Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZNCMjNKmZzctpyKfwwLxtvkt4fA.roa
File:                     ZNCMjNKmZzctpyKfwwLxtvkt4fA.roa (raw, json)
Hash identifier:          80ZSyCQDMzFnaOuGYtpQoxPeskG9h7hTg4besJi+wpw=
Subject key identifier:   64:D0:8C:8C:D2:A6:67:37:2D:A7:22:9F:C3:02:F1:B6:F9:2D:E1:F0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZNCMjNKmZzctpyKfwwLxtvkt4fA.roa
Signing time:             Tue 29 Sep 2020 09:55:51 +0000
ROA not before:           Tue 29 Sep 2020 09:55:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=64D08C8CD2A667372DA7229FC302F1B6F92DE1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:22:47:a3:a2:b7:08:cd:a2:4e:1f:b4:cc:
                    7c:28:5f:8f:86:30:ad:40:ec:6b:5b:eb:e0:92:b0:
                    84:4e:a4:ac:4d:76:ab:6c:cd:d1:5b:f2:42:6c:fb:
                    2f:b9:3c:ad:e7:86:01:aa:2b:96:1e:ef:19:fe:a2:
                    6a:04:5a:7d:fd:46:0a:e2:b5:e1:17:10:07:58:59:
                    b7:b8:0d:39:88:36:3d:a4:46:e1:c9:30:f0:66:7c:
                    72:d8:9a:35:f0:06:ad:85:ae:77:6c:45:dc:a3:4a:
                    f6:7b:c0:15:04:de:0b:8f:0c:74:de:94:08:7a:6c:
                    7f:e3:5a:ed:56:26:89:ed:75:79:2c:8d:1d:6c:e4:
                    24:33:a1:d6:f5:7e:47:75:95:67:2c:64:13:ea:75:
                    bb:c5:5a:66:6d:02:93:24:08:25:07:a1:0f:f7:92:
                    c1:e4:e9:4f:ff:77:2a:cb:fc:88:f3:9e:46:93:9d:
                    43:a5:f5:4c:30:8f:06:09:a2:09:70:56:21:75:e1:
                    71:16:74:66:93:22:44:ae:96:8a:d3:a8:c9:4e:38:
                    8f:b8:61:09:94:14:da:58:44:1b:6d:e5:26:23:da:
                    2e:12:3f:f2:0a:24:ee:7f:b8:2d:6a:b7:a3:8f:4f:
                    04:60:bc:89:dd:68:48:6c:3f:76:18:a7:7c:c2:64:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:8C:8C:D2:A6:67:37:2D:A7:22:9F:C3:02:F1:B6:F9:2D:E1:F0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZNCMjNKmZzctpyKfwwLxtvkt4fA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:0c:4c:f2:cf:e1:f2:85:f0:53:17:1f:00:92:da:df:2c:
         0d:ea:21:02:9a:26:03:0b:49:ce:d6:8b:a3:5f:81:99:2b:04:
         54:56:0e:c1:32:8d:5e:bb:50:94:72:d5:df:07:88:c6:54:c1:
         45:51:23:c9:43:9a:48:5f:84:1f:0e:70:77:11:28:58:d0:d8:
         1d:c3:d4:f0:23:7f:7a:58:9f:29:d0:fe:83:ca:a0:7a:0a:46:
         85:42:ee:39:c1:3c:43:b6:7d:bd:f9:c4:60:a5:33:63:f0:23:
         d3:c8:f1:58:00:f0:43:8d:3c:2c:47:ce:fd:ca:c5:49:a0:45:
         3a:03:99:8f:5b:d7:84:0b:8b:61:68:1f:62:55:23:68:fa:ad:
         02:f2:d0:58:bb:a7:4c:01:c8:78:5e:48:ae:2a:9f:47:6e:7d:
         ff:bf:e6:75:1f:ab:5e:5c:36:35:d3:b3:b2:5b:da:d4:9b:6d:
         9e:35:62:86:99:7d:72:d4:f1:01:aa:1a:08:5c:40:16:bc:44:
         29:44:ed:ea:54:f5:cb:f0:bc:9d:4a:ce:a1:dd:56:c3:83:d9:
         45:11:ba:70:aa:77:11:be:2c:f8:ce:36:b3:98:59:20:91:12:
         fb:11:52:c5:3d:4f:32:6d:07:01:34:7f:56:d3:c2:ce:3e:94:
         1d:c0:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----