Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bHxGKGCWYeLrPwYqE293nKUhfv4.roa
File:                     bHxGKGCWYeLrPwYqE293nKUhfv4.roa (raw, json)
Hash identifier:          P0dnEZEy2TvOPIzbwn3296qPRzaVZk7tmU90PMRWXdU=
Subject key identifier:   6C:7C:46:28:60:96:61:E2:EB:3F:06:2A:13:6F:77:9C:A5:21:7E:FE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CF3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bHxGKGCWYeLrPwYqE293nKUhfv4.roa
Signing time:             Tue 29 Sep 2020 09:53:59 +0000
ROA not before:           Tue 29 Sep 2020 09:53:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3315 (0xcf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6C7C4628609661E2EB3F062A136F779CA5217EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:30:08:26:72:da:22:96:c5:5b:5c:61:38:
                    ad:9e:aa:e6:a4:15:71:a4:38:0b:a2:43:ef:d8:97:
                    b7:00:e3:39:e5:15:d2:0a:59:7a:12:8e:5c:b0:fe:
                    e3:fa:a7:64:87:14:55:38:5e:a9:16:82:06:a9:a2:
                    7a:70:a5:11:52:03:27:d7:2d:4a:54:1a:65:43:1c:
                    e6:0e:3a:72:09:8d:4f:09:c0:a3:93:91:07:0f:e4:
                    76:00:c6:31:44:36:7b:04:80:e1:9f:1c:af:f4:64:
                    f3:53:ec:cf:65:53:4f:b8:0a:d7:cd:23:c9:64:2e:
                    18:7c:a4:a2:81:82:05:1d:81:b7:54:0f:6c:1c:6a:
                    42:ba:2e:7c:85:ad:84:15:11:44:1e:9c:e9:1a:52:
                    e3:46:55:60:1b:34:e4:d8:69:9d:12:7e:4f:e3:16:
                    e6:c5:2d:f7:f2:f4:cc:25:e6:c0:3e:df:77:c8:7d:
                    90:ef:91:ad:2a:77:35:8e:d6:30:b5:76:0d:34:8d:
                    20:e5:b4:2b:79:e9:93:30:fd:06:ba:31:8d:67:db:
                    d0:c8:01:3b:d8:61:94:38:a5:45:46:7a:18:da:8c:
                    ef:22:4e:1d:4a:63:40:62:82:e1:b8:d4:bf:69:ca:
                    38:69:09:0e:7c:63:14:7a:36:76:6a:20:cd:9e:4f:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7C:46:28:60:96:61:E2:EB:3F:06:2A:13:6F:77:9C:A5:21:7E:FE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bHxGKGCWYeLrPwYqE293nKUhfv4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:2a:a9:1c:d9:a0:73:5c:8f:3d:cd:f0:73:3e:a2:0a:bf:
         5c:0d:bf:85:4b:51:24:38:b1:72:a9:b5:06:fd:ce:cd:53:90:
         9e:71:57:cd:09:e1:b9:99:a9:f3:4b:17:6f:ff:f4:ea:20:f1:
         0f:0d:c7:c8:91:48:36:5d:07:e1:00:64:83:45:8b:c8:81:e4:
         26:ea:e7:3d:54:2e:f7:90:94:cc:76:f3:c1:0e:15:5a:ad:cb:
         a0:88:ff:32:0d:a7:3e:c9:de:f9:bb:00:45:7b:fb:29:3c:3a:
         0d:b5:ed:49:a4:1a:43:3c:13:77:06:39:06:38:b3:02:06:4b:
         d9:cf:f5:88:bc:b6:85:08:d1:73:07:d5:ff:b1:43:cb:f5:8c:
         58:31:c0:d6:5a:41:66:9a:ee:dc:ad:83:8d:17:b6:e4:2d:95:
         25:cb:8e:32:70:6e:33:42:02:0b:56:19:da:da:68:04:98:98:
         d8:89:1e:4f:59:1d:ce:92:62:31:74:66:02:d9:97:1e:05:59:
         3c:10:cd:3d:28:da:6f:f4:73:07:db:53:ae:e7:93:3d:73:6d:
         ef:12:f7:70:1b:79:52:92:b4:30:10:3c:62:3b:73:2f:8d:dd:
         0c:60:33:9c:5c:be:80:03:7e:ca:6a:5f:3a:79:9b:16:99:98:
         de:e0:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----