Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s5Y-kj4yhWU_rS5Wp5bqCMopAss.roa
File:                     s5Y-kj4yhWU_rS5Wp5bqCMopAss.roa (raw, json)
Hash identifier:          ZIwZtx8Bshk+suzg0tNnU8fbIW0VvV7xDcXOVRlRfrs=
Subject key identifier:   B3:96:3E:92:3E:32:85:65:3F:AD:2E:56:A7:96:EA:08:CA:29:02:CB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DE6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s5Y-kj4yhWU_rS5Wp5bqCMopAss.roa
Signing time:             Tue 29 Sep 2020 09:55:06 +0000
ROA not before:           Tue 29 Sep 2020 09:55:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B3963E923E3285653FAD2E56A796EA08CA2902CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:c2:23:8f:90:4c:c4:75:bd:25:64:8e:44:
                    72:86:7a:2c:84:ee:81:5c:7c:1b:06:e2:da:86:4e:
                    ca:39:e3:f3:f6:c4:15:6f:5e:88:3c:60:1e:4e:8c:
                    5b:88:a1:b9:06:7f:5c:08:de:c9:af:60:ea:d6:4e:
                    5a:12:c6:c9:10:3c:0b:61:a4:2e:f9:af:88:5f:9c:
                    d5:2a:10:47:fd:b5:8c:13:ad:58:30:73:85:76:0f:
                    7b:fa:e3:76:e4:81:a2:51:50:80:7f:9c:ae:b4:ef:
                    f0:54:6d:ee:52:46:d5:94:89:cb:90:39:0f:cc:6c:
                    a5:3a:1a:10:77:51:ba:e6:66:84:a4:a3:84:bd:46:
                    e9:fa:4e:09:c7:d8:42:1a:f6:e0:05:76:75:32:9a:
                    b3:93:ee:16:6a:f4:a6:1d:36:b1:b4:f4:0b:bd:50:
                    a8:a7:f1:01:bd:71:15:1e:ea:9a:0d:a1:3e:4e:83:
                    85:f7:f8:ac:e5:5d:86:f0:ba:4a:39:be:4d:d9:a5:
                    47:62:45:ff:19:e1:88:98:fd:8b:b8:69:20:b0:6c:
                    60:a7:48:17:8d:08:86:be:a1:a4:86:90:e0:a7:60:
                    35:e9:c1:98:5c:af:d6:12:f6:03:77:a7:2b:7b:c4:
                    16:51:84:75:ac:d6:36:32:94:47:7b:fb:b1:e1:38:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:3E:92:3E:32:85:65:3F:AD:2E:56:A7:96:EA:08:CA:29:02:CB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s5Y-kj4yhWU_rS5Wp5bqCMopAss.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ab:2b:32:41:2c:b4:b3:06:39:ea:ca:a0:25:33:ad:3f:e5:
         d2:da:8e:47:c3:cd:21:ab:f8:79:d2:a5:15:e9:f5:02:e4:69:
         59:a7:63:f7:be:b5:f3:16:4d:81:ce:2c:dd:5d:f0:3c:28:dc:
         61:37:6a:58:b8:f8:34:61:24:2a:be:8f:0a:d9:e9:22:8f:b8:
         6a:00:9e:8e:40:d0:5f:79:4d:ac:36:52:f3:71:a4:4b:b0:40:
         bb:05:8d:05:29:8b:3c:1d:16:13:ff:b6:09:22:09:cf:e1:03:
         9d:89:d5:95:12:fb:c3:bb:6c:82:84:d6:29:00:50:55:48:cd:
         4d:11:e8:3e:11:1a:23:e6:cb:86:fb:fc:68:15:88:27:dc:97:
         03:62:43:e9:d4:45:18:6b:19:96:4e:6a:f8:b9:29:66:25:10:
         d6:5d:a1:9f:7d:16:42:1d:e6:6e:3a:7b:11:22:1a:11:7b:db:
         2c:05:fc:f8:0c:0a:3a:29:b9:ef:c1:35:1e:39:9b:75:da:89:
         60:27:de:a0:24:0f:35:20:81:c2:28:ba:81:17:cc:10:77:40:
         69:28:86:e9:2e:48:ad:66:27:2a:2a:62:fb:22:88:1b:84:44:
         9e:dc:e1:e3:17:23:bd:ba:4f:2c:2a:6e:12:56:1b:32:d8:5a:
         85:14:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----