Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ec8khNFd8-8jYUKqA15G6GPVUmc.roa
File:                     ec8khNFd8-8jYUKqA15G6GPVUmc.roa (raw, json)
Hash identifier:          et0Mk2XiilIswckKqfmZMckXgtlie6/Dv5s6kXJwz2w=
Subject key identifier:   79:CF:24:84:D1:5D:F3:EF:23:61:42:AA:03:5E:46:E8:63:D5:52:67
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CE3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ec8khNFd8-8jYUKqA15G6GPVUmc.roa
Signing time:             Wed 29 Sep 2021 02:48:21 +0000
ROA not before:           Wed 29 Sep 2021 02:48:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7395 (0x1ce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=79CF2484D15DF3EF236142AA035E46E863D55267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5e:f9:28:8a:97:41:80:7a:70:91:52:03:74:
                    70:41:6b:7a:e6:58:6e:97:9d:23:da:3c:6d:24:8c:
                    27:e7:08:37:ab:11:9c:7c:6b:ed:a6:33:bd:32:ff:
                    02:39:0e:c6:50:c8:ca:6c:52:a7:56:c2:9c:22:62:
                    8d:0f:1d:9b:38:68:29:9e:44:d0:b2:a5:fc:d0:a0:
                    d6:88:b6:65:b7:d8:ee:0b:13:88:95:a4:e5:ef:1f:
                    29:05:dd:bc:80:71:58:98:aa:f4:ca:a0:10:52:fa:
                    b1:87:33:05:58:5c:6f:da:72:53:e7:6b:0a:7e:ae:
                    38:53:1b:fc:e8:aa:d7:89:20:72:45:26:cd:cb:df:
                    38:eb:24:50:8d:53:f6:21:65:08:c5:5f:aa:e7:bc:
                    fd:de:9c:f4:3b:a5:9a:f5:25:78:ae:a2:2a:38:3a:
                    a3:47:48:68:1b:77:13:14:02:a2:f5:18:f3:85:19:
                    f1:56:32:ce:53:de:27:83:3e:48:d5:ec:5f:49:a9:
                    5c:fe:a6:6a:93:c3:a1:42:cd:5b:90:eb:ae:9c:0d:
                    84:db:dc:af:f6:bc:dc:9b:5b:8e:b1:58:d9:be:f7:
                    ed:c2:f8:6b:8c:0e:fa:7e:f7:0f:19:f6:cf:05:4a:
                    a7:6e:49:94:10:ca:da:c0:b7:b3:4f:73:a3:89:ce:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CF:24:84:D1:5D:F3:EF:23:61:42:AA:03:5E:46:E8:63:D5:52:67
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ec8khNFd8-8jYUKqA15G6GPVUmc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:57:c9:bc:86:02:aa:f7:b3:56:a3:bd:94:27:b6:48:cb:
         de:49:99:dc:e9:08:25:60:de:7b:95:9d:28:0e:6b:60:fc:5f:
         31:d3:6b:4c:ce:f5:57:96:7f:4d:34:ab:81:1a:08:48:38:0f:
         e2:16:6a:38:54:d9:c7:55:fd:89:96:eb:aa:c0:dd:31:86:d6:
         d0:81:1a:f9:14:62:f4:c1:8a:67:7e:6b:b4:e6:2f:dc:c5:79:
         c0:f6:48:4e:42:b6:04:1c:a8:6a:f2:6d:93:97:67:3f:5f:3f:
         e1:49:3b:bb:aa:58:9a:a5:9d:a6:f6:fa:a2:a9:84:ef:55:36:
         71:48:45:66:bb:eb:47:c0:20:a4:06:bf:4e:c4:20:bf:53:d5:
         08:ec:7c:a6:30:d0:d4:da:76:b3:00:22:cd:b9:94:3a:00:ba:
         ee:13:1e:4e:cb:b6:fb:31:f2:31:4a:cf:8a:b5:59:b0:81:1f:
         05:10:42:49:ce:29:43:e4:7f:09:79:4f:60:27:71:f8:6d:db:
         0a:96:47:85:f7:46:b0:e2:06:da:0f:d0:4e:43:ad:58:70:39:
         8e:2e:09:10:b0:60:1c:99:3c:47:8a:73:84:e8:01:e5:c8:24:
         5e:a5:37:48:5f:b3:72:18:fe:e9:14:b1:ba:7d:90:f6:6d:ff:
         20:c5:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----