Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P7BARsNErbu2V4OIUU0P3TQ6N2Y.roa
File:                     P7BARsNErbu2V4OIUU0P3TQ6N2Y.roa (raw, json)
Hash identifier:          DZycbN+B30ZCXbAuFVQnHqPJqdRtj0vrh9+q4Kj9I9s=
Subject key identifier:   3F:B0:40:46:C3:44:AD:BB:B6:57:83:88:51:4D:0F:DD:34:3A:37:66
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C6B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P7BARsNErbu2V4OIUU0P3TQ6N2Y.roa
Signing time:             Wed 29 Sep 2021 02:47:44 +0000
ROA not before:           Wed 29 Sep 2021 02:47:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7275 (0x1c6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3FB04046C344ADBBB6578388514D0FDD343A3766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:5c:e0:cd:bb:2f:1b:f6:7e:82:8a:02:cb:
                    13:13:d4:d7:19:5b:10:96:81:3d:bc:ba:a2:d9:1c:
                    b8:9b:ac:65:8d:cf:28:72:49:d7:15:a3:16:22:fa:
                    58:15:12:f9:64:b6:cf:a0:af:bc:a7:da:d2:dc:0e:
                    c0:d0:e7:8c:51:ad:2e:5f:35:cf:83:4d:c2:38:29:
                    bb:cc:9f:5f:00:c5:6a:73:8b:dc:a4:83:4d:ba:09:
                    bf:a5:04:58:0f:e3:bc:bb:26:52:31:3f:a2:5a:8b:
                    8d:76:c3:02:64:6b:ea:de:f3:61:46:21:0a:3d:1d:
                    3b:86:d1:f1:0c:fd:56:04:c3:f9:3a:5f:a2:6a:e2:
                    01:2c:93:79:8a:92:eb:28:24:50:72:84:e5:65:4e:
                    b1:13:a5:b6:7e:b5:6b:9a:13:e4:78:77:dc:30:4b:
                    e6:8c:3c:ed:ca:1f:20:8f:53:dd:5e:3f:e4:6a:2f:
                    16:32:09:c2:f8:6f:ed:b6:19:b0:35:62:36:6e:2e:
                    68:66:07:b5:7a:36:60:6b:a0:73:96:a4:98:dd:e0:
                    f4:a9:a4:21:fa:7a:d1:8f:89:a2:5a:d0:1c:1b:45:
                    ab:84:0b:b3:18:0b:bc:18:99:3b:1b:1f:9d:7e:f0:
                    f7:9e:5a:55:f4:cf:b1:60:24:3d:a6:42:de:08:b0:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B0:40:46:C3:44:AD:BB:B6:57:83:88:51:4D:0F:DD:34:3A:37:66
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P7BARsNErbu2V4OIUU0P3TQ6N2Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:b3:24:68:a7:ca:f1:e0:a8:22:19:27:c2:57:78:65:e9:
         fa:f1:b5:f6:43:d0:ab:48:07:3d:5f:29:45:aa:a3:f0:ea:ba:
         49:70:3e:26:2f:f6:47:a1:2d:c1:8e:24:8e:88:49:f3:80:8f:
         6b:65:18:bf:b5:77:41:44:e6:23:1f:3e:e4:02:79:d2:35:c0:
         60:e2:fa:73:16:d5:80:26:c1:60:54:6f:99:14:7f:17:56:17:
         87:07:30:23:19:55:be:5c:91:51:22:7b:c8:fb:8a:2d:fb:36:
         fc:95:26:3d:fe:bd:26:82:69:d8:67:5c:5d:69:cc:db:a6:86:
         79:7b:11:fb:95:61:f4:08:ae:18:db:ed:ad:95:59:c6:b0:92:
         81:26:34:fa:9f:9a:88:12:74:38:fa:dd:e7:13:61:3a:d1:81:
         c3:e8:5c:de:91:c3:c4:80:ca:38:d4:97:72:30:7a:1e:06:e9:
         4d:e5:f4:c1:d4:9c:37:84:b7:4f:78:8b:13:b5:e5:82:60:de:
         1d:ed:6d:fb:88:a7:82:9b:74:3c:2c:2d:c5:09:eb:05:1f:c8:
         ca:a0:33:fb:c6:60:ce:cf:61:24:c0:47:b4:f1:42:aa:c8:7f:
         2a:f8:5c:aa:ab:4d:20:bf:97:65:03:9b:e5:a2:52:ce:0c:25:
         36:05:81:d0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNGQjA0MDQ2QzM0NEFE
QkJCNjU3ODM4ODUxNEQwRkREMzQzQTM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0F1zgzbsvG/Z+gooCyxMT1NcZWxCWgT28uqLZHLibrGWNzyhy
SdcVoxYi+lgVEvlkts+gr7yn2tLcDsDQ54xRrS5fNc+DTcI4KbvMn18AxWpzi9yk
g026Cb+lBFgP47y7JlIxP6Jai412wwJka+re82FGIQo9HTuG0fEM/VYEw/k6X6Jq
4gEsk3mKkusoJFByhOVlTrETpbZ+tWuaE+R4d9wwS+aMPO3KHyCPU91eP+RqLxYy
CcL4b+22GbA1YjZuLmhmB7V6NmBroHOWpJjd4PSppCH6etGPiaJa0BwbRauEC7MY
C7wYmTsbH51+8PeeWlX0z7FgJD2mQt4IsDlPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUP7BARsNErbu2V4OIUU0P3TQ6N2YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1A3QkFSc05FcmJ1MlY0T0lV
VTBQM1RRNk4yWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sHAwDQYJKoZIhvcNAQELBQADggEBAEg/syRop8rx4KgiGSfCV3hl6frxtfZD0KtI
Bz1fKUWqo/DquklwPiYv9kehLcGOJI6ISfOAj2tlGL+1d0FE5iMfPuQCedI1wGDi
+nMW1YAmwWBUb5kUfxdWF4cHMCMZVb5ckVEie8j7ii37NvyVJj3+vSaCadhnXF1p
zNumhnl7EfuVYfQIrhjb7a2VWcawkoEmNPqfmogSdDj63ecTYTrRgcPoXN6Rw8SA
yjjUl3Iweh4G6U3l9MHUnDeEt094ixO15YJg3h3tbfuIp4KbdDwsLcUJ6wUfyMqg
M/vGYM7PYSTAR7TxQqrIfyr4XKqrTSC/l2UDm+WiUs4MJTYFgdA=
-----END CERTIFICATE-----