Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ni_jVSq6yA0ZUAoUQccvvABJqV4.roa
File:                     Ni_jVSq6yA0ZUAoUQccvvABJqV4.roa (raw, json)
Hash identifier:          QBam8vMjDi6XI8OijcVqxsyMmg5AXRLSNxy/1tK8e9A=
Subject key identifier:   36:2F:E3:55:2A:BA:C8:0D:19:50:0A:14:41:C7:2F:BC:00:49:A9:5E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ni_jVSq6yA0ZUAoUQccvvABJqV4.roa
Signing time:             Wed 29 Sep 2021 02:46:34 +0000
ROA not before:           Wed 29 Sep 2021 02:46:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7017 (0x1b69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:34 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=362FE3552ABAC80D19500A1441C72FBC0049A95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:b6:73:3c:ea:ac:d5:e3:2e:45:a5:38:82:
                    72:cb:02:da:7b:80:77:c5:c2:80:66:d3:30:a0:b0:
                    1f:2e:c8:33:78:3c:b6:c5:45:d6:09:73:f1:6d:3f:
                    f0:d8:2a:9c:22:e0:ee:0d:86:d9:0f:4b:6c:a0:91:
                    aa:0c:bb:ee:85:dd:cd:02:51:9b:f4:39:19:45:ae:
                    8c:85:e5:03:ec:38:70:e0:f3:eb:2b:9d:30:26:90:
                    21:9d:9b:e5:6b:8a:b2:df:94:b2:4e:49:a0:23:2d:
                    99:47:6c:67:e3:33:ed:c6:f4:4d:f9:bb:ad:ac:85:
                    5b:a1:6b:3d:9e:2d:41:4a:f5:6c:5f:b9:d3:18:61:
                    64:32:d0:8f:7d:69:d9:72:86:1b:60:d0:12:1e:82:
                    fc:6a:24:53:03:aa:49:09:1b:c0:02:ab:60:9f:a1:
                    ec:8e:d4:2a:ae:c0:1a:33:66:2f:09:0c:d9:a4:38:
                    52:0a:97:76:33:26:8c:41:c1:e6:b1:59:a7:17:d1:
                    98:88:45:ab:80:b2:9d:c5:6e:22:9b:ee:f4:18:57:
                    11:a3:58:6a:19:2c:e3:e6:0d:f4:43:57:aa:3e:9a:
                    c5:2d:e1:68:c8:02:70:c0:a4:a9:43:2d:b8:10:c4:
                    a4:94:00:95:80:72:ed:1a:0b:d0:ab:39:0a:3c:6a:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:E3:55:2A:BA:C8:0D:19:50:0A:14:41:C7:2F:BC:00:49:A9:5E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ni_jVSq6yA0ZUAoUQccvvABJqV4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:4b:9b:ce:a5:94:4e:d1:43:fd:f1:b5:e7:b4:57:2b:eb:
         fd:0b:0c:89:93:b7:39:43:c2:b0:f0:ce:e8:ec:e4:d5:1a:dc:
         1c:38:a2:e6:c5:46:d5:b4:42:40:de:74:0b:33:3e:b2:e5:9e:
         2b:09:bf:d7:3e:10:ff:f5:0d:e9:e1:57:e4:53:40:99:b0:9e:
         b4:cf:23:d0:e3:75:54:35:82:c8:fd:f4:9d:86:9f:26:a4:b9:
         df:6e:17:46:50:3e:ac:b0:c9:bb:d8:09:68:76:fc:47:ac:96:
         67:1d:fa:22:33:e3:ad:e0:70:7a:58:e2:bb:e3:6e:e6:94:8c:
         aa:21:9e:41:1d:b0:d2:33:d1:62:e1:4e:bd:7d:86:38:fc:e2:
         77:87:2a:2e:ac:9c:a6:1a:ea:c5:3b:f4:4f:d8:32:b5:7d:b2:
         c1:4f:1d:22:ba:e2:94:3a:89:56:db:42:ca:49:0b:b3:c8:5e:
         ef:0e:19:cd:15:b7:56:34:90:98:62:2e:f8:72:7f:ea:af:3d:
         9a:c3:a6:9f:f4:04:8f:bc:53:b9:88:1d:8f:2c:09:a7:5d:29:
         cd:3c:df:7b:6f:2a:28:6f:64:4f:f6:c0:e3:e8:5d:75:ab:16:
         44:74:5c:23:af:0a:1a:ed:e9:e2:63:bd:c4:3a:45:48:91:12:
         15:e0:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----