Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fod8AWHLhjeh_6MgN3ukb-VvpeA.roa
File:                     Fod8AWHLhjeh_6MgN3ukb-VvpeA.roa (raw, json)
Hash identifier:          Y6/NvwFJiwjc6LOMx+pSNz+621BZ00TsINon3xOCoYY=
Subject key identifier:   16:87:7C:01:61:CB:86:37:A1:FF:A3:20:37:7B:A4:6F:E5:6F:A5:E0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fod8AWHLhjeh_6MgN3ukb-VvpeA.roa
Signing time:             Wed 29 Sep 2021 02:46:36 +0000
ROA not before:           Wed 29 Sep 2021 02:46:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7022 (0x1b6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=16877C0161CB8637A1FFA320377BA46FE56FA5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:85:7b:44:ea:ad:fb:b3:38:ee:0b:e6:74:
                    81:bc:d6:7b:55:da:6d:a8:db:d9:7e:e8:fa:7e:b0:
                    de:67:a0:d1:9f:bf:bd:e5:52:c4:dc:aa:a2:52:59:
                    07:01:4a:bb:d0:d0:cd:48:c6:d8:b5:fb:34:58:98:
                    ce:7f:82:49:0b:b6:a7:0d:fb:f3:66:88:e8:7e:45:
                    1d:b5:97:f0:b8:3d:c9:1e:a1:e0:63:99:0e:2d:b7:
                    bf:75:8d:89:dc:42:00:e4:19:63:09:39:64:10:c0:
                    0b:a8:29:3d:e8:bb:5e:43:d0:ee:6b:f7:87:0e:7d:
                    5f:8a:14:90:ec:dd:99:15:08:fa:6a:c2:f8:ef:b7:
                    3a:70:e5:ba:5a:7a:50:d4:0d:8d:c6:89:cd:f7:db:
                    46:20:dd:34:44:74:9c:4a:e0:01:ab:a2:cd:d0:ba:
                    b9:b6:7e:13:c4:9c:8a:46:5a:b3:78:f3:12:82:d6:
                    4f:a8:a9:c7:23:e7:69:19:41:47:18:b9:23:ae:ad:
                    58:09:2b:df:e6:6b:fd:9b:d0:83:6f:bc:ff:3a:24:
                    28:38:e5:b8:73:09:4b:f2:88:00:d3:6a:a0:f5:2f:
                    a7:ce:a0:93:92:2b:97:b7:4f:26:b0:97:ba:2e:48:
                    81:cb:3d:20:d5:77:fa:7e:7f:6c:53:35:da:6f:58:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:7C:01:61:CB:86:37:A1:FF:A3:20:37:7B:A4:6F:E5:6F:A5:E0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fod8AWHLhjeh_6MgN3ukb-VvpeA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:5f:aa:d5:b5:32:2d:a8:d8:18:b4:c7:78:8b:f5:a5:c6:90:
         6c:f3:2c:6b:18:e0:8f:65:67:fd:a3:09:69:9d:37:50:76:e8:
         ec:20:29:a0:5e:79:2d:f6:ab:91:2c:3f:7c:b0:8d:b3:43:6a:
         a9:58:a1:26:b4:31:0d:91:82:ca:75:04:b5:e9:1d:18:35:a8:
         91:8b:56:05:2d:32:ea:3a:9b:3f:dc:eb:64:e1:6c:e7:09:0e:
         d1:c0:51:b3:8b:69:88:6f:ab:b6:ac:35:20:98:6a:1b:8a:88:
         04:57:19:8c:03:3b:7a:ed:e1:5e:0f:b5:b9:ae:f9:4f:c5:64:
         db:e9:3c:e8:de:e7:ad:e4:5b:f5:5e:d1:fe:e3:1e:cd:30:6e:
         9f:4a:d7:f0:d2:32:db:7b:7e:ce:06:c2:f5:5f:e7:20:1a:e1:
         64:8e:88:f3:a6:07:ac:f6:70:f7:b0:f2:0b:73:2e:29:09:76:
         13:fb:09:e6:d3:0d:c0:3c:53:4b:fe:a0:db:8d:3d:b5:8c:79:
         ae:9e:61:d1:67:e0:a8:d8:f2:9f:78:54:4b:42:a8:ba:73:9f:
         45:41:f0:09:2b:2c:c3:9f:ad:82:88:10:17:78:81:77:b5:68:
         ed:18:e9:96:c8:9c:63:7f:e1:84:34:76:68:41:59:35:0b:04:
         a2:c4:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----