Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RU5S3_9xkVHGieV10ehaZA_cgoE.roa
File:                     RU5S3_9xkVHGieV10ehaZA_cgoE.roa (raw, json)
Hash identifier:          wXPO2FufrMO5RkM68lSpwjcrsjpZqmeX8N8VVBhQ0wY=
Subject key identifier:   45:4E:52:DF:FF:71:91:51:C6:89:E5:75:D1:E8:5A:64:0F:DC:82:81
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D9C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RU5S3_9xkVHGieV10ehaZA_cgoE.roa
Signing time:             Tue 29 Sep 2020 09:54:45 +0000
ROA not before:           Tue 29 Sep 2020 09:54:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3484 (0xd9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=454E52DFFF719151C689E575D1E85A640FDC8281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:d3:f4:d4:e1:da:46:41:d2:cc:2d:e0:08:
                    71:f2:a0:f0:29:f1:c2:43:c0:7b:e5:9f:ff:b4:1b:
                    90:47:3b:cd:b7:54:89:be:ca:f8:a3:bd:4b:ea:a0:
                    be:39:b4:f8:07:f6:12:fa:19:b5:b2:1f:8f:94:98:
                    ba:b4:b8:2f:65:a2:41:40:95:e5:4a:bf:35:09:22:
                    f9:65:f4:9b:88:6c:2f:c1:ce:c3:48:54:86:5f:6f:
                    eb:2b:32:24:6d:c7:44:2f:1b:ea:5b:17:d7:14:6f:
                    40:7d:23:7b:5b:12:44:3a:fc:0f:e1:73:0a:1a:3d:
                    0f:ad:47:5d:84:1e:9d:40:dd:46:b7:26:21:b2:7d:
                    37:39:a8:20:15:7c:0a:13:32:e3:05:f9:61:08:f7:
                    05:9d:62:2b:11:df:a9:69:fc:a9:16:a4:a7:1b:1e:
                    a5:41:8f:1e:ad:57:a0:75:a1:9f:9e:36:61:d4:5d:
                    11:a7:d2:f0:d3:46:07:c9:14:21:c9:e8:fd:87:e6:
                    96:75:92:f0:8e:e7:1b:0a:cb:e9:1e:77:7f:be:ed:
                    f0:58:d2:43:70:bb:4c:a7:55:ae:a3:99:78:23:05:
                    57:ea:f9:b1:f9:ce:9d:b7:b7:5f:45:a6:ba:bc:28:
                    7a:ac:2e:70:9a:52:5d:99:41:de:9a:33:56:94:ad:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4E:52:DF:FF:71:91:51:C6:89:E5:75:D1:E8:5A:64:0F:DC:82:81
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RU5S3_9xkVHGieV10ehaZA_cgoE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:81:18:d1:99:58:58:6a:13:a7:94:0f:d3:91:00:26:7a:75:
         48:d7:0f:48:b3:70:5c:46:ca:9a:7e:ec:d2:69:f2:42:1e:43:
         bd:f4:92:96:33:f2:63:42:8c:c6:2c:94:af:3f:30:91:e4:7d:
         3a:a7:50:2d:ec:f9:17:9e:17:2e:ec:ce:3b:77:2f:ee:60:98:
         bf:23:fd:19:2e:03:ba:c4:99:3a:48:43:24:ae:b6:16:7a:8b:
         c5:78:a6:16:35:a2:73:ca:1e:ca:32:3e:c3:27:1d:90:ed:26:
         2e:dd:b3:28:36:db:ee:89:9f:56:c2:60:30:42:7b:78:75:82:
         e5:4f:f9:88:65:b8:45:2a:ee:27:af:7f:6d:c9:70:a9:95:2b:
         6d:66:0b:9c:23:d2:ef:c4:3b:5b:7d:d0:e0:c6:88:14:3e:6b:
         5d:9b:f2:50:6f:ec:70:96:4c:78:da:7a:21:b8:cf:77:9a:6d:
         96:27:5d:a4:ba:c3:97:d6:09:44:b6:8c:29:fe:92:42:81:36:
         06:85:16:6d:83:d5:58:22:e7:42:f4:dd:72:55:d6:5f:09:fa:
         73:46:12:21:e1:2d:d9:b8:44:02:ce:e5:a8:ac:b5:58:69:30:
         40:4a:78:27:fb:73:26:3d:18:d4:08:b5:31:bf:25:2f:7f:b9:
         9b:e6:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----