Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v09mJPZ1sl9DPdq835yKna7ZCtg.roa
File:                     v09mJPZ1sl9DPdq835yKna7ZCtg.roa (raw, json)
Hash identifier:          X0KvOCKP+mxTQJiWAiR1f9VGhlwsuioSk6384o44lNA=
Subject key identifier:   BF:4F:66:24:F6:75:B2:5F:43:3D:DA:BC:DF:9C:8A:9D:AE:D9:0A:D8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17F9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v09mJPZ1sl9DPdq835yKna7ZCtg.roa
Signing time:             Sun 07 Feb 2021 12:25:10 +0000
ROA not before:           Sun 07 Feb 2021 12:25:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6137 (0x17f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:25:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BF4F6624F675B25F433DDABCDF9C8A9DAED90AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:f3:e7:d4:41:e4:b4:f9:99:2a:9a:a4:10:
                    25:29:31:4d:8f:5d:5e:ed:2a:88:d7:6f:16:2c:3d:
                    6a:bb:25:84:ff:5e:6d:a4:0f:93:85:00:3a:2d:0d:
                    52:d3:62:da:6c:61:38:96:08:3d:a5:6c:04:86:54:
                    46:78:cc:ef:9d:80:9b:67:ed:67:cd:98:93:af:57:
                    b9:5b:8e:4d:67:f6:23:73:65:6c:25:f7:1b:5b:aa:
                    f5:5e:a8:2c:62:26:c6:fe:fb:65:ae:7c:58:a9:36:
                    b9:0d:19:16:5c:0f:ab:32:3b:57:95:4a:aa:31:18:
                    61:f2:1d:77:b5:52:20:1f:db:a6:43:b6:c6:d0:26:
                    40:0c:6d:18:d6:bf:be:cf:e6:5b:28:38:a6:8e:95:
                    c4:1f:e8:12:6f:ef:c4:e1:ca:5a:da:3a:9f:c1:26:
                    14:ce:c3:c1:6b:d3:6f:f5:c6:4f:5a:dd:60:a0:24:
                    19:26:61:15:aa:bd:30:df:91:20:d2:9a:72:11:e5:
                    60:e3:11:18:63:59:1c:8d:23:33:68:46:67:94:2c:
                    f8:e0:79:fd:ce:78:12:ec:78:32:c7:cc:c6:e2:81:
                    f2:7b:fd:53:36:40:a0:6a:f3:cb:2c:66:da:bf:d6:
                    1f:1b:95:c0:1a:32:58:f0:8d:fb:9c:b2:a4:78:f0:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:66:24:F6:75:B2:5F:43:3D:DA:BC:DF:9C:8A:9D:AE:D9:0A:D8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v09mJPZ1sl9DPdq835yKna7ZCtg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:db:53:78:e3:d4:83:cf:68:20:22:d6:cf:f2:cb:83:32:
         c8:bc:67:75:68:ba:4c:8a:84:f5:17:c0:02:61:58:85:10:34:
         bf:96:65:0d:6e:87:d6:38:df:1c:61:42:0f:5a:b1:0c:d7:f2:
         c8:04:c0:e5:e3:68:1b:c3:b9:5f:ab:24:07:69:1f:47:a4:db:
         ee:3d:de:c6:ac:8c:eb:45:40:d4:a2:ff:13:64:f8:61:1e:f5:
         26:68:25:5d:ef:e6:a1:79:bc:7c:e5:87:32:4b:c4:0d:fb:86:
         44:9e:20:f4:e7:56:b2:fd:3f:e7:11:34:3a:d2:06:46:69:bc:
         13:62:41:0b:4e:f4:88:d7:9e:d2:e0:51:52:e0:ad:ac:bd:c0:
         90:ce:37:80:53:5a:ce:c5:20:c3:7a:f5:fd:e4:f9:35:60:59:
         4c:f4:4a:a3:a9:e1:4a:0b:50:aa:b3:78:e7:37:7c:d1:23:b4:
         b9:94:8c:68:ce:b3:63:ed:4f:d2:61:a4:f1:b0:ae:1f:66:d2:
         fc:09:0a:49:f4:6a:54:6a:9e:23:3a:b7:28:ac:47:72:d6:7d:
         bb:57:9a:e9:a2:7d:df:3a:d8:96:a0:f1:ff:ab:b1:ef:e9:01:
         48:fb:77:09:dc:68:af:7e:f9:09:b2:06:a2:6d:b9:c9:06:d4:
         85:5e:e8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----