Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cdPmImw52tIW7BXbohG1kKeP_pQ.roa
File:                     cdPmImw52tIW7BXbohG1kKeP_pQ.roa (raw, json)
Hash identifier:          vk1LAFfCtA0PV9Kk7ty4ZhLsCDeFVz0j1bAVNKaxH1k=
Subject key identifier:   71:D3:E6:22:6C:39:DA:D2:16:EC:15:DB:A2:11:B5:90:A7:8F:FE:94
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DC2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cdPmImw52tIW7BXbohG1kKeP_pQ.roa
Signing time:             Tue 29 Sep 2020 09:54:57 +0000
ROA not before:           Tue 29 Sep 2020 09:54:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3522 (0xdc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=71D3E6226C39DAD216EC15DBA211B590A78FFE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:c6:83:3a:53:9d:a9:ac:75:a5:e1:01:ca:
                    32:db:a9:a0:b5:65:17:a9:3c:0d:71:de:cf:a9:4a:
                    bd:27:55:45:59:ea:ff:d9:f8:ff:94:0d:fd:38:7d:
                    11:f8:64:34:55:6d:79:45:b0:b1:f0:f3:f4:41:a7:
                    b2:b0:ca:7a:53:e0:db:80:db:86:c6:1b:f1:6d:78:
                    23:64:0e:68:a5:be:ed:25:67:ca:5b:06:db:8f:ff:
                    2e:b1:b1:0a:c8:d6:e3:9c:02:f1:36:40:14:41:84:
                    91:2c:5f:96:9f:55:c9:54:ee:2b:27:b6:43:5c:3c:
                    65:f5:35:45:86:f1:8b:7a:84:16:74:b8:e2:6d:a3:
                    56:1f:51:03:28:bd:8d:39:11:d0:0b:a5:dd:23:54:
                    75:d8:0b:40:5e:e3:1f:31:19:61:0d:43:66:0a:a0:
                    06:11:9b:1a:f3:09:03:bf:36:51:4c:44:bc:d4:b7:
                    d3:be:55:d7:14:71:7f:ff:57:8a:c3:6d:e8:6f:8c:
                    3c:7c:3c:73:5c:40:ca:f5:1a:9f:8b:38:23:90:bf:
                    af:00:d0:c1:95:70:88:3d:b3:a6:11:2d:db:86:ff:
                    20:d3:71:e9:6f:3e:a2:54:71:55:d4:1f:33:3c:86:
                    f2:ed:3c:b1:82:8e:cd:77:70:68:e2:a1:88:3e:a3:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:E6:22:6C:39:DA:D2:16:EC:15:DB:A2:11:B5:90:A7:8F:FE:94
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cdPmImw52tIW7BXbohG1kKeP_pQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:43:41:9e:2c:06:e6:1d:78:f7:3e:73:8b:10:9a:cc:bc:
         c2:76:c7:aa:58:67:a9:3a:40:4c:7b:a8:8e:1a:3d:7d:7b:c6:
         c1:98:f2:be:04:5c:ec:89:69:af:0d:d6:e9:38:00:bb:76:c5:
         33:26:af:39:7a:33:70:07:27:ac:95:58:ec:4b:8c:78:7b:3b:
         d7:51:66:a0:97:b8:db:73:e1:0c:b0:d5:31:ac:8e:ef:3f:39:
         cb:a5:dc:6f:01:bd:ec:c8:66:1c:97:03:98:78:94:87:86:ac:
         9c:ad:a3:f9:50:0d:54:d6:01:2b:47:3d:4a:23:b9:21:f4:f3:
         e5:c3:dd:bd:ad:66:b7:8a:5e:9e:10:f4:ef:99:e0:d3:65:5d:
         68:76:ff:b4:65:7d:52:bb:fe:93:1d:65:5e:8c:a6:be:dd:9b:
         53:11:57:95:0a:4f:64:3e:36:42:67:bb:86:fa:ae:f1:57:16:
         5c:e2:23:41:25:76:74:8f:41:bc:c6:7b:ce:e1:16:4f:d0:56:
         60:02:70:5d:fd:cb:57:64:02:b2:06:e3:4c:42:5a:bc:ec:c1:
         2f:32:c4:85:72:e8:30:64:24:72:e1:b9:0a:75:8f:90:e7:85:
         7e:5f:b6:d4:d0:d4:60:fe:6d:9b:80:c5:71:05:b0:e6:92:db:
         4d:63:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----