Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4sA7ZRBczkJre8aDwC4w0Om2Xy8.roa
File:                     4sA7ZRBczkJre8aDwC4w0Om2Xy8.roa (raw, json)
Hash identifier:          s362nzPD6fKq8gIDMh/SAWld+gUbJwvD7mVa/WIkTGQ=
Subject key identifier:   E2:C0:3B:65:10:5C:CE:42:6B:7B:C6:83:C0:2E:30:D0:E9:B6:5F:2F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1547
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4sA7ZRBczkJre8aDwC4w0Om2Xy8.roa
Signing time:             Sun 07 Feb 2021 12:03:46 +0000
ROA not before:           Sun 07 Feb 2021 12:03:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.124.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5447 (0x1547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E2C03B65105CCE426B7BC683C02E30D0E9B65F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:a6:a7:dd:e0:34:61:e5:9a:9f:a5:88:2b:
                    1c:3e:f7:e3:2f:6e:e7:5e:67:a3:78:c5:30:89:fa:
                    c1:4a:bd:2d:0a:64:41:65:9a:73:6a:ab:be:84:57:
                    0d:09:56:fe:37:b8:d1:f7:34:5f:45:68:69:58:4a:
                    7a:ee:22:98:32:78:79:f9:27:60:4e:ce:a1:e2:2a:
                    1f:2c:ba:c8:99:a6:a2:79:91:32:68:76:a1:89:01:
                    73:94:51:82:bb:31:5f:a6:bf:64:cb:a2:2a:97:c7:
                    fb:eb:8d:04:a7:d0:03:1b:9d:96:f1:19:bc:c1:91:
                    57:fb:e5:72:94:ff:0f:b0:27:5c:99:7f:93:cd:05:
                    c0:b1:7b:b7:e5:0a:c0:e7:17:c5:ad:7f:08:a6:dd:
                    80:fd:d7:51:1d:db:d5:d1:d9:92:f4:7c:f0:9b:a2:
                    a6:d2:52:15:9e:e2:b0:45:95:66:27:69:d3:43:3b:
                    f7:b7:cf:54:0a:b1:c0:b3:ad:48:fe:4c:66:2f:37:
                    fc:0f:39:fb:7c:c5:8d:c8:69:34:b0:3d:93:26:7d:
                    64:0b:e9:56:46:50:bf:9e:58:38:d5:bc:c3:80:73:
                    e9:bf:3a:9f:4f:a8:97:e7:f4:b2:61:80:cd:ba:cd:
                    32:4c:a8:fc:40:2a:50:53:63:c7:95:ce:f5:f9:30:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:3B:65:10:5C:CE:42:6B:7B:C6:83:C0:2E:30:D0:E9:B6:5F:2F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4sA7ZRBczkJre8aDwC4w0Om2Xy8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:8b:68:46:62:31:f7:e6:e8:9a:7b:5b:77:d2:4f:f0:e3:
         5c:3a:1a:c7:1e:c1:a4:dc:4b:9e:d6:a6:1d:2e:74:6e:0b:fe:
         8e:03:4d:c7:f2:cd:e6:ae:e3:d6:67:51:b6:ce:c3:5a:f3:9c:
         49:fb:bd:8d:ff:2a:17:0f:dd:e7:39:1d:dd:a9:ea:28:8b:93:
         7a:08:39:a4:7c:ca:bb:1c:46:6b:69:55:c5:72:1a:bd:64:f2:
         bb:e0:25:42:dc:43:de:85:a2:83:f3:b5:15:7f:ee:8f:24:45:
         3c:bd:52:70:b6:df:55:b9:db:45:0f:ab:54:f5:6c:6d:0d:63:
         73:c2:96:45:c3:fb:fe:14:f5:2c:22:5e:38:72:87:c2:a9:53:
         3e:35:f8:4e:3b:49:31:c8:95:ef:d5:e5:a4:43:c8:04:e9:41:
         47:f2:a9:ab:1b:f7:8e:7c:dd:01:61:c9:45:3e:f2:e2:f0:a4:
         7e:91:f8:e3:e6:e3:60:b9:4f:5f:0a:5a:42:97:19:35:f2:00:
         9c:ed:e6:31:21:0a:12:f6:ab:46:14:90:64:6b:12:c8:1b:3d:
         25:48:13:19:10:98:4f:d4:cc:c8:37:e8:a9:77:b7:71:69:5f:
         29:ee:98:ca:33:33:8c:7c:d8:b1:86:3a:30:32:0d:56:01:2d:
         a1:ed:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----