Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LVhpNcbvprrISeoVsSpsnp8zDsQ.roa
File:                     LVhpNcbvprrISeoVsSpsnp8zDsQ.roa (raw, json)
Hash identifier:          lykkOa/36Uh32efP0wART9s17pjHA8R2EcDMR/KT54E=
Subject key identifier:   2D:58:69:35:C6:EF:A6:BA:C8:49:EA:15:B1:2A:6C:9E:9F:33:0E:C4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       158F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LVhpNcbvprrISeoVsSpsnp8zDsQ.roa
Signing time:             Sun 07 Feb 2021 12:05:17 +0000
ROA not before:           Sun 07 Feb 2021 12:05:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5519 (0x158f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:05:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2D586935C6EFA6BAC849EA15B12A6C9E9F330EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:d3:ac:ce:8b:08:f9:5f:5a:63:59:1e:e2:
                    6a:7c:9d:b4:61:2c:71:f0:67:37:8c:d7:21:b5:18:
                    2d:17:6b:25:d7:12:0e:2f:9b:94:93:64:d2:2d:a7:
                    c3:24:2b:81:ee:c2:46:53:fe:3f:45:4a:76:29:39:
                    3a:b4:c8:46:91:53:bf:e6:37:ba:ad:b1:40:26:f4:
                    e4:a2:f4:7c:25:e3:0f:4d:5b:13:6e:ac:4f:84:d2:
                    39:6f:47:37:e8:84:64:4f:20:74:20:36:c6:7f:11:
                    c9:d3:ac:1b:a7:f3:94:a0:c8:e9:16:42:b7:ec:00:
                    ac:a3:c4:ee:38:09:a2:ab:16:3f:5c:ce:45:75:e0:
                    39:3a:61:6e:cd:18:88:90:ca:80:1a:00:43:da:24:
                    80:57:3f:95:c3:43:ca:78:39:89:f6:5c:6e:c3:6a:
                    05:3d:10:09:56:d9:6a:87:19:a6:db:0c:d5:a2:56:
                    8a:e1:19:d9:9a:59:eb:77:00:1a:3e:19:5f:2b:85:
                    c4:b6:ff:cd:37:db:0a:df:ab:ae:91:86:ad:a6:a3:
                    cf:d6:85:26:68:e4:d3:ca:40:56:44:01:fe:e1:fd:
                    d9:5a:a5:69:5f:d6:6a:24:f4:f1:5a:64:18:08:e1:
                    eb:6f:5b:ae:6c:f2:07:42:5e:56:22:78:4e:b3:d8:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:58:69:35:C6:EF:A6:BA:C8:49:EA:15:B1:2A:6C:9E:9F:33:0E:C4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LVhpNcbvprrISeoVsSpsnp8zDsQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:69:0f:13:0a:ae:9b:19:70:b6:e5:15:8d:4d:d9:50:d0:11:
         07:77:bd:73:ff:ed:91:38:04:b1:76:4e:fe:0c:a3:d4:73:9e:
         c8:24:28:3d:8a:ea:55:21:d6:3e:f6:55:e1:42:05:2f:b4:ed:
         36:52:76:e4:fa:03:77:df:a5:79:4b:de:b4:45:af:25:1c:eb:
         1c:6d:56:d2:d6:11:89:58:78:85:7b:83:b7:3c:88:f1:fb:8c:
         a8:21:44:9f:d2:e5:34:31:89:8d:39:1d:36:f9:c5:22:b3:0a:
         0d:af:65:b3:05:14:ad:a7:5f:0e:01:64:ba:e8:40:c9:e7:c0:
         80:f9:d0:94:e2:7b:06:43:f3:4e:5a:62:51:c4:83:31:c5:bc:
         35:af:05:02:e4:b9:7b:da:46:f4:88:0c:a4:f0:ec:db:b9:62:
         c6:b0:c3:3c:f5:cc:c0:d5:ed:83:c6:95:13:bc:3a:43:35:38:
         a9:82:5c:15:6d:0a:20:bb:48:24:1f:5f:4d:fc:6a:f5:75:76:
         b6:04:19:f1:71:49:f7:bd:8b:00:60:e7:ef:a8:c7:59:a1:8d:
         c0:27:d6:94:b7:ff:81:7d:f3:08:3e:be:7c:a0:e3:cc:da:0e:
         22:6e:bb:c7:07:58:49:e9:ca:7c:86:e9:11:e0:26:67:48:ff:
         c7:86:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----