Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bwAc3ZEgHA9ASgGri8VLwyvNmMI.roa
File:                     bwAc3ZEgHA9ASgGri8VLwyvNmMI.roa (raw, json)
Hash identifier:          GVM8goVWC8BbEmIAQfAsqY3ziG3SrK499bSEfOnH5CY=
Subject key identifier:   6F:00:1C:DD:91:20:1C:0F:40:4A:01:AB:8B:C5:4B:C3:2B:CD:98:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DAA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bwAc3ZEgHA9ASgGri8VLwyvNmMI.roa
Signing time:             Tue 29 Sep 2020 09:54:49 +0000
ROA not before:           Tue 29 Sep 2020 09:54:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3498 (0xdaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6F001CDD91201C0F404A01AB8BC54BC32BCD98C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:58:fe:f7:9e:70:be:3a:dc:43:c3:ac:22:
                    44:d6:a2:07:56:1b:21:b4:c6:91:46:54:7c:c1:f2:
                    bd:8b:94:6b:29:de:b0:5d:90:b5:36:f5:db:5d:13:
                    79:21:a8:be:3e:d2:08:77:76:41:f4:29:5b:69:44:
                    dd:d9:2e:77:05:48:8c:bf:40:bd:58:99:ea:f1:de:
                    13:29:b9:cc:35:3c:f2:45:73:5b:d7:96:b7:86:7b:
                    a9:72:b5:8f:d1:0a:8d:d8:fc:cd:95:ed:e5:49:4c:
                    95:b7:05:b7:a3:86:b8:f7:68:91:35:f1:ad:e3:c1:
                    a2:50:e3:b7:49:a3:bc:eb:2b:8b:bf:45:6d:81:38:
                    52:b0:c0:67:08:da:c1:0c:48:81:0d:e1:b5:0d:0c:
                    5c:51:8f:17:a4:22:a1:72:65:4d:f0:ad:26:df:04:
                    ee:e5:e8:84:66:5b:d5:68:84:06:c6:b2:23:59:6a:
                    8e:3d:4d:12:6a:aa:17:f7:b6:eb:d5:fb:7a:fb:27:
                    5c:97:dd:f3:36:ba:72:d1:a3:d1:8a:4b:67:09:64:
                    10:1b:95:cf:d2:e0:f5:16:d9:fe:b0:6a:ee:37:84:
                    7f:f9:c6:df:bd:3e:c6:4c:b0:bd:7c:83:bf:b1:b4:
                    49:fb:ca:2a:37:4e:6d:71:8b:00:66:69:3b:b6:ab:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:1C:DD:91:20:1C:0F:40:4A:01:AB:8B:C5:4B:C3:2B:CD:98:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bwAc3ZEgHA9ASgGri8VLwyvNmMI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:0e:8b:1a:92:87:d4:48:44:5d:01:63:5c:4a:ef:ac:14:
         6c:44:92:6b:0e:66:fe:9c:ca:a8:1a:92:17:5b:99:cc:00:31:
         db:a1:d2:ca:ce:10:55:38:8c:d8:4b:b5:6e:cb:8a:1d:c7:1b:
         10:6f:d4:06:a3:49:eb:83:21:03:7a:40:74:e7:1a:1d:77:0b:
         6d:51:31:2c:24:6a:97:b4:74:29:a5:af:52:49:f7:c6:d8:27:
         46:fa:cf:0b:9d:64:f2:65:19:a7:62:6e:fd:ec:af:73:5d:cb:
         a6:7e:cf:bb:b6:b1:e0:de:2f:55:68:f2:e7:06:88:c4:4d:74:
         7c:bf:84:f3:16:67:61:04:08:09:f7:62:53:72:24:f8:3d:0a:
         71:52:2e:22:bd:08:91:aa:3a:a9:9c:26:9b:e7:60:ef:49:2d:
         17:48:6b:b9:f2:29:46:15:10:7b:37:96:25:f4:ed:7b:a3:10:
         e8:d1:1a:8a:9c:29:0f:9a:d2:6f:ff:5f:47:3f:85:f2:21:3c:
         81:35:0e:76:0b:d8:c8:22:31:a0:80:62:4d:99:35:1d:60:8f:
         a9:cb:4b:5b:09:ba:a1:ab:a0:04:9d:e8:7e:97:c6:a2:cc:22:
         54:fc:ad:a3:67:a2:34:3a:e4:58:91:04:74:3e:9a:d7:d7:3b:
         f1:3d:24:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----