Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5qcZmf4h4H4UEvZdDOExr3ssBtM.roa
File:                     5qcZmf4h4H4UEvZdDOExr3ssBtM.roa (raw, json)
Hash identifier:          K+m/NQqdaniQXK5Q9ZS7w0xkcTC1owgRhI3HJn8fMzg=
Subject key identifier:   E6:A7:19:99:FE:21:E0:7E:14:12:F6:5D:0C:E1:31:AF:7B:2C:06:D3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AEC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5qcZmf4h4H4UEvZdDOExr3ssBtM.roa
Signing time:             Wed 29 Sep 2021 02:45:55 +0000
ROA not before:           Wed 29 Sep 2021 02:45:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6892 (0x1aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E6A71999FE21E07E1412F65D0CE131AF7B2C06D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:8f:f3:b8:39:27:e9:1f:b6:58:16:2a:64:
                    5f:60:74:f9:67:04:aa:25:81:47:8a:e6:a0:ff:ba:
                    c7:3a:f9:5d:56:ea:65:e1:9d:49:3d:ed:fb:96:b4:
                    ba:96:c0:28:6a:16:d7:fb:fe:03:14:17:9e:37:92:
                    19:7a:1e:6b:bb:03:18:b9:a0:76:98:14:5b:96:dd:
                    82:53:69:95:ff:88:3a:d7:0a:85:aa:56:65:28:4f:
                    6f:73:cd:37:a0:84:cc:59:4c:d9:2d:eb:44:cb:34:
                    33:41:71:59:27:10:93:7b:5c:82:9e:f9:57:00:fb:
                    bc:ee:66:6e:5a:62:05:bd:3c:e0:74:b0:b3:c5:c2:
                    7d:67:5a:6a:c1:5f:6f:bc:94:2e:c4:57:79:34:ea:
                    2d:dc:7b:9f:95:e5:64:19:3e:83:00:84:d5:de:85:
                    83:04:89:04:69:e7:d6:27:4d:a9:b1:58:2d:67:0a:
                    22:8c:ca:04:c5:5e:01:22:49:7e:4f:0b:d6:22:d8:
                    b8:84:f2:ea:9f:06:61:b9:61:ab:a5:3d:67:5c:87:
                    06:ab:d1:d5:3b:83:83:88:e8:3a:aa:f0:00:4f:d0:
                    52:38:d5:cb:2e:4b:56:5e:84:92:05:a6:0d:a8:83:
                    a1:2d:69:50:cb:eb:fb:93:6c:8c:6a:a1:3e:cf:65:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:19:99:FE:21:E0:7E:14:12:F6:5D:0C:E1:31:AF:7B:2C:06:D3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5qcZmf4h4H4UEvZdDOExr3ssBtM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:97:bd:d6:c3:39:94:34:32:fe:f3:ea:0e:1f:16:76:72:43:
         74:ae:e1:f9:c1:7d:4e:aa:64:26:e7:35:0c:cf:1b:de:24:f8:
         27:b7:a6:c6:ab:df:3e:82:83:22:dc:65:cc:8d:e1:d2:14:0d:
         1c:9d:09:c2:8e:32:5a:a6:09:30:5a:e9:5c:d2:4f:d0:ec:3a:
         27:20:cc:f1:ca:79:81:06:66:ea:f5:f8:ae:76:0d:bb:65:1e:
         5d:ec:e2:22:5c:a9:11:75:10:3e:64:f8:1c:67:51:0c:0a:c8:
         9f:02:d5:30:22:1f:dd:20:5a:69:c0:21:39:10:3a:01:97:91:
         08:48:5f:6d:b7:bd:d2:53:ad:28:8c:5d:ce:8c:27:8b:e7:cb:
         6e:45:75:91:22:6f:e2:a8:da:e5:aa:74:e4:7c:80:d0:be:9b:
         43:01:e9:bf:28:f9:1b:fc:94:4c:b4:5f:77:74:eb:ba:e2:43:
         92:ae:e5:32:c1:42:05:93:4e:ce:7e:d9:b2:dc:f4:5e:10:af:
         27:6a:c3:39:02:de:f1:dc:9d:82:3e:30:6d:7a:d8:eb:6a:41:
         a3:ac:98:35:fe:ea:76:99:6c:28:b4:2e:b1:fc:df:86:59:1b:
         1b:6e:e7:22:c1:43:f1:2f:92:3f:dd:3c:d2:88:95:81:bd:2f:
         bd:68:b2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----