ROA not before:           Tue 29 Sep 2020 09:55:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9B34E8F1B46C50B0EA8339A5C3CDDE0EDE47D25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:8e:6c:3a:e5:b8:5a:db:6e:da:bd:9c:2a:
                    8b:62:b3:04:c8:0e:d2:9f:37:18:70:4f:99:c3:c4:
                    d8:37:05:4d:b5:4b:5a:9c:82:7b:22:54:47:61:56:
                    05:ef:d3:97:27:4a:31:5f:22:57:38:58:d1:93:85:
                    2e:da:d2:9f:8a:d8:79:a5:d5:f0:97:c9:74:ab:b2:
                    81:a2:0b:85:0f:69:c5:91:0a:ab:2e:1f:0d:ef:1d:
                    eb:f6:5d:07:b6:13:75:fb:35:56:93:9b:0a:8d:74:
                    40:db:06:64:4b:cf:7b:aa:81:62:7e:58:00:4d:cc:
                    20:3d:d8:0b:9a:66:bc:d8:93:98:a8:cd:c0:9b:a9:
                    37:2e:80:97:11:65:da:e1:40:75:d2:b0:74:36:23:
                    f0:ff:57:66:43:c7:14:8e:01:d4:40:7e:e5:0d:d7:
                    fa:99:ce:61:f4:bd:5d:41:fd:26:1c:4d:ee:a0:57:
                    76:62:4a:43:c4:db:e4:6f:5f:98:82:d4:f1:d3:e4:
                    c2:62:5e:98:be:86:85:78:15:5f:38:f5:5d:fa:41:
                    80:13:d3:6c:dc:e3:bb:01:6f:a4:af:f7:d3:7f:dc:
                    26:fb:5f:b8:35:51:c2:25:02:59:b8:a1:28:62:a0:
                    98:f9:7e:47:c0:8c:e2:84:0d:78:25:f1:2e:5f:af:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:34:E8:F1:B4:6C:50:B0:EA:83:39:A5:C3:CD:DE:0E:DE:47:D2:5C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mzTo8bRsULDqgzmlw83eDt5H0lw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:ed:44:b5:44:f3:a5:85:58:a2:d0:d4:a5:3b:80:06:7f:6a:
         f6:9e:cb:08:3f:b9:95:58:06:30:d2:fd:e8:8e:e9:f8:27:26:
         ac:f5:24:bc:e1:8b:6a:cf:b5:70:ff:ca:c1:de:2a:d9:32:06:
         ed:88:07:3a:b7:e6:80:b7:be:99:98:63:b6:02:99:18:b2:31:
         b7:4d:e5:84:b6:c2:df:9e:e7:ed:01:e3:b3:1e:bc:29:86:ab:
         30:64:cc:45:95:f1:eb:75:23:8a:ae:b7:73:75:78:0a:a4:03:
         d6:8d:b6:3d:8a:41:85:d9:00:fc:0f:d8:89:44:4a:1c:18:7d:
         db:8f:c7:1b:7d:5d:98:93:3d:03:16:a4:04:9f:8d:01:f4:5b:
         b2:de:f8:fc:5a:b4:1a:6a:5e:15:81:b1:44:7c:aa:d1:50:ba:
         94:b3:f9:d8:ad:0e:65:94:cb:7d:d1:b1:c5:49:57:6c:93:69:
         c0:15:9a:95:70:78:20:70:52:06:33:13:d3:29:2b:7a:18:5b:
         bb:ff:64:ee:88:4a:b2:a0:b9:74:0c:52:cb:e9:2b:85:39:25:
         6c:c2:c2:2f:90:cb:25:9a:a3:8a:c2:65:fb:57:16:f4:aa:22:
         42:76:86:07:02:fb:cc:73:50:a8:7f:7b:05:a5:ea:a4:a9:99:
         c0:17:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----