Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZaR9FSm5-CcfSfVY7OANL-z_teY.roa
File:                     ZaR9FSm5-CcfSfVY7OANL-z_teY.roa (raw, json)
Hash identifier:          4Hf1zxKxk3z5H1S1nNTXLrjCVoIh0ax2P0IfHBLG/YE=
Subject key identifier:   65:A4:7D:15:29:B9:F8:27:1F:49:F5:58:EC:E0:0D:2F:EC:FF:B5:E6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1917
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZaR9FSm5-CcfSfVY7OANL-z_teY.roa
Signing time:             Sun 07 Feb 2021 12:57:01 +0000
ROA not before:           Sun 07 Feb 2021 12:57:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.177.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6423 (0x1917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:57:01 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=65A47D1529B9F8271F49F558ECE00D2FECFFB5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:4a:0d:55:63:f3:f9:70:d0:85:e1:9c:d0:
                    e1:d2:0a:39:b6:f5:e5:a9:59:4b:ce:f7:68:a9:df:
                    65:ed:74:53:f4:a7:7d:bb:cc:d0:46:d0:5f:00:ec:
                    af:8f:58:7a:56:b7:e1:ab:39:c0:08:9f:2b:1b:f6:
                    a2:e9:13:4d:4b:37:2a:7b:33:2c:2a:70:4b:6b:1a:
                    7e:01:20:d8:d2:a5:3c:4f:03:b3:69:22:3a:41:a7:
                    77:60:be:99:46:5c:ca:97:54:87:16:4c:9f:9f:19:
                    fb:17:3f:c4:32:3f:d4:79:1d:57:49:11:11:1e:1e:
                    6a:7a:14:6a:3d:a9:cb:a8:ab:6b:01:d2:37:92:4b:
                    0a:c9:1e:75:62:05:c9:0e:61:67:9c:a8:c6:a4:86:
                    62:a0:a0:20:6a:ad:ea:e2:47:2f:c8:b3:97:2c:57:
                    e1:f2:90:ca:ff:b7:07:72:e8:6d:66:9e:b7:47:12:
                    c9:fe:da:d1:01:39:6c:06:e1:0b:6f:67:61:3a:1a:
                    ca:62:41:bf:1a:21:cd:03:05:7d:c6:d9:07:e2:58:
                    2e:07:b7:f5:e0:6b:58:46:85:82:73:12:9f:df:6b:
                    6d:33:c7:1b:dc:2d:8a:88:30:6d:0f:fd:07:94:81:
                    ea:d8:7d:11:aa:a2:cb:03:3c:83:44:18:e8:a1:d7:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:7D:15:29:B9:F8:27:1F:49:F5:58:EC:E0:0D:2F:EC:FF:B5:E6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZaR9FSm5-CcfSfVY7OANL-z_teY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:5f:91:f0:0c:c2:cf:e7:58:74:0a:76:ad:42:fc:88:2f:b1:
         0c:b3:f7:83:a7:1d:a6:16:79:86:62:b0:3a:ca:8c:98:93:c2:
         16:99:63:09:39:0a:18:a7:03:bb:f9:ab:09:2e:5f:58:5d:cf:
         a9:76:89:7f:55:93:50:01:36:d0:f1:f2:c8:cd:0f:3c:fd:a4:
         5f:a3:9e:9b:eb:a3:fc:7b:e2:a7:9e:ab:ec:35:c7:b0:c1:9e:
         80:0c:43:1a:40:5c:98:67:d3:f4:7a:f2:3a:78:09:6b:1c:d7:
         c9:2b:b6:25:f5:80:3b:36:6a:6a:d7:16:03:99:60:51:b4:42:
         ea:bb:53:b5:fe:d8:87:85:e6:89:a0:65:d7:4d:34:51:ce:72:
         d7:e0:bd:12:05:09:26:2d:b1:a6:01:4a:a3:a4:65:68:59:95:
         18:88:b5:d2:07:ca:05:1b:b2:8c:52:f3:69:4d:66:2c:fc:2c:
         2e:57:ca:bf:fe:4f:76:64:75:e6:21:48:59:4c:6f:09:10:c9:
         8d:ad:3a:7e:06:1c:3a:f2:ec:6b:29:77:d8:b5:78:4a:0f:25:
         7f:56:b0:37:d1:50:80:53:77:da:28:9f:b3:5b:e2:09:4f:17:
         fc:92:23:20:13:92:20:e6:90:b5:89:01:33:cb:c7:d3:bf:79:
         ce:9a:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----