Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nu-uiqiaXXgF3HZBzSxr9i1vMP8.roa
File:                     Nu-uiqiaXXgF3HZBzSxr9i1vMP8.roa (raw, json)
Hash identifier:          NPralfnQBGH3j73On0cpMUkHZABdnH2jI2oHT04cW0U=
Subject key identifier:   36:EF:AE:8A:A8:9A:5D:78:05:DC:76:41:CD:2C:6B:F6:2D:6F:30:FF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1739
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nu-uiqiaXXgF3HZBzSxr9i1vMP8.roa
Signing time:             Sun 07 Feb 2021 12:17:35 +0000
ROA not before:           Sun 07 Feb 2021 12:17:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5945 (0x1739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:17:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=36EFAE8AA89A5D7805DC7641CD2C6BF62D6F30FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:48:a0:9b:9f:39:9d:ce:7e:57:3a:31:93:
                    0a:95:3d:48:b8:b5:c4:10:7d:95:f7:fc:b2:c1:99:
                    37:90:95:45:0c:66:8b:da:d3:98:d3:00:1f:63:83:
                    b1:ac:19:dd:87:50:49:8d:25:f1:e8:71:13:96:11:
                    18:e5:75:c4:e8:55:8b:f9:fc:03:68:30:1f:7a:70:
                    3a:91:ff:2a:3e:56:fa:d5:66:57:bf:6b:87:f2:34:
                    f3:04:44:f8:5b:e6:8a:2b:0d:aa:2a:5a:c1:87:aa:
                    68:1b:1a:26:b2:35:5c:d5:29:6c:b0:c2:75:1d:d8:
                    c9:fc:a7:b4:6e:94:96:eb:f8:89:b0:a1:55:12:f6:
                    cf:3d:5b:52:ac:c7:bb:fd:e4:cf:68:ca:72:c0:53:
                    b2:d4:6d:d8:26:0e:36:f3:75:54:b2:7c:f6:d5:80:
                    13:15:30:a3:25:19:59:9f:45:57:5f:cb:ca:5f:35:
                    9a:ae:0b:56:95:1a:c9:40:ae:5c:66:2d:70:54:89:
                    ce:16:c0:c3:c0:33:d3:4b:49:4f:91:a7:4e:14:dd:
                    5f:dd:2f:a1:86:d1:ea:37:95:20:ec:91:f6:11:fe:
                    b7:5e:ef:ab:9a:8e:78:d3:c7:4f:ac:ea:06:eb:07:
                    a5:16:41:05:cd:92:c2:ff:28:5e:7a:11:86:aa:10:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EF:AE:8A:A8:9A:5D:78:05:DC:76:41:CD:2C:6B:F6:2D:6F:30:FF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nu-uiqiaXXgF3HZBzSxr9i1vMP8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:a6:7f:e3:75:82:c5:c0:5e:fc:ed:41:1c:8a:e5:3f:ab:
         89:f9:88:9c:dd:cc:b7:a0:a0:d0:c6:81:d5:82:90:ef:31:cd:
         d1:56:a0:b3:5a:f8:00:c7:00:97:45:1c:51:c0:91:70:a4:fe:
         a5:24:3f:f5:05:bb:b1:a0:01:84:1d:83:47:c1:31:f7:87:79:
         5a:01:60:74:ba:df:b3:fe:1c:a2:e0:dd:23:16:bb:a5:80:cf:
         a9:84:99:3e:bb:ae:d2:e4:61:43:32:0f:03:19:9a:23:83:a4:
         a2:c8:a0:5f:98:09:65:aa:47:d1:bd:d6:9b:5e:1f:c3:ac:11:
         7e:5b:25:86:a5:b3:b2:3c:27:0e:b8:a3:fe:db:0d:50:16:f3:
         75:b5:75:58:e5:4c:f5:79:65:83:a3:6d:18:65:07:3f:47:53:
         44:7a:90:c3:64:99:4e:b0:d9:64:b2:a3:23:fb:13:1b:8c:d1:
         a3:63:df:61:e3:63:50:52:c9:6c:6d:fd:a0:99:96:a0:a6:aa:
         6e:7e:7d:4e:e1:12:d9:9e:41:e7:d7:b6:f5:c0:4c:71:e6:61:
         43:38:96:81:be:2f:29:03:8b:91:1a:7e:3e:59:5e:5e:43:16:
         9b:91:9e:2d:18:0f:87:2a:77:b2:e1:43:23:8a:f4:ae:75:e4:
         cc:58:37:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE3MzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM2RUZBRThBQTg5QTVE
NzgwNURDNzY0MUNEMkM2QkY2MkQ2RjMwRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtuEigm585nc5+VzoxkwqVPUi4tcQQfZX3/LLBmTeQlUUMZova
05jTAB9jg7GsGd2HUEmNJfHocROWERjldcToVYv5/ANoMB96cDqR/yo+VvrVZle/
a4fyNPMERPhb5oorDaoqWsGHqmgbGiayNVzVKWywwnUd2Mn8p7RulJbr+ImwoVUS
9s89W1Ksx7v95M9oynLAU7LUbdgmDjbzdVSyfPbVgBMVMKMlGVmfRVdfy8pfNZqu
C1aVGslArlxmLXBUic4WwMPAM9NLSU+Rp04U3V/dL6GG0eo3lSDskfYR/rde76ua
jnjTx0+s6gbrB6UWQQXNksL/KF56EYaqEI/tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNu+uiqiaXXgF3HZBzSxr9i1vMP8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL051LXVpcWlhWFhnRjNIWkJ6
U3hyOWkxdk1QOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sTgwDQYJKoZIhvcNAQELBQADggEBADqOpn/jdYLFwF787UEciuU/q4n5iJzdzLeg
oNDGgdWCkO8xzdFWoLNa+ADHAJdFHFHAkXCk/qUkP/UFu7GgAYQdg0fBMfeHeVoB
YHS637P+HKLg3SMWu6WAz6mEmT67rtLkYUMyDwMZmiODpKLIoF+YCWWqR9G91pte
H8OsEX5bJYals7I8Jw64o/7bDVAW83W1dVjlTPV5ZYOjbRhlBz9HU0R6kMNkmU6w
2WSyoyP7ExuM0aNj32HjY1BSyWxt/aCZlqCmqm5+fU7hEtmeQefXtvXATHHmYUM4
loG+LykDi5Eafj5ZXl5DFpuRni0YD4cqd7LhQyOK9K515MxYN0o=
-----END CERTIFICATE-----