Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GPjOysaFtIJO2EuvCb9u-CaEFjk.roa
File:                     GPjOysaFtIJO2EuvCb9u-CaEFjk.roa (raw, json)
Hash identifier:          g1oVZsCs/zEbdVAnNEoMCqgFP0b7qNgdHznxcujFN7o=
Subject key identifier:   18:F8:CE:CA:C6:85:B4:82:4E:D8:4B:AF:09:BF:6E:F8:26:84:16:39
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DE8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GPjOysaFtIJO2EuvCb9u-CaEFjk.roa
Signing time:             Tue 29 Sep 2020 09:55:07 +0000
ROA not before:           Tue 29 Sep 2020 09:55:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=18F8CECAC685B4824ED84BAF09BF6EF826841639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:8d:1f:2b:16:ad:f6:46:f8:91:0d:8c:71:
                    91:28:10:19:d2:08:8a:f0:4a:e8:71:0f:79:73:17:
                    a9:59:48:26:a6:cd:f1:d7:d9:e7:18:d5:0d:36:c1:
                    f0:0f:db:21:10:a7:65:ac:fc:9c:41:5e:ce:0b:ae:
                    11:c7:21:0a:3d:92:be:d0:87:ec:25:5d:47:08:0e:
                    02:93:06:3e:94:f3:10:7e:f3:27:1f:2c:03:09:03:
                    44:7b:cd:b1:c2:07:d8:e8:7f:f4:91:34:2d:fe:4a:
                    49:6d:73:af:42:05:eb:5e:7f:1e:27:a4:74:dc:1c:
                    d6:01:a4:f5:04:f4:d6:6c:c5:bf:16:96:6d:61:67:
                    0c:93:b6:69:5d:c4:d7:59:2c:12:31:98:c2:74:c1:
                    42:9b:45:7e:33:f2:2b:1d:8b:82:3a:d3:8d:ec:35:
                    19:fa:25:d9:b4:7c:96:69:01:3b:cd:ca:b1:84:d3:
                    91:a6:f9:30:46:8b:20:44:31:a6:3b:68:bc:4b:c1:
                    0a:b9:7a:8a:aa:3a:dc:8a:eb:c0:c9:cd:8d:a2:9b:
                    98:ad:8d:86:31:d6:4f:2d:31:40:2e:3b:2d:05:e1:
                    b3:9d:21:9b:34:77:5d:8c:d6:41:df:ab:ce:fd:42:
                    b0:69:8a:16:a8:03:0e:31:96:84:f5:e3:cb:67:7d:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:CE:CA:C6:85:B4:82:4E:D8:4B:AF:09:BF:6E:F8:26:84:16:39
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GPjOysaFtIJO2EuvCb9u-CaEFjk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:99:ad:84:de:c8:93:e9:45:74:59:e1:f1:25:29:24:ef:16:
         a1:77:e4:25:7a:ad:fa:9f:d1:23:33:da:e1:bd:82:4e:b3:14:
         2f:b9:92:7d:56:5e:26:9f:8e:d5:db:84:56:22:79:05:a8:c3:
         fc:22:a6:39:79:72:0d:7a:29:96:f7:6e:42:f8:2a:2f:03:be:
         13:2c:e2:ac:77:89:0b:26:0c:81:c7:72:f0:aa:48:e7:c6:9b:
         69:77:f1:ef:02:9c:c4:0a:8a:1e:ff:6b:11:25:4b:73:c6:7a:
         2b:85:dc:d8:3b:93:a3:91:72:96:43:0b:88:b0:44:b5:6f:d5:
         36:1b:6e:58:7f:41:46:4d:10:c7:7b:d2:82:d9:f5:c5:bc:da:
         80:8e:97:46:7f:7b:94:42:dd:39:c3:2e:bf:a7:45:6a:40:c0:
         2c:9b:25:b5:ea:d3:88:20:bf:2a:85:16:37:f2:3b:bc:04:90:
         98:0a:eb:01:02:96:f3:e1:79:da:75:b3:90:9a:b9:21:0c:10:
         f4:49:25:08:61:23:5f:9e:bf:d2:56:ae:27:33:d7:b7:06:ef:
         f8:d1:0d:36:41:66:0e:51:69:1f:de:dd:66:74:24:a7:98:b1:
         9e:e6:27:50:3d:b5:81:0d:fc:0f:8c:1f:6c:01:83:05:63:e4:
         55:d6:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----