Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/am2l-8GsI-9ogqvWlw6puCYa-Lg.roa
File:                     am2l-8GsI-9ogqvWlw6puCYa-Lg.roa (raw, json)
Hash identifier:          eCCLDZ9IKoty2QxMIsnjRZf1JWrr4IPcyXdgJeXF8i8=
Subject key identifier:   6A:6D:A5:FB:C1:AC:23:EF:68:82:AB:D6:97:0E:A9:B8:26:1A:F8:B8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B48
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/am2l-8GsI-9ogqvWlw6puCYa-Lg.roa
Signing time:             Wed 29 Sep 2021 02:46:24 +0000
ROA not before:           Wed 29 Sep 2021 02:46:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.118.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6984 (0x1b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6A6DA5FBC1AC23EF6882ABD6970EA9B8261AF8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:48:8e:8b:29:38:4a:4f:f3:d1:fb:e9:f9:
                    02:80:0b:74:98:99:a9:5c:30:ca:1d:cc:d9:87:79:
                    ed:65:4a:18:81:7f:9c:17:8e:3e:41:95:b1:28:59:
                    3f:a3:85:07:61:f5:a0:06:c3:38:1e:59:c4:8c:13:
                    9d:cc:36:28:8b:3e:1b:6d:10:0d:b4:b7:70:a1:fd:
                    58:29:db:31:41:72:16:de:90:e6:3f:ec:f0:15:36:
                    c8:08:8c:3a:29:4f:21:7b:28:93:e6:a8:64:bb:91:
                    a3:b6:24:0f:5a:a5:8d:cd:b4:9f:1b:75:de:8f:ef:
                    28:03:4a:dd:1c:d0:38:74:24:3e:05:4e:4a:52:76:
                    1b:b3:7c:d6:3f:aa:72:a8:cb:d0:73:1a:ed:b3:ea:
                    7c:68:70:18:d3:01:20:69:73:01:5c:96:00:f9:0f:
                    c1:6c:bd:e5:0e:c0:3a:19:ef:b2:3d:7e:42:f4:de:
                    25:57:78:10:19:35:e2:10:fe:f1:0f:b1:23:af:04:
                    8a:c1:c0:d8:97:5b:08:85:5c:00:91:68:78:e2:ce:
                    0a:08:8c:d0:76:32:eb:5b:c1:6d:93:4d:83:0a:ed:
                    93:3f:23:b5:92:aa:fe:bc:93:a7:c0:df:0d:d2:99:
                    9a:ee:61:58:f3:1a:05:e1:0a:5b:cc:c2:49:b1:f9:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:A5:FB:C1:AC:23:EF:68:82:AB:D6:97:0E:A9:B8:26:1A:F8:B8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/am2l-8GsI-9ogqvWlw6puCYa-Lg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:7f:dd:39:7c:e7:81:2b:b0:f9:d2:51:59:95:5c:df:1c:
         02:66:85:08:a7:5e:8e:2a:9a:69:1a:fb:ae:1d:24:43:43:ad:
         ce:09:89:ea:00:2f:51:52:ea:f7:b7:e0:ba:35:49:0b:05:b2:
         73:05:98:6f:de:de:e0:60:06:34:17:f5:3a:9e:9a:bc:80:87:
         1e:c1:4b:09:ca:0a:af:ef:19:b7:84:5b:e9:3e:bd:bb:ec:1b:
         99:33:fc:90:6b:ed:dd:d9:c4:bb:3c:76:a1:ab:33:b0:e2:39:
         27:04:e2:dc:37:dc:ab:09:69:ac:f4:86:75:cc:5b:14:1e:70:
         74:52:3c:ae:ae:93:76:ca:f6:b4:4e:76:6c:2a:06:07:53:8d:
         df:28:e6:f6:bc:49:f1:fb:2c:f7:e4:8e:87:45:e3:34:ed:fa:
         46:43:2b:ad:57:c5:1f:dd:bd:b9:e0:d6:d4:22:d0:b4:af:fc:
         5c:5f:1f:ef:24:88:da:73:25:aa:08:58:8d:00:75:9a:a0:13:
         b9:0a:8c:f3:2e:af:c5:46:ff:24:ef:cd:f1:c1:44:b2:40:70:
         dc:01:9e:88:3c:ca:69:81:4c:90:9a:df:e3:c6:bb:29:b2:8f:
         2e:35:97:e8:69:0f:c4:0f:a1:c5:1e:48:03:0f:81:96:35:1e:
         cb:45:4d:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MjRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZBNkRBNUZCQzFBQzIz
RUY2ODgyQUJENjk3MEVBOUI4MjYxQUY4QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIwEiOiyk4Sk/z0fvp+QKAC3SYmalcMModzNmHee1lShiBf5wX
jj5BlbEoWT+jhQdh9aAGwzgeWcSME53MNiiLPhttEA20t3Ch/Vgp2zFBchbekOY/
7PAVNsgIjDopTyF7KJPmqGS7kaO2JA9apY3NtJ8bdd6P7ygDSt0c0Dh0JD4FTkpS
dhuzfNY/qnKoy9BzGu2z6nxocBjTASBpcwFclgD5D8FsveUOwDoZ77I9fkL03iVX
eBAZNeIQ/vEPsSOvBIrBwNiXWwiFXACRaHjizgoIjNB2MutbwW2TTYMK7ZM/I7WS
qv68k6fA3w3SmZruYVjzGgXhClvMwkmx+ZrRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUam2l+8GsI+9ogqvWlw6puCYa+LgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FtMmwtOEdzSS05b2dxdlds
dzZwdUNZYS1MZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
sXYwDQYJKoZIhvcNAQELBQADggEBABsvf905fOeBK7D50lFZlVzfHAJmhQinXo4q
mmka+64dJENDrc4JieoAL1FS6ve34Lo1SQsFsnMFmG/e3uBgBjQX9TqemryAhx7B
SwnKCq/vGbeEW+k+vbvsG5kz/JBr7d3ZxLs8dqGrM7DiOScE4tw33KsJaaz0hnXM
WxQecHRSPK6uk3bK9rROdmwqBgdTjd8o5va8SfH7LPfkjodF4zTt+kZDK61XxR/d
vbng1tQi0LSv/FxfH+8kiNpzJaoIWI0AdZqgE7kKjPMur8VG/yTvzfHBRLJAcNwB
nog8ymmBTJCa3+PGuymyjy41l+hpD8QPocUeSAMPgZY1HstFTa4=
-----END CERTIFICATE-----