Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7V6udrI7Wd5C8fIzErUwBk4gPaE.roa
File:                     7V6udrI7Wd5C8fIzErUwBk4gPaE.roa (raw, json)
Hash identifier:          lbSdbsmHTC8G3htVYW2ROuBphfoYO1eC441aBrp1WXQ=
Subject key identifier:   ED:5E:AE:76:B2:3B:59:DE:42:F1:F2:33:12:B5:30:06:4E:20:3D:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CDF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7V6udrI7Wd5C8fIzErUwBk4gPaE.roa
Signing time:             Tue 29 Sep 2020 09:53:54 +0000
ROA not before:           Tue 29 Sep 2020 09:53:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ED5EAE76B23B59DE42F1F23312B530064E203DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:27:3c:01:02:bb:30:17:85:a0:4f:c8:6f:
                    1b:23:26:6e:ec:ce:93:07:77:1f:59:1c:4a:50:4b:
                    02:96:f0:68:90:08:1c:a0:83:f3:36:08:72:d0:c3:
                    37:a9:6d:53:16:a6:17:c1:6b:0f:52:b2:d4:ec:04:
                    66:eb:cc:c0:be:c8:1b:7c:29:dd:7c:39:de:8c:32:
                    9b:81:42:b7:33:9a:ee:56:96:dd:11:32:7f:25:22:
                    41:d1:bb:c6:7c:05:51:40:de:2f:b4:b7:c7:05:a8:
                    16:62:5a:f4:6e:a1:64:60:97:4c:a1:ab:a1:5c:ed:
                    a5:32:56:f7:24:6f:ab:6e:64:46:1e:3e:8d:b9:df:
                    ad:55:c1:17:d7:85:02:1d:e7:10:73:38:2e:aa:ef:
                    fd:d3:74:7d:99:b0:ee:ad:b3:40:e1:89:13:ad:56:
                    a8:18:3a:cb:13:13:0e:64:f2:2c:20:21:7d:3d:35:
                    92:5c:7f:3d:fe:7a:a2:90:31:d5:f0:07:62:f1:41:
                    0b:f6:b0:5e:89:51:b4:51:a6:58:5d:4d:a8:98:37:
                    c9:12:2b:27:9d:2c:3c:91:9d:b8:0f:14:c0:5a:62:
                    44:ec:d2:be:be:25:2d:09:80:37:ee:f5:56:3e:73:
                    52:e6:f4:5d:36:47:71:9b:66:0a:37:5e:fe:12:9f:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:AE:76:B2:3B:59:DE:42:F1:F2:33:12:B5:30:06:4E:20:3D:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7V6udrI7Wd5C8fIzErUwBk4gPaE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:36:9e:7c:c3:d4:d1:c9:d0:0f:03:b6:91:81:9f:b0:e5:
         55:45:c5:fe:c4:92:12:c8:7a:1c:8e:be:04:13:c1:fc:a8:f7:
         10:2d:85:e5:14:d2:e9:ee:c4:6a:3f:c4:dd:e1:d7:f0:8f:d5:
         7b:7c:73:36:66:dd:a2:40:b0:ba:58:08:7f:7f:e0:c9:fa:c2:
         f5:10:7d:05:68:f5:13:24:bd:00:83:4a:7a:d8:cf:71:01:ea:
         78:ac:d3:95:dd:e6:98:a3:60:c6:d8:31:04:10:92:d1:20:a7:
         96:d2:73:1c:66:e1:f5:f5:e1:80:7f:88:dc:cc:6d:1a:1d:88:
         bb:2c:ca:13:88:9f:14:19:ef:6b:1b:4e:3e:9f:48:50:0a:cb:
         2a:5f:a6:7b:a4:ed:c1:93:72:b5:46:ae:ad:cf:2e:11:7a:41:
         f4:87:2d:1c:46:c6:10:fb:82:00:f1:7b:52:49:ed:dd:44:eb:
         18:2c:2e:d8:a7:eb:2f:18:eb:e0:05:fc:63:a6:51:b3:e6:d0:
         eb:39:0b:61:31:45:6b:59:25:ed:dc:1b:0a:d0:22:9e:d6:6d:
         b0:3a:27:5c:1c:94:f4:5b:3e:dc:84:71:5c:b6:aa:f2:ab:5d:
         d5:54:a1:df:90:d2:f5:6d:d8:b6:ee:01:6c:12:05:bc:30:cb:
         e2:02:e8:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTUzNTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVENUVBRTc2QjIzQjU5
REU0MkYxRjIzMzEyQjUzMDA2NEUyMDNEQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIvSc8AQK7MBeFoE/IbxsjJm7szpMHdx9ZHEpQSwKW8GiQCByg
g/M2CHLQwzepbVMWphfBaw9SstTsBGbrzMC+yBt8Kd18Od6MMpuBQrczmu5Wlt0R
Mn8lIkHRu8Z8BVFA3i+0t8cFqBZiWvRuoWRgl0yhq6Fc7aUyVvckb6tuZEYePo25
361VwRfXhQId5xBzOC6q7/3TdH2ZsO6ts0DhiROtVqgYOssTEw5k8iwgIX09NZJc
fz3+eqKQMdXwB2LxQQv2sF6JUbRRplhdTaiYN8kSKyedLDyRnbgPFMBaYkTs0r6+
JS0JgDfu9VY+c1Lm9F02R3GbZgo3Xv4Sn/NpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7V6udrI7Wd5C8fIzErUwBk4gPaEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdWNnVkckk3V2Q1QzhmSXpF
clV3Qms0Z1BhRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sGAwDQYJKoZIhvcNAQELBQADggEBADTMNp58w9TRydAPA7aRgZ+w5VVFxf7EkhLI
ehyOvgQTwfyo9xAtheUU0unuxGo/xN3h1/CP1Xt8czZm3aJAsLpYCH9/4Mn6wvUQ
fQVo9RMkvQCDSnrYz3EB6nis05Xd5pijYMbYMQQQktEgp5bScxxm4fX14YB/iNzM
bRodiLssyhOInxQZ72sbTj6fSFAKyypfpnuk7cGTcrVGrq3PLhF6QfSHLRxGxhD7
ggDxe1JJ7d1E6xgsLtin6y8Y6+AF/GOmUbPm0Os5C2ExRWtZJe3cGwrQIp7WbbA6
J1wclPRbPtyEcVy2qvKrXdVUod+Q0vVt2LbuAWwSBbwwy+IC6IA=
-----END CERTIFICATE-----