Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0bAcbmNM5CRtj-JDze8Y_jxIpSU.roa
File:                     0bAcbmNM5CRtj-JDze8Y_jxIpSU.roa (raw, json)
Hash identifier:          qjjYdsxktkwm3SodmOJEAnBoWMU4wmYKH3wMBkbsGIM=
Subject key identifier:   D1:B0:1C:6E:63:4C:E4:24:6D:8F:E2:43:CD:EF:18:FE:3C:48:A5:25
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E54
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0bAcbmNM5CRtj-JDze8Y_jxIpSU.roa
Signing time:             Tue 29 Sep 2020 09:55:36 +0000
ROA not before:           Tue 29 Sep 2020 09:55:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.177.46.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3668 (0xe54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D1B01C6E634CE4246D8FE243CDEF18FE3C48A525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:a0:77:36:cd:8c:27:bb:c8:0f:01:af:ff:
                    4f:da:07:58:cd:b8:7a:04:ab:38:1a:32:a1:f9:18:
                    5f:ca:33:71:20:ac:3a:fe:70:72:0c:cd:87:c4:f4:
                    f8:64:2c:5c:9e:65:be:e9:ee:51:db:7b:50:3e:b6:
                    e3:65:65:18:df:3d:ac:46:1b:5a:0f:8c:ca:f3:81:
                    66:15:fb:ff:6c:68:fa:fc:2d:5e:be:32:a8:bd:ba:
                    e3:10:a7:5a:b3:0a:0b:08:ce:b9:ae:de:75:fb:ad:
                    8a:53:5f:11:de:8a:99:d8:e3:5e:fe:42:ec:b5:13:
                    eb:ff:03:f3:e1:13:f5:eb:da:1c:88:ad:3b:1e:58:
                    1c:9a:49:a1:98:9c:78:ba:9b:8c:f0:03:1d:7a:34:
                    4e:5b:71:d6:16:d5:ae:ac:a7:4a:78:a8:63:6a:7e:
                    ca:20:14:f8:f0:c7:bc:2e:b7:2c:63:b0:4d:a4:ac:
                    1a:8f:9c:16:ac:cc:25:9d:80:23:f8:a1:d0:9d:01:
                    62:99:0d:f2:fe:da:3a:4b:cc:55:a3:07:e7:6d:65:
                    50:d2:27:26:18:0b:66:9d:59:1c:59:d4:e5:8d:16:
                    97:9c:f7:9d:22:17:cc:f5:ad:74:e8:95:80:63:18:
                    30:95:3e:f1:2d:f1:ca:78:d1:01:8d:fc:6b:66:36:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B0:1C:6E:63:4C:E4:24:6D:8F:E2:43:CD:EF:18:FE:3C:48:A5:25
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0bAcbmNM5CRtj-JDze8Y_jxIpSU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f1:5b:b5:92:1a:34:94:b8:e2:e6:43:24:7c:63:1a:96:9a:
         ac:8e:24:24:aa:76:17:4e:85:f6:94:ef:ad:a5:c3:16:df:6a:
         20:b5:cd:28:47:39:d6:c7:de:75:96:9c:c5:9f:c7:7b:c7:ef:
         6e:49:c0:d2:e3:c7:2b:a6:e9:98:f2:8b:98:3e:dc:1f:3f:0f:
         22:5c:0e:a3:c9:fc:9e:60:e7:5e:b0:d7:42:91:da:cb:3c:a1:
         d7:1a:c0:02:87:67:e1:36:5d:65:52:b3:2a:1e:18:16:c6:09:
         14:a6:01:c8:ca:c9:c3:75:50:06:53:95:9e:37:16:d1:ec:95:
         62:06:a5:c3:d2:79:31:92:2f:ec:a0:3f:0c:18:08:0b:20:8e:
         e8:b9:ee:d3:20:30:41:4d:72:df:a5:cb:41:1f:ba:53:bd:69:
         07:ed:69:e2:6a:39:92:a8:36:54:b6:b0:3a:e0:67:85:c7:ac:
         5f:46:9a:5a:d4:f5:71:b3:d1:e2:fb:bf:f4:96:98:29:7d:46:
         06:2e:08:ef:f6:18:70:18:0c:1c:27:41:0f:a6:ef:0e:52:85:
         66:ec:66:f8:d4:c2:97:87:3f:d1:09:87:f1:b6:65:23:a4:ce:
         f9:e1:96:5d:a8:be:8c:dc:d9:7f:17:ab:03:e2:a4:90:81:65:
         44:1c:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----