Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_twpCq0d_PZOVeRO5LuJqWSPaqE.roa
File:                     _twpCq0d_PZOVeRO5LuJqWSPaqE.roa (raw, json)
Hash identifier:          vLqGHqi4B33Dgql7P4p3iSGEXVkE2lLbruFmvVYBvPA=
Subject key identifier:   FE:DC:29:0A:AD:1D:FC:F6:4E:55:E4:4E:E4:BB:89:A9:64:8F:6A:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DC5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_twpCq0d_PZOVeRO5LuJqWSPaqE.roa
Signing time:             Tue 29 Sep 2020 09:54:58 +0000
ROA not before:           Tue 29 Sep 2020 09:54:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3525 (0xdc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FEDC290AAD1DFCF64E55E44EE4BB89A9648F6AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:17:eb:30:b7:9c:20:89:02:c0:2a:d7:f6:
                    5e:a8:28:9f:8c:fa:72:57:14:66:ce:e3:04:dc:77:
                    22:39:36:70:a6:04:55:ce:7b:55:15:00:13:4d:2a:
                    ce:06:04:86:f0:ec:16:e4:6e:27:47:46:17:a1:d3:
                    2f:94:3d:b0:73:6f:29:99:54:d0:27:6b:fb:c4:cc:
                    bb:38:fb:21:09:00:71:3f:58:92:b7:6c:84:ce:02:
                    32:8f:c5:da:08:8b:83:86:b9:f6:54:9d:0b:3a:24:
                    3f:cd:90:dc:9b:ba:48:2c:a5:2d:2e:d5:84:c7:7d:
                    ba:54:83:58:c8:bc:5d:92:81:3e:77:92:cd:a8:4b:
                    85:d4:40:d8:ac:7b:fb:6a:78:a1:aa:d8:de:ea:84:
                    9a:f3:9d:3b:31:07:dc:74:ff:63:ba:4e:d3:dc:a8:
                    ca:72:fb:85:a0:06:86:3e:c9:00:62:d8:97:5b:77:
                    4e:0b:87:af:9d:b0:9e:02:24:12:94:0e:91:88:cd:
                    23:28:9b:c1:60:e2:5d:55:ea:2a:fc:25:64:48:ed:
                    29:7d:6a:fe:53:f5:d7:db:b4:9a:de:87:4d:d0:cb:
                    72:4e:72:68:ad:c9:43:bf:d1:5e:3f:e4:f9:b5:7c:
                    10:8f:45:57:c9:26:78:74:42:0f:84:ef:62:e2:98:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:29:0A:AD:1D:FC:F6:4E:55:E4:4E:E4:BB:89:A9:64:8F:6A:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_twpCq0d_PZOVeRO5LuJqWSPaqE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:82:69:7b:a1:16:61:12:96:dd:10:6e:25:8a:57:95:9b:
         8b:07:d2:7a:02:3b:00:e5:56:15:e8:2c:23:9a:fe:6d:fc:24:
         7f:d7:7e:2d:32:9c:d2:3d:4f:a1:96:88:b0:db:f3:4b:38:ba:
         c8:ca:be:5f:11:fa:c5:28:28:ec:16:08:b1:0f:27:52:2f:fc:
         2e:07:8d:9d:19:62:e8:f7:ce:b4:3a:a6:ba:92:6a:5b:33:b9:
         1d:2f:22:d2:3f:18:6a:2d:ca:44:6b:dd:8c:e2:02:b6:74:86:
         cb:c3:ac:d1:eb:f7:76:7a:10:47:8e:e6:71:78:88:93:2b:db:
         7b:d8:a5:90:13:f4:ed:9a:3d:ea:1f:0a:27:a1:ec:77:70:ab:
         49:f8:a2:26:05:e4:72:05:d9:b3:ca:da:e2:ed:65:8e:bd:8d:
         f1:83:28:46:da:74:01:19:b6:6d:8a:31:85:b2:c6:04:b8:7a:
         5a:33:a7:09:b9:94:82:58:bf:24:39:21:8f:79:be:21:77:97:
         8e:4b:cb:43:da:bf:68:bd:81:d2:90:34:5a:3e:48:bb:70:92:
         50:4f:b9:fb:d2:17:e0:1c:2c:cb:3e:dc:ee:1d:52:69:8e:2f:
         9c:c2:9f:eb:ad:95:c0:4a:1f:1e:3a:c6:e5:90:26:f0:83:74:
         38:35:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----