Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uzUmn12E2Et8Nolu_2SvOrEIBwQ.roa
File:                     uzUmn12E2Et8Nolu_2SvOrEIBwQ.roa (raw, json)
Hash identifier:          znfZW/e8Xj0uek3phMqieHE2Y8kP/aul3kb9Vm3AXjA=
Subject key identifier:   BB:35:26:9F:5D:84:D8:4B:7C:36:89:6E:FF:64:AF:3A:B1:08:07:04
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D25
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uzUmn12E2Et8Nolu_2SvOrEIBwQ.roa
Signing time:             Tue 29 Sep 2020 09:54:15 +0000
ROA not before:           Tue 29 Sep 2020 09:54:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BB35269F5D84D84B7C36896EFF64AF3AB1080704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:7c:ef:1a:3f:ae:cc:a2:a5:87:69:c1:4a:
                    21:f1:d3:fe:b6:a6:10:d4:b5:5a:ed:73:14:f8:4c:
                    f3:15:f2:91:7d:0e:ef:72:8b:4a:31:78:9f:d2:68:
                    8a:ff:7f:ac:dc:e1:63:03:4d:2d:1f:65:6e:2d:56:
                    1f:97:8e:26:15:6b:b8:c6:98:2e:a5:2c:88:9f:ce:
                    f8:19:61:17:3d:f9:af:c4:3f:4a:83:fc:59:32:2c:
                    dd:df:cf:46:57:fd:1f:61:ac:d9:c7:91:49:c1:ce:
                    aa:45:7e:63:3d:92:c0:34:21:18:2b:1f:82:6e:49:
                    f1:32:1a:2c:31:0f:5b:bb:82:52:14:79:a6:87:1f:
                    67:d7:1e:1f:0e:32:51:5e:58:6f:d8:db:0b:e2:86:
                    79:a3:f4:37:d4:2c:b7:00:8c:62:16:72:f8:bc:80:
                    98:65:fc:5a:0c:09:3b:30:bf:d0:5d:ff:dd:8a:9c:
                    02:ed:4f:28:0d:a9:2f:1b:45:7f:14:34:db:ec:3f:
                    5f:f3:86:b2:f6:77:92:da:a4:4e:69:59:6c:0d:ba:
                    5b:f6:42:02:30:21:df:9f:78:f6:53:09:e9:c6:33:
                    ff:a0:0b:15:0c:cb:54:9e:a3:90:b1:26:92:6d:8b:
                    8d:5d:60:f5:d8:b7:0c:0d:d7:72:74:fa:7b:38:7f:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:26:9F:5D:84:D8:4B:7C:36:89:6E:FF:64:AF:3A:B1:08:07:04
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uzUmn12E2Et8Nolu_2SvOrEIBwQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:f8:4d:96:ba:9b:92:24:97:cb:60:16:dd:62:09:3a:0a:
         ec:a5:30:0f:f9:e8:05:35:f3:01:88:81:aa:79:e5:7c:7a:da:
         62:f6:c4:d2:c9:66:ea:28:49:fe:72:05:98:e0:ff:3b:92:13:
         71:07:4e:37:1e:bf:b3:9e:59:31:78:59:79:9e:eb:65:0d:f1:
         e6:91:0a:1c:f8:c7:b7:2d:cd:a8:53:ea:d6:d5:ee:ba:a6:b1:
         bb:05:89:64:15:29:2a:f1:0b:d8:4f:72:6c:4b:b2:77:d9:fa:
         79:82:a9:4a:1e:50:38:39:0c:2e:b8:2f:22:b3:7c:1b:ef:0f:
         14:90:9b:fd:2a:6b:32:91:ac:41:67:28:93:dc:51:bb:1c:e4:
         31:0d:03:0a:e7:8d:1b:bc:dc:13:ad:ac:18:b3:bd:e2:ed:a3:
         10:07:97:ec:58:60:dc:b9:15:99:30:a8:7f:94:c0:ff:5a:5d:
         b8:38:19:31:ee:0f:60:b3:e3:2a:9c:69:ed:9d:2a:37:d0:75:
         68:0d:b9:dd:f3:9b:e2:f1:02:f9:39:cd:64:dd:b4:7c:ea:7f:
         a6:0e:e2:81:ba:9c:cf:01:74:f7:31:8e:81:5b:2d:9f:01:1b:
         95:6d:fc:9f:2c:19:ba:ed:21:cc:58:14:36:04:80:77:35:3f:
         48:98:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----