Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y8AOm0Wz7xa31S64oenpcRyvGzE.roa
File:                     Y8AOm0Wz7xa31S64oenpcRyvGzE.roa (raw, json)
Hash identifier:          AC3UWE2nY9sEPHHonSodpdjAOHnYOiIyPGf/r8QT6To=
Subject key identifier:   63:C0:0E:9B:45:B3:EF:16:B7:D5:2E:B8:A1:E9:E9:71:1C:AF:1B:31
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1427
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y8AOm0Wz7xa31S64oenpcRyvGzE.roa
Signing time:             Sun 07 Feb 2021 11:57:35 +0000
ROA not before:           Sun 07 Feb 2021 11:57:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5159 (0x1427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:57:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=63C00E9B45B3EF16B7D52EB8A1E9E9711CAF1B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a9:e7:ba:89:8e:3b:55:ef:1a:ec:db:38:5c:
                    d8:7e:00:ff:dd:61:2f:aa:38:4b:be:4b:38:0f:7c:
                    94:aa:4d:04:73:17:26:0c:bf:44:6d:8b:5a:80:46:
                    85:ed:d7:ca:7a:92:ff:b5:98:5f:dc:33:71:01:82:
                    ea:e3:db:50:70:00:99:8b:0c:91:1d:08:34:e1:8c:
                    35:12:54:8c:4d:dd:08:fa:47:cf:a1:66:6b:ef:21:
                    cf:ac:45:43:8b:06:e3:30:7c:a4:85:f6:34:5d:ab:
                    a9:ec:9f:a8:69:e4:1c:cb:c7:bb:ba:80:f6:c0:ed:
                    95:1a:51:55:62:c7:65:10:62:f7:d4:ca:9a:01:d6:
                    d2:4a:e6:aa:85:9a:d4:27:fb:43:e8:c5:a9:54:6a:
                    dd:c8:60:c4:76:d6:33:ed:a2:64:cb:a8:93:d5:b2:
                    ec:1f:63:e2:36:b6:69:da:eb:f2:34:e6:2e:8a:cb:
                    48:71:24:69:ad:ed:68:df:b5:59:4a:78:27:e3:f5:
                    89:3d:3b:19:77:d0:8a:3e:77:d7:49:0d:29:25:1d:
                    a7:47:c3:a0:84:bc:76:17:c2:ec:b8:1d:a5:9f:8f:
                    d6:17:ae:87:f6:20:2d:4c:29:97:27:9a:64:93:6f:
                    4b:d6:c8:79:71:79:75:df:22:a4:d5:20:c6:f2:e1:
                    7f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C0:0E:9B:45:B3:EF:16:B7:D5:2E:B8:A1:E9:E9:71:1C:AF:1B:31
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y8AOm0Wz7xa31S64oenpcRyvGzE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:f6:be:c3:05:cd:1e:75:7e:91:76:c2:63:9e:e1:54:1b:
         d2:37:0d:df:ee:11:90:91:79:3c:94:4f:63:d2:fb:66:c0:a5:
         ae:c9:27:56:e2:d9:6f:a9:e8:6c:a0:76:c3:52:de:94:85:08:
         f1:e6:64:e9:f2:1c:a8:7f:5a:7f:1d:4c:4c:0f:af:cf:34:e9:
         fd:c0:5f:ae:fe:42:e7:cb:1e:6a:ac:58:9b:58:bb:c2:41:96:
         65:b0:79:1e:00:11:04:72:e0:64:4f:3a:4b:4e:6f:02:b5:91:
         c7:97:5d:12:63:56:9e:31:a5:ac:e0:3d:71:38:0f:ca:ff:62:
         cf:59:e3:fb:31:b5:ad:27:a7:28:bd:63:27:ad:06:bf:86:ef:
         8d:7d:48:7e:ae:19:25:15:55:1f:02:14:85:b5:e0:bf:85:7e:
         51:36:af:28:2d:6f:f9:53:5e:fd:ae:f4:84:81:18:19:be:1a:
         67:fb:f4:5a:e1:f9:35:5b:ff:24:dc:99:c5:24:c5:d9:0b:f4:
         02:3f:8d:4a:66:d7:8f:ac:cd:17:34:ac:8c:c0:a3:f3:e4:9d:
         d4:87:44:ea:54:e0:b4:a3:5b:4f:75:94:ee:0a:59:02:3e:5d:
         ce:7a:57:12:97:70:33:3d:f7:67:d2:dd:a7:10:66:c9:18:71:
         9c:bb:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----