Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMTLodg3TlY8FJpyvb2l_bE6OXg.roa
File:                     QMTLodg3TlY8FJpyvb2l_bE6OXg.roa (raw, json)
Hash identifier:          vkI79x/9X0b2DmXCEWeRoDfxTqCODVPUW+S/k4xCeBc=
Subject key identifier:   40:C4:CB:A1:D8:37:4E:56:3C:14:9A:72:BD:BD:A5:FD:B1:3A:39:78
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C94
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMTLodg3TlY8FJpyvb2l_bE6OXg.roa
Signing time:             Wed 29 Sep 2021 02:47:56 +0000
ROA not before:           Wed 29 Sep 2021 02:47:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7316 (0x1c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=40C4CBA1D8374E563C149A72BDBDA5FDB13A3978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:15:1a:b6:a4:c3:48:4a:d8:f5:4c:bb:67:
                    cd:0c:72:36:7e:8d:dc:42:f1:99:f7:b2:dc:86:bc:
                    e0:24:56:8f:31:8f:ae:95:8a:0c:88:e6:a2:ca:c8:
                    60:d3:17:9b:17:46:88:35:ed:7e:5a:c1:a7:a4:df:
                    b0:e9:e1:a6:a2:32:49:57:08:67:33:8e:7b:23:9a:
                    4d:76:7a:16:3a:af:22:8a:91:2a:6c:f1:69:c3:32:
                    63:25:12:2c:7b:03:1f:ae:d9:77:7e:a3:a4:af:2d:
                    3d:ca:88:7c:d7:78:ee:7b:29:21:b0:52:cc:4f:a9:
                    f4:bb:74:62:3b:e7:33:01:72:8b:10:d4:ed:6b:09:
                    e8:d9:29:d9:51:94:3b:ee:3d:b3:0c:9b:c8:82:07:
                    5e:cb:5f:39:7f:f8:ed:f0:e6:a4:e0:42:e2:f9:51:
                    d0:3a:e0:0a:09:a5:d9:cb:52:d3:24:0d:10:26:1f:
                    dd:72:63:01:10:6e:03:2e:fb:9a:bd:a5:e7:fa:12:
                    f7:1a:70:f1:23:25:41:8d:69:bc:2c:70:ee:73:ed:
                    62:fb:89:43:a3:2f:ac:0f:d4:86:56:5d:21:31:2b:
                    07:f7:86:64:6f:78:0c:e1:3f:3e:ce:81:65:36:dc:
                    5f:9c:15:d7:2d:c2:b2:e1:e9:76:37:c4:3c:15:c6:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:CB:A1:D8:37:4E:56:3C:14:9A:72:BD:BD:A5:FD:B1:3A:39:78
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMTLodg3TlY8FJpyvb2l_bE6OXg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:ea:d2:e4:54:c9:1b:1a:67:a8:fe:0d:ff:ca:db:87:82:
         6d:0a:8a:55:6d:43:ed:f4:f7:8f:37:9f:4c:c3:47:24:ed:e3:
         56:15:d4:ee:35:95:47:59:71:2d:3e:10:1b:e9:40:d0:ae:19:
         8e:fe:db:8a:81:72:7d:ba:fd:b3:a2:c7:9e:5f:d8:7c:75:f9:
         6c:cc:93:6e:ac:dd:e2:3e:3d:7f:0b:92:6d:25:ab:7b:2e:be:
         99:01:49:d7:7e:57:1c:58:eb:42:0a:b8:c8:2f:b3:25:42:2a:
         5f:a0:58:77:56:ff:03:8f:90:9e:c8:79:54:f4:f3:88:aa:61:
         d1:64:5c:c0:d2:30:da:92:67:7c:28:00:6f:53:7c:30:68:1e:
         99:92:6c:a8:59:9d:f0:b9:6a:e3:d8:bb:5d:7e:37:8e:53:4f:
         ff:cd:2d:05:29:09:ef:9d:1d:43:81:a4:89:3e:37:cc:47:61:
         da:ec:71:9c:6c:02:ba:23:6a:13:52:30:39:4e:7a:fb:19:69:
         6e:ac:a8:a9:ae:5f:3d:57:36:f7:bc:0b:97:87:2f:6d:19:f3:
         60:62:fe:fc:10:af:59:20:ed:68:ff:2d:d2:d1:ff:86:c8:16:
         45:8b:8a:17:16:05:da:fa:9f:14:b1:83:2d:14:8d:d8:0f:ee:
         d2:fa:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----