Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rEt41Vcq7X1k8Co9rr1gpJIVTtw.roa
File:                     rEt41Vcq7X1k8Co9rr1gpJIVTtw.roa (raw, json)
Hash identifier:          AqL73QMcHO+7fI1UhLgHUpTbIVZtVBIj+wT+3+s3KII=
Subject key identifier:   AC:4B:78:D5:57:2A:ED:7D:64:F0:2A:3D:AE:BD:60:A4:92:15:4E:DC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CAB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rEt41Vcq7X1k8Co9rr1gpJIVTtw.roa
Signing time:             Wed 29 Sep 2021 02:48:02 +0000
ROA not before:           Wed 29 Sep 2021 02:48:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.144.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7339 (0x1cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AC4B78D5572AED7D64F02A3DAEBD60A492154EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:a4:a7:b3:33:5d:45:7b:13:d9:98:96:72:
                    cb:61:9c:74:f0:c4:f9:1c:95:ab:a3:bd:cc:06:51:
                    c9:b1:b7:7a:b1:1b:b7:cf:35:98:ce:02:0c:60:96:
                    de:4a:8c:26:70:c9:77:fe:fa:69:47:55:fe:3d:36:
                    12:5e:a7:79:c0:af:52:56:af:5c:d4:e4:2f:b5:93:
                    85:7a:ab:c5:2b:a4:9f:f9:4e:7a:25:7c:e3:00:26:
                    9b:25:12:97:39:cd:e0:c3:bf:0e:6f:03:b3:57:8c:
                    b5:3c:ce:3d:6c:e3:69:5b:8f:9b:b3:7c:32:17:5e:
                    92:13:0e:c7:8b:c4:a7:3e:04:de:d8:38:8a:7f:81:
                    a7:77:3b:79:33:14:4e:d9:73:c0:eb:e9:cb:45:96:
                    f6:97:78:09:ec:bb:9c:19:f9:5a:de:62:b0:35:62:
                    60:d4:00:07:b5:8e:0c:d5:84:a0:06:83:89:07:ef:
                    41:82:54:3b:33:7d:45:1e:98:17:c4:86:7b:8a:20:
                    60:e0:c7:b8:78:b7:93:53:fe:1c:27:fa:aa:8b:2c:
                    dc:7a:5e:65:fb:c4:9a:05:ea:be:91:63:6c:70:46:
                    8c:f6:b9:7b:00:55:e5:d1:f8:a0:89:35:d5:09:df:
                    45:4f:5d:c9:47:0f:55:9a:69:97:22:9e:37:a7:42:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4B:78:D5:57:2A:ED:7D:64:F0:2A:3D:AE:BD:60:A4:92:15:4E:DC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rEt41Vcq7X1k8Co9rr1gpJIVTtw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:58:80:19:3f:e8:ac:5e:62:f9:d7:54:eb:75:1c:92:b3:
         44:bd:be:0a:7a:b8:0f:40:a8:b4:61:9a:03:ca:48:7b:40:d2:
         20:a6:2b:7d:c6:38:fb:d6:89:51:4a:9d:bd:0b:5a:c1:12:47:
         e8:a9:79:9a:30:ca:a8:aa:b6:a2:a9:0d:ad:d4:6b:7c:c2:1f:
         ae:b4:29:db:a2:8e:32:1b:db:2f:cc:f6:f4:32:e1:35:71:4e:
         7a:43:7f:e4:96:10:5a:7e:f8:07:8c:ef:ae:1f:dc:ff:1e:69:
         b9:1c:1e:3d:3a:03:a7:d4:8b:72:29:38:69:a2:78:1a:b6:ee:
         be:0b:06:a5:de:fd:df:9f:91:77:5e:8c:77:4a:63:c7:bd:9d:
         15:31:db:01:45:ee:c4:b0:0e:f9:59:fc:3c:d9:a7:ae:17:6e:
         38:ee:8a:69:b1:45:73:04:28:fd:30:3d:c8:da:96:1a:18:de:
         0c:f2:13:1e:ad:37:ae:29:bd:cb:30:e9:0a:23:7f:5a:6b:1e:
         c4:f1:f9:d2:36:11:6d:c6:7e:7c:5e:12:08:9f:2a:e8:01:4f:
         f7:d2:6b:77:fc:93:86:26:3f:fd:16:e8:46:75:c4:bc:c7:d1:
         f5:ed:be:dd:c3:5a:2e:58:87:5d:d8:86:0d:18:9f:11:38:1c:
         4f:91:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----