Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K09VRXfI9H4LBDld-TQ8_49lI0g.roa
File:                     K09VRXfI9H4LBDld-TQ8_49lI0g.roa (raw, json)
Hash identifier:          rxN8MO7KcH8fLXIiDsC4KTNMtxQtR1nGasez2poMk7w=
Subject key identifier:   2B:4F:55:45:77:C8:F4:7E:0B:04:39:5D:F9:34:3C:FF:8F:65:23:48
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E4C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K09VRXfI9H4LBDld-TQ8_49lI0g.roa
Signing time:             Tue 29 Sep 2020 09:55:34 +0000
ROA not before:           Tue 29 Sep 2020 09:55:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2B4F554577C8F47E0B04395DF9343CFF8F652348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:bf:38:42:ee:aa:42:b2:55:90:8f:6b:48:
                    96:25:f2:04:c2:a3:83:c5:02:f7:93:5b:bd:c3:f9:
                    46:81:93:ee:ea:6b:2e:7f:e7:b3:24:b3:b3:3c:f7:
                    87:ff:81:92:6c:8c:b9:ce:58:0c:5f:ea:2d:1d:aa:
                    a1:c9:76:d4:0d:a2:95:db:ad:6b:0d:5a:73:e7:5a:
                    bb:31:1a:d0:85:f5:08:43:20:74:d7:71:8a:6a:d5:
                    70:87:45:ba:53:e6:d9:19:6d:37:bd:94:07:99:49:
                    bc:ab:1e:27:4c:2d:d5:11:6c:3b:31:d5:40:06:c7:
                    37:f0:18:9e:df:2b:6a:17:7b:20:f2:76:3d:76:bc:
                    11:f4:bf:8d:7c:d6:5d:ea:67:89:dd:77:56:73:b9:
                    a7:95:38:79:dd:a5:c1:0c:a0:36:37:e5:4d:01:3a:
                    e5:d8:52:e2:f5:88:12:ff:c5:8b:73:d0:2d:dd:b0:
                    ef:79:2e:93:59:f5:c0:f6:f8:1b:54:83:e4:30:15:
                    55:44:1c:3b:b7:ef:8d:52:2f:f7:b1:3c:67:b0:53:
                    97:3f:c6:21:16:b6:95:52:a4:b9:4d:a6:8f:0e:98:
                    c6:04:ba:7e:2a:ec:d0:72:c5:e0:e1:ea:32:55:8a:
                    b6:29:77:42:34:2f:99:7e:04:e6:54:be:2f:fb:12:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:55:45:77:C8:F4:7E:0B:04:39:5D:F9:34:3C:FF:8F:65:23:48
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K09VRXfI9H4LBDld-TQ8_49lI0g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:42:06:a6:2f:14:57:3c:bb:56:7a:08:b0:a9:fe:e5:c4:
         24:31:51:23:07:a5:e2:50:29:54:85:39:42:f8:f4:b1:9c:5c:
         a6:31:d9:cf:08:d0:7d:05:92:26:97:19:9e:7f:eb:8f:6e:53:
         01:9c:e2:bb:8e:56:5b:74:c4:9e:94:ea:cf:a8:54:23:5b:50:
         4c:a7:b1:f5:d6:14:21:8e:8d:33:a8:af:79:ed:06:4b:2c:21:
         1e:f0:6f:44:ad:e5:57:56:0a:f9:d5:54:e7:0e:dd:4e:17:09:
         59:0f:97:ee:de:be:89:08:53:e4:72:1f:d0:b7:1f:0c:d6:65:
         47:58:08:dc:23:71:63:61:9c:50:62:0e:d8:7b:b4:e1:1d:8d:
         a6:d9:73:c7:35:7f:f8:a2:1f:72:67:b9:0c:b6:6b:e7:a9:04:
         1f:ca:88:f4:2e:81:8c:ea:ce:6b:83:6c:45:f3:4c:46:c3:80:
         b6:f2:a5:c0:33:fe:4f:e7:f6:4b:21:98:51:a7:36:07:59:ed:
         34:66:91:4e:fc:1a:50:58:31:c3:b1:d5:10:48:27:5e:7a:dd:
         46:32:07:b0:02:06:7e:12:9e:e2:03:d9:f2:21:81:88:5d:86:
         27:d6:bd:f9:45:82:60:45:fb:42:50:09:11:58:6a:11:fb:82:
         72:c7:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----