Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snsUGj3bl7rtwlRtDXb_rK3oQwY.roa
File:                     snsUGj3bl7rtwlRtDXb_rK3oQwY.roa (raw, json)
Hash identifier:          buI080bohe7MnAIizq5D4pL0YmV7dcSAeebrJsu/FF4=
Subject key identifier:   B2:7B:14:1A:3D:DB:97:BA:ED:C2:54:6D:0D:76:FF:AC:AD:E8:43:06
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snsUGj3bl7rtwlRtDXb_rK3oQwY.roa
Signing time:             Tue 29 Sep 2020 09:54:11 +0000
ROA not before:           Tue 29 Sep 2020 09:54:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3353 (0xd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B27B141A3DDB97BAEDC2546D0D76FFACADE84306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:84:79:ad:a4:f9:1e:03:fe:2d:82:50:f3:
                    ae:25:e2:8b:d4:50:ec:13:4d:b3:64:f8:c7:1d:34:
                    82:a4:17:fc:55:37:4b:05:cc:68:d5:ef:16:8c:0e:
                    f6:d0:01:97:73:fa:de:c9:bc:87:c9:22:ae:86:06:
                    d4:03:33:60:0c:54:af:56:87:77:07:75:64:b6:eb:
                    f7:7c:91:9b:76:4d:99:3b:2a:a2:3f:f8:de:9b:3e:
                    2e:55:ed:37:26:fe:0a:99:18:65:ec:f1:84:fe:7f:
                    e8:b4:ac:fe:25:1a:63:b4:94:9d:ea:b4:fe:f1:21:
                    9a:1b:b6:15:39:1b:74:cb:d6:19:30:c5:7f:1f:7c:
                    52:da:97:cd:29:75:de:ef:b6:77:c7:81:c2:91:a4:
                    42:31:1a:86:76:70:9b:63:38:b2:a8:ec:f1:6d:3e:
                    fa:11:9b:fc:c4:71:b7:d5:71:95:7c:26:a4:76:3b:
                    31:48:39:cd:c6:05:5a:19:d7:80:5d:19:a1:24:8f:
                    73:3f:60:e6:dc:2b:5a:7f:9f:70:32:7b:54:54:fc:
                    37:b0:13:ab:c9:0b:99:5b:ec:e9:97:c8:81:99:9c:
                    fa:21:b5:ab:89:a8:24:83:9f:c6:c0:ac:7f:1f:2a:
                    ef:22:3e:38:7c:ca:0e:04:fe:7c:80:0f:65:ab:4d:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:14:1A:3D:DB:97:BA:ED:C2:54:6D:0D:76:FF:AC:AD:E8:43:06
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snsUGj3bl7rtwlRtDXb_rK3oQwY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:62:f4:c3:7d:1d:da:d9:72:39:b3:24:c5:06:06:cf:0d:61:
         30:31:bc:e1:8d:ce:38:43:26:ab:6a:6e:01:3f:59:1d:40:6c:
         89:17:35:23:52:4f:fd:a4:cd:50:5b:5b:e9:e3:a8:1f:ea:ba:
         de:3f:3d:53:f9:2a:74:7f:29:88:64:7c:9a:6a:a5:a8:68:22:
         34:81:09:b4:38:de:15:06:9c:39:be:ea:73:ab:2b:4c:38:c1:
         1b:20:c3:c7:cb:4f:26:d8:3f:c8:6a:19:5c:32:52:e8:b5:70:
         31:75:19:5a:d9:71:53:af:50:5b:44:e7:87:3b:ea:e7:89:cc:
         8a:18:5e:d3:1c:fd:b9:e9:d0:fb:86:80:74:21:0a:54:44:e7:
         d6:a4:15:8e:37:e2:14:44:46:90:38:b6:b7:0d:a5:14:16:e0:
         59:c7:45:f3:e0:a1:15:f6:23:6f:02:e4:f4:d7:74:81:c4:4a:
         39:e6:17:53:5b:5f:0f:ba:48:e5:ee:cf:e8:3b:f1:b0:65:37:
         f4:4f:d9:5e:ba:a7:2c:29:1a:5f:0b:f4:89:63:13:15:1f:67:
         4b:73:cc:d4:8b:26:6a:99:4c:66:f3:8f:dd:90:f9:f6:f0:ec:
         ce:ae:8f:cd:af:94:c9:d4:cc:03:d8:75:4f:94:cf:07:0e:b9:
         59:5f:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----