Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAI_P8MrZLguQYssmHzq-TFD73c.roa
File:                     iAI_P8MrZLguQYssmHzq-TFD73c.roa (raw, json)
Hash identifier:          jSJQB+aloM9LkO0wlxFMQWWtRahJKCcfpMLnq4oVpaw=
Subject key identifier:   88:02:3F:3F:C3:2B:64:B8:2E:41:8B:2C:98:7C:EA:F9:31:43:EF:77
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B46
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAI_P8MrZLguQYssmHzq-TFD73c.roa
Signing time:             Wed 29 Sep 2021 02:46:23 +0000
ROA not before:           Wed 29 Sep 2021 02:46:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.114.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6982 (0x1b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=88023F3FC32B64B82E418B2C987CEAF93143EF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:79:65:58:1b:e4:d0:cb:ac:87:c4:2b:1b:
                    9a:32:46:6a:17:4f:11:d2:4e:76:26:7f:75:9d:6a:
                    53:72:64:d8:39:82:ec:65:1c:65:22:72:4a:49:f6:
                    11:41:51:01:de:c4:d5:a4:b2:2a:c9:3d:8b:df:e5:
                    df:58:e9:78:61:80:78:5c:80:0d:b2:d3:ac:7f:89:
                    a4:64:88:05:28:21:ce:e6:d6:4d:a3:df:94:be:35:
                    4e:ab:7c:b0:c6:42:a4:51:f6:d5:b1:2d:24:fc:e4:
                    58:07:48:99:13:5d:69:5e:17:ec:fc:5b:82:42:67:
                    68:59:52:b0:c4:f0:11:3a:2e:49:11:0a:d8:e5:cf:
                    c0:47:73:79:99:f5:5c:f1:03:50:ac:13:6d:34:f7:
                    7c:21:91:68:18:c8:fc:de:c9:e8:bd:68:f3:0a:b9:
                    66:0c:71:17:8a:a3:3b:1a:14:22:88:26:f2:43:73:
                    1f:ed:66:59:f4:65:17:0e:ab:83:96:4c:37:58:fd:
                    05:6f:b6:98:fa:26:26:46:3a:23:00:f2:78:4d:67:
                    d6:41:bb:a6:1a:4f:78:e7:70:80:82:a7:a7:4e:64:
                    14:b0:01:ce:66:df:90:a2:1c:16:2d:30:fc:eb:5b:
                    61:b5:77:0f:79:ae:47:dd:3e:4b:04:31:75:da:86:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:3F:3F:C3:2B:64:B8:2E:41:8B:2C:98:7C:EA:F9:31:43:EF:77
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAI_P8MrZLguQYssmHzq-TFD73c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:d9:89:3f:83:14:f6:65:71:24:89:9b:33:ac:e0:90:5a:
         f8:68:f3:39:45:5d:6b:8d:d0:69:7e:3f:49:96:9f:06:c3:a7:
         02:01:bf:28:be:32:17:7a:c0:60:09:6e:c4:89:49:f1:63:8d:
         fe:ce:e7:da:c3:a9:33:d5:fe:38:e2:2a:e5:4a:7a:de:db:84:
         3e:1f:46:52:66:d6:ca:e2:c9:b1:af:8c:d1:bf:10:e3:f4:fd:
         37:52:d1:c1:13:54:29:6f:27:f3:10:7f:5f:f2:fd:8d:91:2a:
         18:d5:1b:b0:6c:9d:a9:bc:e4:55:0e:d7:55:b9:8a:37:19:ba:
         ac:0d:d6:fc:e4:ef:ca:ec:1c:f9:3f:c6:44:96:88:33:f2:14:
         79:6e:56:af:18:7c:2a:d0:a8:44:27:4f:e9:87:d1:22:7c:2d:
         d4:64:24:3e:91:f3:cb:09:57:07:50:c6:99:48:c5:31:27:f0:
         ee:bc:50:81:6f:7f:9e:0b:23:e2:3e:53:bd:36:1f:ba:90:dc:
         5e:f0:a7:72:10:06:00:bd:74:39:0c:06:57:f4:36:62:78:16:
         41:9f:c0:2f:91:62:e0:6e:92:5e:2e:b2:8b:d9:5f:3f:c6:f3:
         c3:62:ae:35:c7:15:89:ae:3f:31:63:4b:a1:7f:20:4a:dc:5a:
         b2:77:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----