Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QmFse7UV5PX7v5FVr67SDMnILlU.roa
File:                     QmFse7UV5PX7v5FVr67SDMnILlU.roa (raw, json)
Hash identifier:          2AbveH0Q9bBu+hrpIJKlWykddT/fc85CDLmPfUM3QZQ=
Subject key identifier:   42:61:6C:7B:B5:15:E4:F5:FB:BF:91:55:AF:AE:D2:0C:C9:C8:2E:55
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QmFse7UV5PX7v5FVr67SDMnILlU.roa
Signing time:             Sun 07 Feb 2021 12:13:20 +0000
ROA not before:           Sun 07 Feb 2021 12:13:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5795 (0x16a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:13:20 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=42616C7BB515E4F5FBBF9155AFAED20CC9C82E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:35:b1:69:11:55:2e:af:86:c2:39:26:cf:
                    94:dd:bb:33:eb:ef:4e:1e:b8:2d:d7:3d:c4:bb:0b:
                    e2:0b:5f:a5:41:a7:59:df:20:d1:13:1a:cd:80:da:
                    29:55:95:65:e7:bd:60:0e:e7:1f:52:40:08:8d:8f:
                    8a:c1:97:5e:9f:95:23:90:bc:6b:b3:bd:d2:5e:07:
                    51:63:7c:d2:eb:04:8d:e9:8e:f6:29:73:1a:7b:6a:
                    ff:53:b6:9f:39:7f:0b:23:31:d4:aa:0e:e3:27:03:
                    fc:a1:03:c8:6b:b3:13:67:0d:78:65:2b:d5:98:34:
                    c2:72:d3:a5:ce:cb:3e:61:d0:c9:1a:55:71:cc:49:
                    74:a3:1e:6f:dc:dc:ce:7f:34:1e:70:11:d6:f4:e3:
                    82:0a:c4:d5:2c:f5:9b:ed:7b:95:ae:62:45:7a:2f:
                    33:a4:ef:85:10:30:7f:01:fa:9d:8c:6b:57:b7:74:
                    6c:86:77:2b:76:d8:73:63:25:cd:36:16:59:b2:77:
                    ea:65:23:fc:dc:e4:08:11:c4:21:c7:b7:09:41:77:
                    f4:57:d8:bf:fa:b8:3f:10:b5:63:3d:3c:42:be:97:
                    47:11:c7:3c:ad:36:4c:14:3e:db:b0:5f:f9:19:3a:
                    58:b0:4d:df:bb:0e:0c:24:8f:12:a2:a1:d1:77:64:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:6C:7B:B5:15:E4:F5:FB:BF:91:55:AF:AE:D2:0C:C9:C8:2E:55
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QmFse7UV5PX7v5FVr67SDMnILlU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:c2:c2:a5:1c:11:3d:e5:59:e2:74:e6:91:ff:d6:fb:83:
         80:9c:bf:e5:27:93:49:1b:67:98:b2:e4:7c:30:fa:d5:0f:81:
         86:12:85:1e:17:71:6b:1c:32:1f:98:28:5c:c2:88:96:64:0b:
         9b:61:6a:dd:2e:6e:ef:af:92:41:46:46:3a:32:c1:39:64:b2:
         83:0f:da:8e:10:5c:a0:f9:72:89:5a:d3:7d:c0:09:74:69:e0:
         4e:8c:4d:6c:b5:76:81:3e:36:91:7d:34:94:6b:e4:09:ab:6a:
         a0:a9:de:11:6e:88:f5:5e:31:d5:fc:27:d6:90:5c:16:15:2d:
         10:93:00:01:c0:ef:7f:01:82:d6:c8:86:72:a0:a4:8b:6d:cb:
         4c:cb:c1:fd:8e:a2:35:8b:70:43:6d:bf:4c:e1:41:9e:34:9a:
         15:f1:ea:c9:38:ce:0a:cd:05:3b:b6:69:f5:d8:c5:9e:53:7f:
         5b:93:20:e4:20:14:07:df:95:2f:9c:3a:ed:e0:b9:fb:cb:fb:
         fd:2d:5b:c8:93:e3:31:c8:a5:e6:84:0b:df:4b:fc:c2:38:de:
         ed:e1:0e:5e:15:4e:cf:96:f8:3a:17:e4:5e:a5:75:22:32:d6:
         62:6c:69:cd:bc:39:27:52:63:fd:da:b4:5f:2f:47:77:fa:40:
         3c:c5:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----