Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6anAZYg2gpfw1Lj9LI0ZRAsj_bs.roa
File:                     6anAZYg2gpfw1Lj9LI0ZRAsj_bs.roa (raw, json)
Hash identifier:          ev5jsVAy6dARgIbfKScjOCLeSHgHyUTYW5B3hs0iz2Q=
Subject key identifier:   E9:A9:C0:65:88:36:82:97:F0:D4:B8:FD:2C:8D:19:44:0B:23:FD:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DD8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6anAZYg2gpfw1Lj9LI0ZRAsj_bs.roa
Signing time:             Tue 29 Sep 2020 09:55:04 +0000
ROA not before:           Tue 29 Sep 2020 09:55:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3544 (0xdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E9A9C06588368297F0D4B8FD2C8D19440B23FDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:ad:f8:eb:c4:82:3b:70:fb:14:2e:12:92:
                    11:30:3e:86:cb:62:a4:f4:48:b3:a9:e1:e2:0a:db:
                    53:d7:29:73:25:58:b8:65:af:db:38:99:14:c1:78:
                    1c:3d:f7:83:ab:7e:7e:e4:96:34:5d:4f:71:05:dc:
                    08:23:c9:b0:4d:60:fa:45:74:eb:7e:97:8b:5f:0d:
                    6c:17:36:6c:99:a6:0c:e0:61:ca:a4:1f:f4:04:b7:
                    0e:67:3b:3b:55:9b:d1:3e:02:bf:35:6c:13:35:f0:
                    6c:81:a4:25:64:a9:df:43:85:0a:70:f8:e0:ce:80:
                    8f:94:53:c6:ef:71:13:66:20:38:bd:09:34:07:ba:
                    51:d0:f6:dc:7d:51:08:cb:4c:73:e9:56:20:c5:3f:
                    2b:ea:22:b7:8f:c8:49:4d:62:1f:9d:99:1b:16:df:
                    4a:2c:f7:d1:9f:9b:c2:4c:b6:be:9c:dd:7c:59:fd:
                    6d:21:7c:76:be:65:66:e6:94:ca:9f:59:10:3f:bb:
                    d4:70:43:e5:fe:a6:1a:24:ff:51:79:dc:87:ca:0b:
                    af:24:c4:17:74:e6:4f:ac:a7:8b:d3:be:b8:0c:77:
                    b1:2c:e8:e5:eb:c7:0f:51:36:32:ce:97:e8:ef:56:
                    10:7b:18:6b:fb:2c:f4:a4:35:37:2c:f6:11:09:dc:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:C0:65:88:36:82:97:F0:D4:B8:FD:2C:8D:19:44:0B:23:FD:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6anAZYg2gpfw1Lj9LI0ZRAsj_bs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:e1:bf:d2:c5:62:04:1f:7d:f9:a2:7c:75:91:98:e0:e8:80:
         83:34:06:89:2a:a1:9d:ec:a0:1c:e9:18:2c:8b:1f:80:13:47:
         99:5c:a3:9b:e9:88:37:64:f3:b3:5b:25:0a:1d:84:d4:07:17:
         8a:9e:cd:d1:79:34:68:d5:9e:b2:50:0e:ce:7d:f7:03:d7:05:
         d6:2d:f8:cb:16:89:f9:96:f6:b0:d9:d3:44:3c:ef:c6:d5:4e:
         43:ff:ae:85:ce:79:d1:49:4f:4b:7b:ce:5b:b0:ae:8f:1b:51:
         b9:c6:17:93:05:42:28:ae:1d:99:27:19:c0:90:fe:05:ff:cd:
         0a:64:4e:f9:a0:67:64:b2:7b:41:ac:e4:b5:c7:a6:cf:79:22:
         73:f0:59:d6:0c:d8:82:0f:cf:0b:0b:2b:54:d8:f3:6e:2a:bd:
         11:3d:5d:69:33:26:c3:6c:3c:07:09:ca:de:0c:c1:3c:b4:e7:
         1c:0b:75:04:4d:16:7c:fc:ce:69:cb:42:c7:4d:f8:65:b6:53:
         35:71:36:f7:2e:eb:2c:8f:60:9f:9e:14:1e:69:be:8b:a8:91:
         d6:d5:1e:55:95:bf:53:b2:94:cf:4a:77:49:74:b7:0f:2f:fb:
         dd:00:5f:6d:dc:a7:91:be:40:fd:6c:23:37:c3:a9:a5:57:e5:
         8f:57:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----