Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bXuLbCoiGHv-M6mdzjm6mKf11qM.roa
File:                     bXuLbCoiGHv-M6mdzjm6mKf11qM.roa (raw, json)
Hash identifier:          qg4IJHetyvFfOF0cPFM1MezzZIlz8Q4IyeDqXTMrEm4=
Subject key identifier:   6D:7B:8B:6C:2A:22:18:7B:FE:33:A9:9D:CE:39:BA:98:A7:F5:D6:A3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16BD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bXuLbCoiGHv-M6mdzjm6mKf11qM.roa
Signing time:             Sun 07 Feb 2021 12:14:01 +0000
ROA not before:           Sun 07 Feb 2021 12:14:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5821 (0x16bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:14:01 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6D7B8B6C2A22187BFE33A99DCE39BA98A7F5D6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:42:18:e4:ec:71:09:33:66:4b:ff:f5:c7:
                    6b:6c:9f:ca:04:74:0f:96:f6:fa:bf:6f:b7:23:35:
                    26:b4:2a:e2:78:b8:08:71:0d:07:d9:c8:d0:24:e0:
                    93:c1:d6:48:14:a8:2c:58:a8:94:c0:9a:15:aa:f3:
                    af:de:3d:ea:45:54:22:88:e7:eb:f8:ba:dc:6d:4c:
                    1a:49:b0:1e:60:2f:a6:ad:d2:82:43:84:9a:dc:4d:
                    d9:92:d4:24:3d:17:ae:51:ed:b2:fa:e4:80:c0:67:
                    d7:0b:53:7b:5a:9c:32:10:d8:b9:d5:f0:3a:a7:fd:
                    8e:7c:1c:77:80:55:8e:d0:cc:d5:9b:ea:5f:e7:11:
                    b1:40:b7:31:54:e3:04:fd:1a:85:93:6d:db:5e:67:
                    f2:be:46:0d:53:d1:44:f4:47:13:2b:c8:2e:49:48:
                    f7:db:12:a7:9f:f1:bb:f6:76:49:58:47:f4:48:42:
                    2f:e4:af:c5:5b:e2:d3:4a:aa:eb:fe:fa:ec:c2:53:
                    c0:f2:21:4f:19:3a:de:af:b4:a7:e6:47:33:63:e5:
                    44:2b:a1:e7:27:5c:39:93:8e:ef:41:e6:6d:27:c9:
                    65:d4:27:ae:b7:75:d3:3e:6b:00:49:c1:31:55:e5:
                    c8:08:1f:ec:28:2e:6f:4f:1e:b2:5d:00:e6:ea:b3:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:8B:6C:2A:22:18:7B:FE:33:A9:9D:CE:39:BA:98:A7:F5:D6:A3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bXuLbCoiGHv-M6mdzjm6mKf11qM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:6a:be:44:62:f1:69:32:02:0e:9d:2a:8a:6b:9b:6b:df:
         69:75:db:ac:81:d0:bb:b5:bc:fc:66:93:c6:3c:f5:08:04:2b:
         7b:d5:47:a3:75:b0:67:3e:1a:cf:f4:a7:4f:30:fe:ec:ba:0f:
         6a:45:78:43:29:e0:42:c4:92:67:f2:6e:f9:20:11:59:9f:e6:
         e1:c2:85:97:0e:73:69:28:0a:fe:f4:b0:0b:82:b4:b4:23:9d:
         ec:de:29:18:7c:8f:f9:02:4d:a8:5d:55:f2:06:d3:11:4c:78:
         f2:94:4c:54:22:40:c5:be:94:5f:e9:09:7b:a5:ca:7d:5f:73:
         80:22:97:d4:77:bd:f4:3b:f4:a5:7a:b3:af:58:6f:e1:6b:19:
         17:67:78:b6:7a:b5:80:34:92:f8:31:b3:3b:4a:e4:02:44:3f:
         8e:52:b5:fd:2d:02:6d:36:66:8f:aa:5e:39:55:90:bd:5f:05:
         03:eb:43:70:a6:77:12:4f:37:50:82:47:77:41:cb:81:62:99:
         0d:99:68:c6:d1:30:3f:63:48:b0:72:3e:43:03:1f:c7:41:00:
         68:e0:04:c6:f5:97:7f:96:df:bf:27:32:51:da:12:a7:76:b6:
         d9:a6:00:cc:c4:62:34:82:8c:86:cb:a2:11:93:f2:d9:1f:bd:
         d4:40:36:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE0MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZEN0I4QjZDMkEyMjE4
N0JGRTMzQTk5RENFMzlCQTk4QTdGNUQ2QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7bUIY5OxxCTNmS//1x2tsn8oEdA+W9vq/b7cjNSa0KuJ4uAhx
DQfZyNAk4JPB1kgUqCxYqJTAmhWq86/ePepFVCKI5+v4utxtTBpJsB5gL6at0oJD
hJrcTdmS1CQ9F65R7bL65IDAZ9cLU3tanDIQ2LnV8Dqn/Y58HHeAVY7QzNWb6l/n
EbFAtzFU4wT9GoWTbdteZ/K+Rg1T0UT0RxMryC5JSPfbEqef8bv2dklYR/RIQi/k
r8Vb4tNKquv++uzCU8DyIU8ZOt6vtKfmRzNj5UQroecnXDmTju9B5m0nyWXUJ663
ddM+awBJwTFV5cgIH+woLm9PHrJdAObqs0P7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbXuLbCoiGHv+M6mdzjm6mKf11qMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JYdUxiQ29pR0h2LU02bWR6
am02bUtmMTFxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sVAwDQYJKoZIhvcNAQELBQADggEBAID7ar5EYvFpMgIOnSqKa5tr32l126yB0Lu1
vPxmk8Y89QgEK3vVR6N1sGc+Gs/0p08w/uy6D2pFeEMp4ELEkmfybvkgEVmf5uHC
hZcOc2koCv70sAuCtLQjnezeKRh8j/kCTahdVfIG0xFMePKUTFQiQMW+lF/pCXul
yn1fc4Ail9R3vfQ79KV6s69Yb+FrGRdneLZ6tYA0kvgxsztK5AJEP45Stf0tAm02
Zo+qXjlVkL1fBQPrQ3CmdxJPN1CCR3dBy4FimQ2ZaMbRMD9jSLByPkMDH8dBAGjg
BMb1l3+W378nMlHaEqd2ttmmAMzEYjSCjIbLohGT8tkfvdRANjA=
-----END CERTIFICATE-----