Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UgqP_1fBN7SWD3NGRKzskC7OmfY.roa
File:                     UgqP_1fBN7SWD3NGRKzskC7OmfY.roa (raw, json)
Hash identifier:          Z3zn/3xdbgNPyN57nqu2+4jCMApuHxUq/KSaY18dDTw=
Subject key identifier:   52:0A:8F:FF:57:C1:37:B4:96:0F:73:46:44:AC:EC:90:2E:CE:99:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D71
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UgqP_1fBN7SWD3NGRKzskC7OmfY.roa
Signing time:             Tue 29 Sep 2020 09:54:34 +0000
ROA not before:           Tue 29 Sep 2020 09:54:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3441 (0xd71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=520A8FFF57C137B4960F734644ACEC902ECE99F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:61:56:eb:eb:18:12:7b:97:1f:86:12:61:
                    4e:40:4b:3b:0c:0c:8a:b7:f7:24:b8:a2:37:e5:62:
                    3b:a5:4b:42:11:c8:fb:08:f3:00:9b:02:24:a1:82:
                    ca:14:49:d4:4a:25:0a:a7:de:21:c4:6e:33:ce:d8:
                    80:cb:fb:3a:30:dd:4e:52:01:9c:0e:40:05:09:b4:
                    8c:b0:43:dd:68:fb:a4:5e:be:10:0e:07:4a:6f:79:
                    c2:82:0d:2b:28:df:02:68:c6:90:14:4d:76:84:15:
                    c9:49:44:c6:e0:f0:cc:4b:99:40:85:98:c5:98:b9:
                    61:cb:3c:27:14:b1:9c:29:17:2f:86:a9:b2:e3:b0:
                    b6:61:78:c0:6d:75:f3:e8:b1:3b:cb:1d:5f:1e:8f:
                    23:1c:e2:d8:84:95:06:d5:b6:5d:f9:9a:b5:7a:a5:
                    73:e9:ae:ee:5c:41:39:36:e1:c3:9c:c8:00:d0:f7:
                    b9:a4:03:1b:f1:4c:a0:4a:28:38:01:9b:08:50:2d:
                    43:81:c0:3d:b6:51:11:23:17:61:87:56:87:10:43:
                    ff:b3:03:14:c3:c9:45:9d:19:46:47:93:75:d7:86:
                    33:8b:26:c5:1e:43:14:71:da:a9:b3:0d:e0:f4:63:
                    63:c2:bd:a6:62:f4:4b:d3:7f:70:39:2e:69:cc:47:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:8F:FF:57:C1:37:B4:96:0F:73:46:44:AC:EC:90:2E:CE:99:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UgqP_1fBN7SWD3NGRKzskC7OmfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:6c:6c:7f:2c:17:5c:43:62:f3:09:05:d5:41:b2:3b:ce:
         74:08:7e:59:de:72:f9:5b:23:63:1c:ff:df:5b:c8:72:59:ce:
         91:0a:f1:11:47:3c:2b:fc:5f:3a:6f:8a:76:23:3a:a0:d2:d1:
         42:59:51:2f:82:0f:a6:e4:9c:78:98:fc:08:ac:f1:cc:10:3f:
         e2:4d:ec:9f:29:15:ad:36:80:51:b3:0b:a4:25:68:ac:ad:98:
         12:b2:20:14:f4:87:89:53:f1:dc:aa:22:9f:ec:5f:0b:81:63:
         49:e2:5c:6a:43:04:77:ec:a5:90:de:7e:0c:d6:8c:bf:31:dd:
         a8:9e:5f:57:68:0e:da:5e:98:20:d8:2e:d4:31:3d:07:d3:66:
         fb:dc:ea:bc:21:19:16:2a:f1:89:dc:94:95:13:3d:c2:4e:92:
         00:c1:93:5c:33:6d:83:c9:33:c0:d1:88:91:f9:d7:d0:f9:ec:
         8a:76:e8:12:15:b9:a9:61:24:3b:10:26:21:bc:25:dd:61:48:
         69:6e:2b:16:74:98:a8:b4:1a:b9:20:ea:a1:2f:4a:6e:9e:d3:
         86:99:b7:3a:28:8d:38:2f:a8:bd:2b:dd:3b:3b:09:19:7e:c1:
         1e:6e:a1:69:3f:ef:d2:1e:57:e1:c5:44:14:a4:3b:e9:1f:f0:
         c9:c7:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----