Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxDMew1tzkjh7mSU8fQVh4rI_GI.roa
File:                     rxDMew1tzkjh7mSU8fQVh4rI_GI.roa (raw, json)
Hash identifier:          MmdYG5bm9Q98IJ6BSCAKjwzg7/wjxzFtnbRrTfnN8D4=
Subject key identifier:   AF:10:CC:7B:0D:6D:CE:48:E1:EE:64:94:F1:F4:15:87:8A:C8:FC:62
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxDMew1tzkjh7mSU8fQVh4rI_GI.roa
Signing time:             Wed 29 Sep 2021 02:47:59 +0000
ROA not before:           Wed 29 Sep 2021 02:47:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7325 (0x1c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AF10CC7B0D6DCE48E1EE6494F1F415878AC8FC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:e7:6b:ea:18:a7:87:3e:d6:5a:69:ff:70:
                    05:07:77:e7:6f:97:e8:65:bd:c2:15:05:24:e4:df:
                    b9:7a:2a:55:4c:2e:32:68:c3:34:9e:f9:09:cf:8a:
                    59:42:d5:03:89:65:4f:2a:d4:f1:f0:36:f3:c2:16:
                    e9:4c:87:d9:cc:18:1a:87:27:6c:7f:26:a6:84:09:
                    0b:bf:87:aa:f0:5c:bd:9b:bf:90:b5:e5:19:0a:44:
                    f5:8c:1d:4a:00:10:ec:c3:d2:d2:09:5d:ba:ac:e2:
                    fa:04:14:bf:d1:e5:68:f3:67:32:ba:59:c2:7d:9c:
                    ca:99:5c:6d:05:ab:3d:4d:31:b5:4d:78:49:a3:e1:
                    6b:fd:d6:91:de:26:a9:75:8b:4a:6a:de:2f:c5:92:
                    85:a0:eb:ff:cb:b0:fa:6b:7b:00:09:fd:34:30:84:
                    de:55:98:df:c2:84:25:da:1b:f1:a8:d1:d1:a9:66:
                    8c:95:09:41:bb:ae:a0:05:8f:d9:4e:d7:47:af:0d:
                    fa:5c:d1:22:8e:0e:40:4f:9f:40:b2:93:d4:2a:69:
                    89:fd:5e:4e:d3:22:78:31:f9:60:e2:17:36:f7:d1:
                    be:49:5f:61:1d:95:bd:05:e6:fb:a4:6c:53:39:ab:
                    59:26:f2:22:99:a2:a8:4c:67:51:85:92:9e:d6:d8:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:10:CC:7B:0D:6D:CE:48:E1:EE:64:94:F1:F4:15:87:8A:C8:FC:62
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rxDMew1tzkjh7mSU8fQVh4rI_GI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:af:3c:ce:3c:e9:d5:0f:c9:1c:cc:b0:e6:db:42:40:3d:c8:
         f1:0c:7a:32:a4:4c:aa:72:c0:7c:bf:78:d8:56:86:7b:c1:9d:
         77:68:17:d1:6b:0b:20:04:dc:8f:a1:32:42:e2:6a:f6:dd:99:
         6b:29:01:35:2d:52:88:8d:ae:76:1c:ed:04:f8:c9:36:8c:34:
         9d:10:26:54:bb:30:01:ac:b7:b1:ac:b3:cd:34:65:d3:d6:cd:
         34:44:54:b9:90:87:d1:43:e2:d9:13:e7:71:a8:17:eb:b5:22:
         63:eb:1b:c1:91:67:b3:66:f0:2d:5c:26:67:74:b4:d5:20:62:
         b9:c0:db:f4:ce:0d:9b:e6:c0:94:5a:b1:4a:58:3f:4f:62:83:
         af:64:39:10:4f:41:03:72:04:2f:34:c1:a1:c0:49:be:e8:53:
         7b:0a:92:57:08:bc:b8:0d:8b:8c:68:6e:4b:d3:6c:08:f9:3e:
         7a:6a:04:b7:81:d1:76:7e:43:67:1b:e4:f0:02:4b:eb:bf:7c:
         c7:22:f4:92:bc:67:86:bc:9a:34:a0:4c:d6:27:b2:d4:5d:23:
         6c:68:5b:26:0a:58:da:10:5d:93:17:36:4b:fe:9b:09:40:82:
         ef:84:9a:40:cf:ed:9a:bd:4a:e7:5f:34:d2:1a:1a:0b:63:9d:
         28:99:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----