Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Q035rFXPeMw-b0UNfVIUsJLr7A.roa
File:                     0Q035rFXPeMw-b0UNfVIUsJLr7A.roa (raw, json)
Hash identifier:          HRNkcgZC8VU/t/MjsWyh7TU6VveGktPmKvp8bAdb770=
Subject key identifier:   D1:0D:37:E6:B1:57:3D:E3:30:F9:BD:14:35:F5:48:52:C2:4B:AF:B0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CDD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Q035rFXPeMw-b0UNfVIUsJLr7A.roa
Signing time:             Tue 29 Sep 2020 09:53:54 +0000
ROA not before:           Tue 29 Sep 2020 09:53:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3293 (0xcdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D10D37E6B1573DE330F9BD1435F54852C24BAFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c7:a4:16:34:6f:68:16:36:7c:ae:34:79:f9:
                    1f:50:aa:94:57:13:75:ad:d2:5a:02:0f:ba:bd:00:
                    1b:fe:92:db:38:2c:80:75:a1:47:3a:74:29:a1:12:
                    19:56:56:27:84:7b:ec:40:a6:31:8b:95:67:b9:1d:
                    68:09:9d:43:6c:eb:98:54:f1:95:0c:b4:66:de:77:
                    55:51:74:b9:5d:13:66:71:89:fc:b8:c1:fe:6a:12:
                    43:10:cb:5e:c0:65:56:c0:3b:eb:19:b1:db:97:ec:
                    2f:93:b0:a6:16:5b:b4:82:84:6e:c0:18:36:d3:51:
                    4a:6a:24:74:9c:de:25:ec:8c:c3:77:c4:6d:3c:b1:
                    e9:bb:50:84:00:bc:26:76:f9:77:3a:0d:7a:b8:17:
                    ec:f4:9d:82:86:88:e5:f6:b1:40:15:f8:e5:13:41:
                    0d:e4:06:c4:0d:8e:ba:4e:be:f3:69:13:56:79:b7:
                    ab:b4:24:dd:2c:1f:8b:f5:14:a3:0f:6b:3b:05:77:
                    7f:ad:33:9c:18:2d:22:9f:e7:3f:e0:53:9c:4b:2c:
                    1e:15:04:0c:f9:1b:d2:61:5c:90:e1:ee:98:40:13:
                    f8:79:b6:21:0e:9c:ae:5f:c3:9d:9c:6e:31:20:2c:
                    74:df:05:5c:7f:1d:df:36:d7:50:b7:c5:e6:85:57:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0D:37:E6:B1:57:3D:E3:30:F9:BD:14:35:F5:48:52:C2:4B:AF:B0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Q035rFXPeMw-b0UNfVIUsJLr7A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:1f:d3:d3:13:75:c5:c3:35:da:79:5a:dd:4f:0d:8d:76:91:
         d6:46:05:d6:ca:ad:cb:a4:3d:cc:6e:b7:cf:21:12:f3:44:7b:
         72:f1:2d:df:bb:a0:92:75:34:6a:fc:e7:85:91:83:4d:1f:e5:
         90:c7:f1:1a:db:76:5a:ae:68:d7:82:31:0c:b7:16:a3:f1:34:
         c6:d5:8c:21:86:2a:77:fe:ef:37:74:8d:7e:d7:39:43:b6:8c:
         d4:d2:e2:ef:bb:86:a0:89:95:26:25:6a:5d:7f:74:0a:32:72:
         fe:33:c7:29:49:bd:1a:4a:58:b2:49:e1:0d:21:70:0c:e5:4d:
         3d:f2:f9:29:1d:af:ea:5e:6a:61:a0:45:ff:df:dc:3c:b4:26:
         ab:3c:01:85:f4:77:99:a0:b3:ba:24:c8:87:7d:26:9e:ee:95:
         89:73:eb:58:ad:8a:14:d4:64:10:f7:4a:fe:ef:f3:81:e6:5a:
         42:f1:d0:f2:a1:0d:a4:98:0b:75:e1:61:ed:1b:66:ae:f3:14:
         04:a0:88:04:e5:56:8a:e4:00:f7:b7:57:ad:61:76:ed:41:92:
         3f:6b:1d:c8:b7:40:5c:8d:95:78:00:12:4e:d1:6c:0c:93:39:
         98:79:3d:25:42:bb:e4:4b:9e:92:3a:9b:77:49:4a:92:16:46:
         e9:db:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----