Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qasG5tZpLuiOuxmlFn1vXmG8mVo.roa
File:                     qasG5tZpLuiOuxmlFn1vXmG8mVo.roa (raw, json)
Hash identifier:          Wucd9myZvPTRqWlNo8nEzBXRBOx1u4+bqHI6ECmvVno=
Subject key identifier:   A9:AB:06:E6:D6:69:2E:E8:8E:BB:19:A5:16:7D:6F:5E:61:BC:99:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C98
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qasG5tZpLuiOuxmlFn1vXmG8mVo.roa
Signing time:             Wed 29 Sep 2021 02:47:57 +0000
ROA not before:           Wed 29 Sep 2021 02:47:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7320 (0x1c98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A9AB06E6D6692EE88EBB19A5167D6F5E61BC995A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:15:66:6c:da:96:b0:d6:11:be:48:03:31:
                    81:f0:79:bc:c8:88:ad:72:66:1c:0a:ad:f5:0c:70:
                    16:77:5c:8f:76:2e:65:dd:62:73:18:61:9b:81:ae:
                    23:1b:48:9f:14:72:6d:cb:6a:e7:88:f7:0e:fa:a8:
                    78:2f:fd:42:6c:24:6e:8e:3e:2f:c8:77:08:da:b5:
                    13:dc:97:9a:e4:2b:91:15:9f:8c:1b:ea:ee:6f:16:
                    03:ae:b3:f1:19:47:81:d8:f9:26:f7:5d:55:55:c5:
                    1b:8d:49:8e:0a:e9:6c:9a:6b:2b:dc:80:6c:e2:db:
                    4b:5c:33:42:04:94:c2:f1:87:ea:ef:b7:6c:dd:1b:
                    f5:ee:45:2a:2a:27:91:01:90:34:3f:fe:a9:e2:52:
                    1f:e8:00:95:b3:8f:5c:fc:2a:3c:1e:7b:b0:54:d1:
                    07:9c:3c:a5:c6:d3:64:8e:47:76:b9:c8:70:be:b8:
                    75:b2:77:eb:ea:6f:a3:6c:dd:1b:e3:e7:2f:0d:19:
                    80:05:bc:1a:23:61:21:6d:70:61:17:0d:5d:dd:37:
                    81:3e:af:5e:0a:52:76:14:05:3c:59:5d:d5:25:0f:
                    a3:a9:39:ef:e7:ba:3c:1a:15:fe:49:e4:97:6c:7f:
                    0a:59:4b:f3:bc:f8:dc:98:cf:3e:de:38:d2:e1:a4:
                    11:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:06:E6:D6:69:2E:E8:8E:BB:19:A5:16:7D:6F:5E:61:BC:99:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qasG5tZpLuiOuxmlFn1vXmG8mVo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:b9:82:cb:fc:72:d6:3c:aa:07:c5:0c:86:89:4e:25:0c:
         9f:f4:f3:aa:bc:42:82:50:59:68:a5:07:76:82:9b:44:81:09:
         01:5c:e6:d7:c9:dc:06:3e:12:a0:2a:f0:d1:28:23:9f:fd:21:
         5c:b3:ba:65:b8:43:f5:13:aa:88:f1:75:8e:b3:69:b1:61:8a:
         d5:cb:df:2e:5c:5a:5b:11:59:eb:fe:0c:b0:9d:19:bf:32:fe:
         d9:4a:41:ab:ce:19:69:83:8b:88:15:04:8d:f5:6c:59:a8:b3:
         7a:d8:e7:50:33:1c:a7:67:79:8f:4a:ee:a6:b1:b4:ae:25:cb:
         06:54:f2:9f:ee:8d:c2:86:b2:67:43:bc:59:51:0f:af:7c:4a:
         7f:51:06:75:23:38:8e:c6:0f:1c:dc:3d:cc:4b:3b:73:a8:05:
         63:7a:c5:91:0a:a4:d0:7c:29:d9:e2:c6:e8:7a:f5:23:ae:e2:
         5a:b9:f9:90:f9:ee:31:f7:cd:87:37:6c:8d:db:a8:63:52:19:
         ea:ef:b5:96:27:a0:21:70:88:d8:e2:e1:91:9f:b0:61:d8:50:
         f5:a6:c8:ee:1b:8a:14:fd:db:c5:6e:0d:ec:3d:99:11:7e:65:
         3c:4d:19:e8:bd:dc:a0:a7:8c:50:48:d3:bf:7e:57:17:2e:46:
         2a:d2:86:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE5QUIwNkU2RDY2OTJF
RTg4RUJCMTlBNTE2N0Q2RjVFNjFCQzk5NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKKxVmbNqWsNYRvkgDMYHwebzIiK1yZhwKrfUMcBZ3XI92LmXd
YnMYYZuBriMbSJ8Ucm3LaueI9w76qHgv/UJsJG6OPi/IdwjatRPcl5rkK5EVn4wb
6u5vFgOus/EZR4HY+Sb3XVVVxRuNSY4K6WyaayvcgGzi20tcM0IElMLxh+rvt2zd
G/XuRSoqJ5EBkDQ//qniUh/oAJWzj1z8Kjwee7BU0QecPKXG02SOR3a5yHC+uHWy
d+vqb6Ns3Rvj5y8NGYAFvBojYSFtcGEXDV3dN4E+r14KUnYUBTxZXdUlD6OpOe/n
ujwaFf5J5JdsfwpZS/O8+NyYzz7eONLhpBFrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqasG5tZpLuiOuxmlFn1vXmG8mVowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Fhc0c1dFpwTHVpT3V4bWxG
bjF2WG1HOG1Wby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AXAwDQYJKoZIhvcNAQELBQADggEBAE3huYLL/HLWPKoHxQyGiU4lDJ/086q8QoJQ
WWilB3aCm0SBCQFc5tfJ3AY+EqAq8NEoI5/9IVyzumW4Q/UTqojxdY6zabFhitXL
3y5cWlsRWev+DLCdGb8y/tlKQavOGWmDi4gVBI31bFmos3rY51AzHKdneY9K7qax
tK4lywZU8p/ujcKGsmdDvFlRD698Sn9RBnUjOI7GDxzcPcxLO3OoBWN6xZEKpNB8
Kdnixuh69SOu4lq5+ZD57jH3zYc3bI3bqGNSGervtZYnoCFwiNji4ZGfsGHYUPWm
yO4bihT928VuDew9mRF+ZTxNGei93KCnjFBI079+VxcuRirShss=
-----END CERTIFICATE-----