Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIQPHoqwPWe8EqzBrhDOHZStxvk.roa
File:                     ZIQPHoqwPWe8EqzBrhDOHZStxvk.roa (raw, json)
Hash identifier:          20Dv9XiVHNzNDMR4YOCS7QUs9OV1n9hffBnjWrfe6/Q=
Subject key identifier:   64:84:0F:1E:8A:B0:3D:67:BC:12:AC:C1:AE:10:CE:1D:94:AD:C6:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       153F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIQPHoqwPWe8EqzBrhDOHZStxvk.roa
Signing time:             Sun 07 Feb 2021 12:03:36 +0000
ROA not before:           Sun 07 Feb 2021 12:03:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.116.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5439 (0x153f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=64840F1E8AB03D67BC12ACC1AE10CE1D94ADC6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:7c:ab:97:81:d2:52:bd:5f:44:4d:55:e2:
                    85:27:d8:5b:05:34:13:be:cb:55:8b:56:fd:9e:ba:
                    4a:70:4a:58:07:79:a8:87:a8:d3:39:9a:61:f8:85:
                    4b:90:10:58:ea:8d:30:c2:65:e8:44:7b:7b:04:2a:
                    dd:d5:52:78:c7:73:e7:81:27:83:c2:5b:da:a0:47:
                    b4:66:14:8a:53:09:d1:a0:e9:10:a8:23:87:07:58:
                    1c:04:69:63:e7:d8:65:3f:69:59:31:eb:ef:c0:07:
                    21:ab:0f:ed:2c:08:60:a4:84:9a:03:68:55:db:b7:
                    e3:bf:e1:7c:a2:69:86:fc:d5:05:34:1d:01:13:67:
                    39:14:af:c6:13:09:8a:42:d1:5d:96:3f:7a:cd:d1:
                    b9:27:1d:f2:b4:a7:b0:97:ce:ee:c8:c2:f7:64:83:
                    b3:9b:32:09:46:f0:d5:2f:47:95:3f:4a:11:d4:37:
                    54:7a:00:89:e6:b1:74:be:2c:b0:da:f1:8e:6d:0e:
                    4d:ac:76:fe:ea:aa:41:9f:d4:2b:42:9b:1c:90:e0:
                    1d:d4:20:eb:c2:14:68:d0:d4:53:57:18:fc:0a:a2:
                    6a:4e:10:00:8c:7c:fd:d8:44:ff:ee:1b:71:cd:42:
                    38:84:f0:c2:f7:d5:c5:c1:42:3e:a6:dc:24:e2:40:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:84:0F:1E:8A:B0:3D:67:BC:12:AC:C1:AE:10:CE:1D:94:AD:C6:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIQPHoqwPWe8EqzBrhDOHZStxvk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:c0:bc:12:22:75:7a:34:5b:10:ce:f1:1f:b9:1f:85:c4:38:
         49:b2:d8:98:16:a9:7e:95:a5:67:44:3e:9c:53:09:7b:f5:a3:
         70:18:6b:7f:a4:b3:49:98:5b:bd:9e:a1:d4:23:22:c2:56:c0:
         29:b1:92:a9:c9:fd:99:89:f8:26:c2:29:47:01:45:94:8b:f4:
         2d:3c:fa:35:8a:b0:7a:31:73:36:b2:bf:0c:ae:64:b7:e8:e0:
         59:1c:3e:e8:ea:7f:85:8a:ea:c5:f8:5e:c8:3e:64:3f:6f:0d:
         68:a8:48:8c:61:09:9f:e5:8b:14:4f:ce:e9:d0:de:5f:25:4c:
         18:d0:e3:60:16:e0:c9:84:71:fe:9f:b6:13:cb:20:eb:c8:ce:
         4c:f0:4f:f8:4a:ce:10:54:b4:fb:aa:6e:76:fc:44:6a:ef:01:
         1b:4b:14:3d:47:91:62:ec:b6:38:5e:4f:68:bb:3a:43:ea:b7:
         6d:82:13:70:97:aa:d9:b7:22:d6:83:6c:7b:1d:10:95:f5:cc:
         56:07:78:af:57:d2:1f:60:38:3d:4b:8e:87:b8:e0:55:12:65:
         01:84:61:df:05:ad:7e:af:72:58:eb:fe:d8:52:e4:01:39:8d:
         2a:e2:20:d6:05:10:3d:6f:88:b0:b7:6b:d4:2a:98:0b:b0:f1:
         22:2e:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----