Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U9B3e6zIhkdkV0a0cUYSn3TrV-8.roa
File:                     U9B3e6zIhkdkV0a0cUYSn3TrV-8.roa (raw, json)
Hash identifier:          /fWJcH0xCgiwtkEKMBD66vYHASPygCZdNUTcGZheU34=
Subject key identifier:   53:D0:77:7B:AC:C8:86:47:64:57:46:B4:71:46:12:9F:74:EB:57:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D5E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U9B3e6zIhkdkV0a0cUYSn3TrV-8.roa
Signing time:             Tue 29 Sep 2020 09:54:29 +0000
ROA not before:           Tue 29 Sep 2020 09:54:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.176.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3422 (0xd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=53D0777BACC88647645746B47146129F74EB57EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:c1:35:36:6a:fc:50:e0:c9:9b:78:5f:9b:
                    10:ef:c3:5b:71:14:a5:d4:d1:79:12:17:99:25:e7:
                    e3:83:70:af:7a:2b:7a:97:cd:7c:ee:63:a8:9b:64:
                    4d:7a:fd:86:95:94:bc:c8:3a:36:f8:bd:b9:9d:a1:
                    26:e3:f6:d7:d7:34:2e:e0:e5:b2:39:a7:63:fc:d1:
                    7d:af:2d:53:17:ca:e6:22:73:8a:50:83:57:2f:04:
                    1f:b5:14:05:e5:3e:84:8d:22:02:b2:76:49:7a:54:
                    15:33:d1:ef:51:78:35:9c:84:c3:06:d8:e8:26:fd:
                    0b:cc:98:5e:c5:1b:5d:f3:4c:00:c3:fd:cd:31:3c:
                    f9:aa:75:22:44:29:9f:91:8d:49:3a:91:15:fe:22:
                    a1:0b:ed:d0:a6:3e:ac:11:6b:38:53:c8:c2:69:0a:
                    6c:1b:04:ed:56:f5:95:83:1a:d4:fd:90:ed:d7:b5:
                    2d:3e:1f:b5:c4:47:56:12:2f:3a:03:d6:5d:96:1b:
                    30:fb:73:fd:de:08:d0:b2:3b:4b:9b:95:47:bb:73:
                    b8:c9:f4:cd:10:49:c4:67:a9:da:06:93:73:48:2f:
                    f8:7b:30:67:96:58:0a:01:b0:ae:19:2a:38:93:55:
                    37:d4:72:1e:44:13:32:25:a4:31:3c:75:20:5f:e6:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:77:7B:AC:C8:86:47:64:57:46:B4:71:46:12:9F:74:EB:57:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U9B3e6zIhkdkV0a0cUYSn3TrV-8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:6c:88:50:9d:03:d3:df:bf:fb:f8:d4:af:4c:01:7f:b9:
         9a:09:e9:a1:dd:3d:d3:c2:03:68:36:49:e5:b7:d7:b4:c0:2c:
         11:f6:09:75:bc:81:84:ed:14:ca:71:1d:78:c9:2f:e2:a2:56:
         e8:f3:1e:fd:93:e1:ad:49:a1:4f:27:aa:b8:d6:e5:82:99:31:
         7f:15:a7:80:b7:14:a4:f0:d2:0d:2b:b1:4f:f7:3c:0a:ba:12:
         a3:d8:e7:80:fb:b4:fc:1b:32:c7:9a:61:b2:78:42:87:40:ca:
         60:c9:41:64:c5:bd:a1:95:78:34:41:53:ec:18:00:bc:3f:e2:
         cc:c5:b3:82:15:77:fd:67:1b:a1:ac:db:fd:58:fd:65:a9:5c:
         d0:65:f0:53:95:a8:3d:db:48:e3:68:34:f7:d4:9f:48:70:26:
         6f:a6:9c:23:c1:f2:a6:9c:17:2c:39:3f:95:65:a7:22:0a:be:
         05:f9:0a:66:15:0e:52:1f:33:d8:0b:c5:8b:de:78:61:e0:f7:
         d0:d7:28:80:74:dc:d1:f0:b9:63:49:35:3b:b5:fc:93:59:c9:
         74:b3:e5:87:e0:82:22:d8:84:04:20:0a:9b:65:78:d8:55:72:
         5e:c2:64:f5:bc:a1:ba:73:e1:f7:73:2f:5c:c5:ff:c0:67:00:
         26:29:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----