Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6Q-iiom0zJgbNlCcfWDGjAcnFR8.roa
File:                     6Q-iiom0zJgbNlCcfWDGjAcnFR8.roa (raw, json)
Hash identifier:          BDkFgbCpbnwSJ4QjBrv6vieUf9HMpgcbjARF06BPK8c=
Subject key identifier:   E9:0F:A2:8A:89:B4:CC:98:1B:36:50:9C:7D:60:C6:8C:07:27:15:1F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F00
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6Q-iiom0zJgbNlCcfWDGjAcnFR8.roa
Signing time:             Tue 29 Sep 2020 09:56:23 +0000
ROA not before:           Tue 29 Sep 2020 09:56:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3840 (0xf00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E90FA28A89B4CC981B36509C7D60C68C0727151F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:27:97:a2:1f:a1:f7:c8:a0:50:a4:e0:75:
                    19:06:d5:cd:21:9d:ba:7c:f2:61:49:bb:db:b1:f7:
                    ea:5d:fe:be:6e:00:e9:53:7a:a0:b9:43:d8:c5:54:
                    c9:3b:c7:fe:5f:8c:bb:01:89:d2:90:42:d3:af:62:
                    f5:ea:8a:0f:c9:c6:d5:ba:cf:2a:10:ea:2c:72:43:
                    9c:bb:80:6f:04:3d:2e:e2:4a:21:1b:c2:87:40:e3:
                    0b:41:9e:f8:9d:69:ff:a1:23:8f:61:4c:54:65:ec:
                    fc:fc:fc:2f:c3:88:5a:e5:8a:33:ea:a5:a3:62:55:
                    a9:29:35:72:a9:9f:54:20:d1:86:07:99:6d:d7:b9:
                    e9:ce:48:a9:6e:39:af:9f:8f:ac:08:1a:2a:28:e5:
                    50:0b:3d:9c:72:7d:f1:9d:b5:e0:bb:45:b5:53:40:
                    26:5e:91:42:80:6a:96:77:72:44:7f:64:25:22:1c:
                    ed:26:62:ed:51:4e:6a:1a:ec:f1:d1:57:97:85:b2:
                    93:ab:00:a9:66:82:82:6e:22:df:fc:7e:39:49:4b:
                    d4:43:06:d0:04:63:3b:7d:33:58:df:3f:0d:ed:3d:
                    d4:ef:3e:ff:d8:f4:98:ea:e4:5a:0a:a4:80:ac:9a:
                    0c:66:41:dc:37:65:0e:98:5d:a9:21:40:28:bc:cd:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:A2:8A:89:B4:CC:98:1B:36:50:9C:7D:60:C6:8C:07:27:15:1F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6Q-iiom0zJgbNlCcfWDGjAcnFR8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:54:3f:e3:97:c5:98:98:a2:6a:2a:59:01:3c:3a:c8:ca:
         65:77:bc:19:9d:36:3a:76:99:99:cc:90:9e:dd:44:f5:64:fd:
         93:f2:32:d0:b8:b1:d9:78:41:c9:cf:41:57:c0:d6:55:51:f3:
         4f:40:d4:0c:34:e2:8f:6b:fe:4e:0c:23:cd:71:ec:50:f6:5f:
         df:f5:0e:7a:97:5d:b9:2d:26:4e:fe:93:25:4f:b3:97:20:1c:
         98:88:31:ca:2a:3a:42:11:dd:f2:c6:f9:c0:36:5d:57:4a:03:
         b9:03:96:91:1f:d6:b0:32:a7:fd:40:01:a0:76:80:53:7e:49:
         aa:78:0f:a6:31:50:2d:7f:d7:03:b3:51:d0:17:56:4e:ef:a7:
         26:a1:db:11:99:3e:e6:75:9d:b7:b7:bc:6f:d7:9e:4e:24:82:
         5d:9b:68:03:e1:10:4f:ce:ee:bc:77:b1:c6:52:2e:b9:56:ce:
         63:33:a9:d1:92:40:a3:51:f0:63:48:29:a7:a0:62:4a:f9:de:
         0d:17:17:8d:ab:2e:6a:79:7d:27:d9:c3:39:4a:f1:3e:80:e0:
         d7:41:df:06:40:f9:00:d7:e7:2c:b1:88:fe:42:2f:2f:b0:1e:
         f6:56:3d:27:5c:e3:a7:f3:27:d0:16:02:ac:25:9e:9c:ec:f1:
         58:e6:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----