Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZK3pMCCyMGrosYs1fPL1IiO-hc.roa
File:                     vZK3pMCCyMGrosYs1fPL1IiO-hc.roa (raw, json)
Hash identifier:          Nuc5nv14cLNF3EOImjquZlqpOTnbD6nKuAXqcZF72gM=
Subject key identifier:   BD:92:B7:A4:C0:82:C8:C1:AB:A2:C6:2C:D5:F3:CB:D4:88:8E:FA:17
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CAF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZK3pMCCyMGrosYs1fPL1IiO-hc.roa
Signing time:             Wed 29 Sep 2021 02:48:03 +0000
ROA not before:           Wed 29 Sep 2021 02:48:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7343 (0x1caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BD92B7A4C082C8C1ABA2C62CD5F3CBD4888EFA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:48:ab:f3:8e:f8:da:1d:19:de:0e:91:94:
                    8f:3f:0e:85:a6:56:b2:8a:e3:21:3b:5e:9d:08:52:
                    ea:21:ed:aa:59:e1:77:01:9a:bd:d3:6f:e2:fa:45:
                    fc:89:e1:ba:7e:60:7d:61:6f:23:37:f8:68:62:d8:
                    37:a4:4d:72:19:8f:2e:8f:5c:e9:5c:23:5a:4b:11:
                    52:86:c6:bd:25:1c:9c:e3:bb:47:2c:24:f0:dc:7b:
                    ab:83:93:cf:21:fa:aa:e7:71:c5:b4:57:0b:9e:03:
                    16:fc:34:2e:af:bc:cb:2a:c6:d3:42:9d:9c:b6:35:
                    b8:8c:8f:62:eb:19:b7:2b:e1:a3:c4:31:90:51:d8:
                    2b:c3:b3:40:c7:dd:c7:95:d1:bc:60:29:3e:2f:41:
                    90:e8:18:9b:89:c0:e3:69:44:7b:46:16:f7:9e:63:
                    fa:e0:2e:e4:f2:b1:26:85:07:ce:1e:53:e8:8c:e2:
                    0e:61:40:6f:c0:1d:c1:f6:30:c5:05:8a:90:48:22:
                    4b:7a:bf:37:6f:32:65:94:31:12:ab:4d:6b:41:55:
                    85:29:a5:e7:e7:d5:fa:ec:a3:ea:2c:9e:40:22:54:
                    d2:43:86:da:33:56:54:13:d8:41:71:0a:4b:34:48:
                    c1:17:54:e1:58:ba:88:27:a8:39:3f:40:b0:f8:b9:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:B7:A4:C0:82:C8:C1:AB:A2:C6:2C:D5:F3:CB:D4:88:8E:FA:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZK3pMCCyMGrosYs1fPL1IiO-hc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:8d:e5:e9:d8:6f:08:73:25:61:2b:9e:06:e3:dc:49:ba:
         6c:f9:d2:f8:df:3f:91:eb:75:11:c5:b8:16:46:b5:c5:5a:85:
         b8:10:52:d8:00:ca:1b:04:45:4f:33:8f:37:4a:2d:67:7d:27:
         6d:6c:d6:5c:a0:18:9a:28:82:16:e7:4e:85:6f:6b:fd:70:13:
         75:1c:17:87:2b:1d:88:7b:70:1a:9a:fb:f7:3f:69:d9:85:9d:
         d6:38:49:3b:81:73:76:8b:ba:0f:9e:88:5d:5f:e7:0f:5f:a5:
         fb:8c:21:78:44:2d:2e:6d:c3:ac:fe:a5:d4:1f:0c:02:f4:36:
         0d:29:f5:3e:4f:97:a8:94:29:bc:2f:28:28:c3:04:c5:df:f1:
         bc:2d:78:11:1d:95:69:ec:c7:78:a5:d1:20:12:e9:22:2d:8b:
         6f:ab:c3:46:0e:bc:00:30:49:92:bc:c9:90:4c:1b:e3:a6:ee:
         ad:b6:10:59:b6:c0:2a:93:ab:96:68:de:51:be:a9:41:89:53:
         93:71:7a:6d:b2:f0:96:98:82:23:25:86:a8:5a:74:e0:1e:75:
         9f:68:4b:cb:5f:83:ed:67:28:ee:d2:a3:29:58:19:04:0d:07:
         c5:5c:2e:ed:70:bf:60:d3:a8:3c:01:4f:bf:68:3b:3f:0d:91:
         80:8c:dd:ee
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJEOTJCN0E0QzA4MkM4
QzFBQkEyQzYyQ0Q1RjNDQkQ0ODg4RUZBMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyekir84742h0Z3g6RlI8/DoWmVrKK4yE7Xp0IUuoh7apZ4XcB
mr3Tb+L6RfyJ4bp+YH1hbyM3+Ghi2DekTXIZjy6PXOlcI1pLEVKGxr0lHJzju0cs
JPDce6uDk88h+qrnccW0VwueAxb8NC6vvMsqxtNCnZy2NbiMj2LrGbcr4aPEMZBR
2CvDs0DH3ceV0bxgKT4vQZDoGJuJwONpRHtGFveeY/rgLuTysSaFB84eU+iM4g5h
QG/AHcH2MMUFipBIIkt6vzdvMmWUMRKrTWtBVYUppefn1frso+osnkAiVNJDhtoz
VlQT2EFxCks0SMEXVOFYuognqDk/QLD4ubKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvZK3pMCCyMGrosYs1fPL1IiO+hcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZaSzNwTUNDeU1Hcm9zWXMx
ZlBMMUlpTy1oYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AZgwDQYJKoZIhvcNAQELBQADggEBAI7qjeXp2G8IcyVhK54G49xJumz50vjfP5Hr
dRHFuBZGtcVahbgQUtgAyhsERU8zjzdKLWd9J21s1lygGJooghbnToVva/1wE3Uc
F4crHYh7cBqa+/c/admFndY4STuBc3aLug+eiF1f5w9fpfuMIXhELS5tw6z+pdQf
DAL0Ng0p9T5Pl6iUKbwvKCjDBMXf8bwteBEdlWnsx3il0SAS6SIti2+rw0YOvAAw
SZK8yZBMG+Om7q22EFm2wCqTq5Zo3lG+qUGJU5Nxem2y8JaYgiMlhqhadOAedZ9o
S8tfg+1nKO7SoylYGQQNB8VcLu1wv2DTqDwBT79oOz8NkYCM3e4=
-----END CERTIFICATE-----