Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QyKAYzstoI842TAvOE44RhnCE2U.roa
File:                     QyKAYzstoI842TAvOE44RhnCE2U.roa (raw, json)
Hash identifier:          CDaeFQtZHlgi1kAJthuTZEPa59jmpcWdPA7o056j5co=
Subject key identifier:   43:22:80:63:3B:2D:A0:8F:38:D9:30:2F:38:4E:38:46:19:C2:13:65
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D82
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QyKAYzstoI842TAvOE44RhnCE2U.roa
Signing time:             Tue 29 Sep 2020 09:54:38 +0000
ROA not before:           Tue 29 Sep 2020 09:54:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3458 (0xd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=432280633B2DA08F38D9302F384E384619C21365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1e:6f:74:30:6e:73:98:44:b2:15:4a:d5:6f:
                    f8:b0:45:21:d0:7b:bc:c6:68:8a:6b:3b:ac:ee:d4:
                    e7:9a:58:d0:fa:26:9c:54:7c:af:21:aa:46:e7:56:
                    02:88:1e:20:26:6b:f8:70:1e:50:d8:ce:73:e9:7b:
                    78:a6:2b:d6:02:4f:b7:d7:3c:a2:41:43:2b:7b:c4:
                    bd:45:90:ff:f4:e2:ad:e1:9a:b1:6e:2d:6b:14:4b:
                    00:54:c4:d7:c0:e2:87:9b:61:f8:1d:1a:2b:6c:28:
                    9e:9d:8d:f0:b9:dd:8c:d9:a1:b8:3f:4e:f7:73:e4:
                    0d:b4:84:b6:47:5c:30:d1:ea:d9:a8:ab:d0:51:71:
                    2e:1c:50:a1:08:72:2f:6f:1a:25:79:ff:f7:f3:d9:
                    b8:5f:6f:39:f8:1b:a7:86:bc:1c:c8:0f:0e:ff:12:
                    27:97:39:d2:36:65:8c:60:cd:61:f6:27:0f:e8:b1:
                    9f:97:50:4c:2a:12:70:5a:f2:5f:e0:44:da:60:f5:
                    14:e3:ea:e8:12:2c:aa:a9:fc:a4:c8:92:ec:94:64:
                    fb:de:72:7e:2c:28:e4:78:08:ae:a7:c7:ff:05:67:
                    46:e4:2f:66:c0:9e:24:6c:6d:68:e7:ff:f8:46:a9:
                    dc:92:e3:2a:0d:bc:35:96:53:dd:9b:3b:d2:f7:7c:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:80:63:3B:2D:A0:8F:38:D9:30:2F:38:4E:38:46:19:C2:13:65
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QyKAYzstoI842TAvOE44RhnCE2U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:94:e1:80:8b:27:4c:10:44:0d:c5:85:5b:b7:37:59:eb:
         b8:5c:d9:2a:78:a2:de:15:e3:2a:4a:f2:06:c0:f4:b3:af:26:
         a5:23:d3:ba:97:31:a2:9e:18:7b:43:04:3a:1b:86:f6:d2:bb:
         92:3c:af:b4:3e:0d:2a:e9:c3:c2:50:cd:9e:47:12:e9:c9:47:
         ac:11:31:e1:c8:ab:22:ff:87:c1:1f:cb:23:59:e2:40:8b:e0:
         e5:5a:35:15:7b:80:b1:76:57:c3:2e:d5:d5:95:b5:3c:16:41:
         b8:6c:4c:1f:86:50:e5:4e:cb:fa:98:6a:0a:d3:b5:3d:15:00:
         42:7a:6f:cc:25:b1:16:88:a2:cf:fc:1d:c0:7b:4a:b8:54:7c:
         27:6f:e5:45:d2:dd:14:1b:b8:93:38:9a:6a:ab:fc:6b:c0:dd:
         b2:29:08:07:a7:4e:af:89:50:52:7a:f6:f5:f2:f0:a4:17:8a:
         74:f9:f1:61:33:d6:8e:84:8c:1a:7c:22:8f:d9:31:dd:4d:84:
         3a:30:2f:86:93:81:dc:2d:d3:b0:f6:86:40:4d:5a:0a:24:d1:
         29:ef:e7:86:09:6a:9d:13:a5:2a:6d:a6:69:e5:a4:e1:a4:f4:
         68:b0:97:f8:a4:3e:86:73:4e:9e:0c:ee:59:9a:66:34:df:3f:
         dc:80:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----