Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tS-_zxNre8v8hqcwvLXlKQ7wkoU.roa
File:                     tS-_zxNre8v8hqcwvLXlKQ7wkoU.roa (raw, json)
Hash identifier:          zdyTz6QBJVu4xdyGgb/u53wuifrnJlOSRfW7506G54s=
Subject key identifier:   B5:2F:BF:CF:13:6B:7B:CB:FC:86:A7:30:BC:B5:E5:29:0E:F0:92:85
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F7C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tS-_zxNre8v8hqcwvLXlKQ7wkoU.roa
Signing time:             Tue 29 Sep 2020 09:57:01 +0000
ROA not before:           Tue 29 Sep 2020 09:57:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3964 (0xf7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B52FBFCF136B7BCBFC86A730BCB5E5290EF09285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:a7:35:f7:a1:28:a2:61:27:9d:ae:2f:23:
                    e0:64:48:a4:e0:12:64:4f:0b:85:aa:51:6c:25:14:
                    b7:f4:fc:03:b5:f9:4b:79:cb:9d:37:9c:f5:b2:01:
                    0e:cb:33:5b:19:af:93:df:a8:00:c2:26:c6:29:a3:
                    98:bb:47:99:67:74:9b:e2:0a:dd:9f:a4:d0:52:cd:
                    14:62:62:c7:e6:9b:68:56:3a:33:5c:a6:e0:05:42:
                    80:a7:f2:e8:12:b8:a8:7f:d0:92:25:17:4a:23:ae:
                    25:68:21:51:25:83:19:74:37:97:95:0b:0b:bd:00:
                    f4:11:27:17:0f:f3:40:00:ae:8e:f9:ea:06:49:ac:
                    d7:16:c2:39:c8:c3:cf:e6:7b:5f:fe:f8:65:69:aa:
                    b0:59:5f:a0:6d:d9:94:76:89:a0:3b:05:9d:dd:3b:
                    31:fc:93:e2:03:02:52:cc:9f:2f:6b:ef:f1:8b:05:
                    48:be:e3:1f:3a:13:88:41:03:37:8c:d3:88:1c:36:
                    6c:d0:58:cf:35:7c:6c:86:d8:22:b3:32:67:99:d6:
                    33:05:d2:73:a5:be:ff:da:1e:c8:54:ba:bf:dd:ed:
                    8f:46:de:e2:3e:9b:28:83:fb:09:1e:b5:17:cb:e4:
                    05:6a:a1:a9:cf:ff:6d:38:1d:be:d2:e1:f8:49:9c:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2F:BF:CF:13:6B:7B:CB:FC:86:A7:30:BC:B5:E5:29:0E:F0:92:85
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tS-_zxNre8v8hqcwvLXlKQ7wkoU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:59:71:2e:cb:3c:68:b7:7a:45:9b:e8:e9:e4:6f:db:c5:fd:
         36:da:3b:25:47:85:4b:23:fd:c2:96:7a:5f:b4:79:27:32:ad:
         3e:ee:01:94:04:e6:34:e6:12:8f:ab:32:4f:4b:95:19:4c:d6:
         2f:98:f2:10:0f:e5:ce:6f:92:90:20:bd:85:11:83:b3:24:51:
         95:09:cd:e5:64:14:be:db:dd:96:00:eb:ee:b8:fd:8c:61:8b:
         a3:33:a7:6b:e8:f7:0f:2d:77:42:b5:7f:f6:25:7f:37:04:93:
         6e:44:f1:46:4c:4b:60:d3:8a:79:a9:b8:e5:c3:34:14:64:c8:
         73:36:81:11:ef:6f:8c:59:fd:be:fb:6d:30:2b:ac:fe:74:24:
         00:9b:cc:02:ae:d2:06:39:d7:3b:ef:04:76:36:6a:ef:b5:2e:
         95:7c:93:a0:cf:ad:95:88:78:c0:7b:3b:06:23:50:db:c2:35:
         06:f5:60:10:fc:9f:95:9d:4a:a1:b3:81:9a:fa:67:f0:72:34:
         3a:0f:c8:f8:d7:68:d4:bb:e2:c5:98:f2:f6:fd:02:c6:25:d1:
         bc:2a:30:8d:13:19:93:15:5c:5b:21:84:48:4c:b2:4c:17:ed:
         ff:56:1a:6c:bb:a9:2a:16:d1:c3:53:20:e9:55:9f:4c:76:71:
         9f:f1:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----