Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa
File:                     U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa (raw, json)
Hash identifier:          5Mszw/GQRlEqO4/uuwKh4nuSQ2MosyEWl0cFLH/s6TE=
Subject key identifier:   53:E2:14:78:20:F2:4F:EC:69:BC:C3:03:CB:CB:45:45:D4:5F:15:4A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1417
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa
Signing time:             Sun 07 Feb 2021 11:57:22 +0000
ROA not before:           Sun 07 Feb 2021 11:57:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5143 (0x1417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:57:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=53E2147820F24FEC69BCC303CBCB4545D45F154A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0d:8b:af:0b:0a:c4:46:ea:ed:87:dc:49:98:
                    38:4b:22:ff:a2:19:69:77:b7:ed:8a:6d:1e:91:34:
                    d5:6d:10:cb:38:da:63:52:19:98:98:20:c5:89:a8:
                    ac:5f:b6:f4:b8:3f:c5:a8:b0:eb:d9:a8:1e:3f:c5:
                    c5:ba:65:c2:e3:a9:7b:80:02:ae:55:f4:11:c4:43:
                    d5:ca:7e:24:ad:52:fa:42:2c:a5:1f:e8:47:73:6f:
                    3c:ef:83:c8:16:25:22:1a:68:f9:c6:e7:97:92:3f:
                    da:ae:4c:57:75:41:dc:57:e5:f5:10:d7:77:29:37:
                    60:4e:ce:90:65:a7:29:33:3f:e1:ff:cb:d1:0b:53:
                    a0:20:95:99:08:e9:a4:dc:ad:40:6f:93:d1:b4:c2:
                    4e:63:6d:67:df:13:cd:b1:08:77:16:4d:dd:c3:05:
                    c0:09:fe:6b:4c:1e:25:bb:ec:70:f4:c6:07:32:46:
                    1d:5e:2b:90:67:83:ff:79:b9:23:15:18:99:b0:4f:
                    22:3e:f3:6f:03:24:1f:1c:79:68:f9:44:08:21:23:
                    73:1a:84:d2:49:3e:67:3f:6e:ca:a3:98:b6:b0:ef:
                    46:f3:b0:ae:e4:93:55:9c:04:50:5d:d1:d3:28:bf:
                    89:fd:ae:08:e2:7c:8e:ec:5e:41:2b:73:e3:a9:98:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:14:78:20:F2:4F:EC:69:BC:C3:03:CB:CB:45:45:D4:5F:15:4A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:9f:b5:25:e9:b9:7d:ad:e6:90:9e:25:00:0f:bb:7d:ef:
         91:97:24:f5:22:e6:79:74:68:8a:b5:ba:c2:98:19:cd:c5:25:
         d5:ab:3c:31:eb:4f:d8:0d:c8:42:0f:65:9a:06:f4:c7:d0:94:
         17:03:ee:f4:b4:8a:97:63:5c:b8:21:39:b9:69:bb:ad:06:f8:
         e8:d1:a0:70:89:3e:35:cd:fa:3d:05:01:9c:7e:5b:f8:c3:a7:
         2e:5b:e6:52:63:fa:0d:12:00:e5:81:06:2a:ad:70:a9:2d:9a:
         ce:dc:95:c2:6e:07:c9:12:06:5f:02:27:ff:80:93:42:68:f6:
         15:a7:14:b6:81:70:60:8e:e9:4d:5e:ab:d7:5b:b9:89:1a:0f:
         a9:9e:c4:6a:2c:b4:77:19:e3:17:18:f9:a9:00:9b:0d:4f:d5:
         8d:05:51:dc:1e:b2:8b:d8:02:0f:20:65:7a:56:3b:bc:c7:ff:
         8b:d9:9d:13:df:d2:73:5c:4e:4d:78:84:9a:8e:cd:ed:2a:70:
         f2:eb:b7:4e:3c:7c:8f:9b:56:2c:cb:66:44:1a:9c:13:26:4d:
         be:54:60:b7:3f:44:e2:69:39:fb:9e:e0:0d:1e:29:80:fb:3b:
         c4:93:68:81:8d:68:29:4d:17:70:c7:7b:73:0f:41:58:23:97:
         53:fb:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----