Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rqvMqGtXC036I3DSbiMaVIWo-9E.roa
File:                     rqvMqGtXC036I3DSbiMaVIWo-9E.roa (raw, json)
Hash identifier:          Z73luop4Y9K6PpPWc5TbTBzwhugAvLCSk8EY/5l7Izc=
Subject key identifier:   AE:AB:CC:A8:6B:57:0B:4D:FA:23:70:D2:6E:23:1A:54:85:A8:FB:D1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C9F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rqvMqGtXC036I3DSbiMaVIWo-9E.roa
Signing time:             Wed 29 Sep 2021 02:47:59 +0000
ROA not before:           Wed 29 Sep 2021 02:47:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7327 (0x1c9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AEABCCA86B570B4DFA2370D26E231A5485A8FBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:e7:67:39:a7:52:b6:33:d1:c9:33:d5:fd:
                    fe:a7:98:2a:99:f4:e3:57:02:da:06:40:dc:4b:da:
                    2b:a9:54:c8:82:6e:bc:f2:ee:85:a9:e0:2e:a9:02:
                    0e:5c:03:72:41:91:fb:5a:ec:15:f9:60:5d:51:8f:
                    7d:8e:12:5d:97:93:eb:22:14:23:62:29:22:1a:1e:
                    35:b0:09:2a:1d:26:01:00:9f:70:a0:1d:58:3b:49:
                    6a:51:59:c8:ad:e4:5c:74:43:8f:de:25:8a:52:5e:
                    1f:71:dd:4b:8c:7c:3c:64:ba:0d:40:b8:85:49:d2:
                    5c:54:47:62:09:06:46:20:fa:dd:3e:3d:a0:a5:5c:
                    a6:84:bb:99:bd:0d:29:6c:0e:71:27:67:06:2f:cd:
                    36:55:75:b7:95:e1:35:aa:2f:33:6e:bf:22:0f:fa:
                    c9:95:5a:81:b5:63:fc:03:2b:f4:ca:09:53:3c:22:
                    f1:c0:85:35:17:6b:97:db:95:74:87:fe:18:4a:97:
                    9f:c0:c3:c4:6f:bd:dd:b2:a4:c4:b8:b7:67:ec:89:
                    fb:86:09:3a:fa:78:02:aa:13:12:28:97:b2:26:a3:
                    78:8c:05:c9:5f:eb:87:a2:b7:f8:92:c4:e4:c3:c7:
                    13:67:de:05:e9:09:16:4a:fd:af:da:46:56:40:59:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:CC:A8:6B:57:0B:4D:FA:23:70:D2:6E:23:1A:54:85:A8:FB:D1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rqvMqGtXC036I3DSbiMaVIWo-9E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:b4:8e:8a:5c:8f:52:0f:cd:21:30:29:37:01:e5:60:71:
         08:9b:51:25:78:58:e5:03:af:4c:67:86:8a:72:de:45:57:be:
         77:c8:87:89:13:9f:60:34:e5:bf:be:99:6c:ca:7d:28:b3:1d:
         af:25:25:d0:01:84:f0:de:4b:ef:8f:30:4d:5f:d5:a3:9b:66:
         a3:7c:83:3e:e7:24:2f:94:78:33:aa:55:77:0d:45:3c:5b:28:
         33:86:80:ff:2a:5f:e9:95:8a:be:96:9a:23:8f:ab:dc:05:15:
         6c:cf:8c:00:3d:02:53:d7:a3:6e:5a:69:11:dd:55:76:8e:2e:
         ed:11:bc:fc:af:19:0a:40:ea:6b:db:4c:f2:5f:06:73:b8:5d:
         e1:0b:39:bb:83:30:ab:15:b9:47:08:84:06:23:57:4d:ed:a6:
         7c:a0:87:6d:99:2c:2b:ac:28:83:f5:9d:b4:c4:71:9d:ce:1e:
         23:b8:35:a2:07:dd:b8:a5:21:96:55:ec:6f:d5:97:03:4f:fa:
         39:b5:30:0b:d6:cd:0a:67:8d:be:ed:e4:11:5e:ac:47:2a:52:
         f7:99:54:5d:0f:4b:62:77:c1:38:82:28:e3:d1:c8:d7:cc:ad:
         2d:eb:68:fe:fa:38:3d:d4:f5:30:17:31:e1:2e:f3:50:5a:9c:
         ad:91:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----