Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pLCT-li-ekgrCPVsENaz4c9HIu4.roa
File:                     pLCT-li-ekgrCPVsENaz4c9HIu4.roa (raw, json)
Hash identifier:          Bk57Z+HPXErpmjQekMpXn3xrhOb5YcRoQGK/IJfiMEI=
Subject key identifier:   A4:B0:93:FA:58:BE:7A:48:2B:08:F5:6C:10:D6:B3:E1:CF:47:22:EE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CFF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pLCT-li-ekgrCPVsENaz4c9HIu4.roa
Signing time:             Tue 29 Sep 2020 09:54:03 +0000
ROA not before:           Tue 29 Sep 2020 09:54:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3327 (0xcff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A4B093FA58BE7A482B08F56C10D6B3E1CF4722EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:8e:90:37:a5:64:df:59:71:84:f1:76:52:
                    0c:ad:7a:22:5f:0c:2a:7a:a0:97:ff:87:9e:2a:aa:
                    fd:7d:3a:bf:2c:cf:d2:41:24:f7:24:1e:d5:97:eb:
                    89:3e:cb:49:4f:0b:41:d2:b1:0f:94:e2:1b:c5:39:
                    1d:7a:6f:2e:ce:51:c9:d6:e4:71:90:08:38:32:80:
                    6c:c4:f0:65:be:79:62:b5:64:e5:63:d0:79:30:dd:
                    1c:81:6c:89:f3:77:e6:fd:54:34:4d:b1:2a:b0:69:
                    40:6c:e9:d2:cc:11:2b:0d:2e:62:6c:1e:ec:c8:67:
                    33:21:c1:8e:4b:e4:e1:48:b9:37:99:41:c4:39:c6:
                    27:d5:c3:ae:88:c2:65:04:75:77:a8:22:60:12:f1:
                    0b:40:a4:79:d6:63:55:14:cf:9e:4b:94:6a:5b:10:
                    ca:69:4d:77:fd:c4:9f:a1:64:ac:2f:04:ef:c6:e7:
                    b5:f2:e3:dc:ed:0f:5d:71:07:e2:7b:05:78:06:5b:
                    f7:b7:41:00:1e:74:54:08:40:fb:d6:5a:f3:1a:c1:
                    ba:a4:78:47:95:14:a6:05:e4:58:1c:59:07:79:71:
                    fd:94:c5:56:85:70:46:c0:7d:73:aa:bb:0c:ff:76:
                    b4:aa:cd:9c:81:fc:67:be:30:a9:d1:d2:df:ee:ef:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B0:93:FA:58:BE:7A:48:2B:08:F5:6C:10:D6:B3:E1:CF:47:22:EE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pLCT-li-ekgrCPVsENaz4c9HIu4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:4a:83:58:9a:b7:36:8b:05:05:01:fc:97:38:e7:95:21:
         e5:20:b9:df:a5:b3:b8:e1:50:3d:cc:af:73:74:d9:c5:35:90:
         0d:88:cb:63:0d:3c:55:a6:b9:70:92:5b:e7:5e:7d:58:cd:c7:
         90:60:d1:e3:8e:92:1a:96:da:a0:9c:00:b7:da:a4:f0:57:38:
         99:56:de:12:9a:16:bd:d0:99:b2:74:a9:27:93:c6:ac:ba:d1:
         f2:af:6a:08:39:88:64:14:56:7d:4f:1d:30:30:09:92:bc:c5:
         1d:70:f7:12:72:3b:a6:01:78:7e:49:ca:d6:18:7e:d5:8f:1e:
         4e:96:3b:30:21:a1:67:f1:a8:fb:6a:36:17:25:77:f1:4a:89:
         02:05:6d:7c:fb:74:c0:83:73:e8:0c:cd:0f:c9:3c:1e:81:20:
         39:c6:1f:47:07:4d:31:5b:41:27:b5:51:bf:9f:c7:98:56:8f:
         bc:bb:5f:da:3e:0f:c0:26:a9:a2:b5:f2:78:9d:b5:e9:29:be:
         41:2a:48:bc:85:c4:6d:60:2f:c9:34:b3:c8:0e:db:e3:3e:b4:
         dd:8b:3a:5c:47:7b:a2:fa:65:d9:81:ef:84:fb:8b:e5:ef:07:
         3d:07:c0:20:6d:e2:44:1b:d2:e6:ea:a1:43:6d:47:07:a6:67:
         30:81:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----