Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3p20o0CeeKK6bVitQcBaSighYuc.roa
File:                     3p20o0CeeKK6bVitQcBaSighYuc.roa (raw, json)
Hash identifier:          knm0wL5ug9nYWghXZoHM5lICY5PTEzCYZipUkSAqR9I=
Subject key identifier:   DE:9D:B4:A3:40:9E:78:A2:BA:6D:58:AD:41:C0:5A:4A:28:21:62:E7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B4E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3p20o0CeeKK6bVitQcBaSighYuc.roa
Signing time:             Wed 29 Sep 2021 02:46:26 +0000
ROA not before:           Wed 29 Sep 2021 02:46:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6990 (0x1b4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DE9DB4A3409E78A2BA6D58AD41C05A4A282162E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:50:79:fa:c7:5e:45:f0:c6:e8:a1:8b:00:
                    45:1d:ca:1e:e9:c3:35:dc:75:11:4e:4f:bc:d8:a3:
                    fa:dd:2f:18:f3:38:2a:73:dc:43:c7:3b:ac:2e:28:
                    5a:90:9b:f5:37:c7:73:de:f1:2c:ca:95:c8:58:86:
                    0b:49:4a:55:84:86:27:0d:02:f7:a4:8d:b7:37:86:
                    8c:01:53:dc:83:34:f0:39:17:1c:88:f4:e5:8b:7f:
                    b2:cb:cc:a1:28:60:b2:e6:98:fd:a9:92:2f:99:74:
                    15:fc:7d:d1:fe:0d:50:a1:56:16:0c:4e:2b:c0:ec:
                    48:e1:98:e0:fb:3e:7f:c1:8a:da:50:78:0d:a7:3e:
                    d7:b5:85:08:93:de:74:12:66:ab:25:06:68:24:7b:
                    c0:49:c9:25:46:19:ab:bd:9b:0f:86:57:fb:e4:7f:
                    5b:7f:d4:6f:8a:c6:45:06:36:da:7a:46:c6:e3:1f:
                    bd:2e:80:38:5a:29:94:74:e5:8b:a7:49:93:37:d9:
                    d9:2f:9c:04:58:e0:a5:e6:c0:bf:1c:a5:01:f9:b2:
                    4b:d9:a3:fd:86:b3:00:5a:4a:94:61:3d:9a:0a:e7:
                    5f:5b:8f:fc:da:10:b8:e7:55:56:52:bc:1f:cc:41:
                    36:6e:81:64:04:d6:ea:a2:18:6c:5f:3b:3a:f7:19:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:B4:A3:40:9E:78:A2:BA:6D:58:AD:41:C0:5A:4A:28:21:62:E7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3p20o0CeeKK6bVitQcBaSighYuc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:74:d6:78:48:80:22:93:40:53:64:05:31:45:6c:b6:90:
         ff:48:79:7f:6e:fa:69:a1:ce:5d:75:b4:39:1a:df:20:e1:39:
         c1:eb:11:3c:5b:1d:45:29:1e:05:11:76:b1:f9:17:61:74:14:
         88:32:ab:0d:47:c9:94:58:7a:dc:00:87:fe:1a:bd:b4:bc:9f:
         fe:54:4f:78:63:8b:c5:c8:e3:5b:ff:21:78:5a:aa:16:e8:03:
         ad:d4:5d:a8:f7:b5:b7:3d:70:ca:6b:3e:07:85:d9:26:41:11:
         ae:c8:8b:a3:cb:81:e4:68:8e:0d:50:9f:82:64:4d:34:c4:87:
         3e:c2:0e:2e:c0:e3:42:cc:12:d7:16:a5:58:c7:15:77:73:ce:
         e5:d6:04:33:0c:e7:d1:7c:02:1f:eb:cd:48:e5:a1:db:80:a5:
         70:fa:89:a0:6d:2d:10:ec:aa:17:dc:1d:e0:b5:be:4c:fb:49:
         b5:f2:d0:a8:b4:34:b7:4a:61:18:bc:c3:8b:47:ea:6e:c9:ec:
         fa:c2:32:ad:b4:61:3d:0e:23:c0:f5:e8:03:80:54:34:1c:fe:
         99:4e:86:b3:42:b6:d8:80:83:22:10:36:d7:7f:c4:c4:f3:1c:
         5e:42:2b:82:2c:13:a7:d6:62:b5:9b:c7:ea:01:cd:fb:7e:16:
         d7:c8:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----