Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iduhUzXnt2RerGwuUAtG7JHv6-M.roa
File:                     iduhUzXnt2RerGwuUAtG7JHv6-M.roa (raw, json)
Hash identifier:          3CkzAromBaz7zSSa4p4EBq/RRJcBuyg/Bda9aGIDuxA=
Subject key identifier:   89:DB:A1:53:35:E7:B7:64:5E:AC:6C:2E:50:0B:46:EC:91:EF:EB:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1425
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iduhUzXnt2RerGwuUAtG7JHv6-M.roa
Signing time:             Sun 07 Feb 2021 11:57:33 +0000
ROA not before:           Sun 07 Feb 2021 11:57:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5157 (0x1425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:57:33 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=89DBA15335E7B7645EAC6C2E500B46EC91EFEBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:c9:b2:57:08:5d:5a:cb:6f:72:95:6a:01:
                    89:c3:b1:9e:14:da:92:f7:76:b8:27:f7:72:32:69:
                    f2:76:a0:e0:cc:3a:ce:44:4a:93:02:e1:dd:16:3e:
                    57:a5:39:f6:92:83:bb:8d:39:48:d9:d6:71:bb:e5:
                    05:f8:32:64:a1:46:b3:b7:fd:03:e1:35:24:78:d4:
                    1b:ed:ba:30:8f:61:fd:e5:82:eb:1a:b8:fb:1d:d2:
                    f6:a7:74:a9:77:86:71:ac:95:1e:9b:45:77:0a:1a:
                    97:55:15:5b:c3:d2:55:8e:38:eb:8a:04:ab:d9:91:
                    5a:f8:da:80:91:91:b6:e4:36:29:20:39:d8:37:15:
                    5f:58:93:08:5a:52:ae:25:08:71:a1:fb:2d:5e:3d:
                    7f:e9:b0:4f:a5:4c:21:bc:d9:a5:f3:7c:6e:93:7c:
                    14:41:ca:62:40:0e:f0:32:84:e9:0f:b5:33:66:62:
                    71:84:54:68:4c:fa:2f:9e:b4:f3:6e:24:4b:17:3d:
                    5c:03:61:af:74:4a:d7:68:b0:59:4d:8a:d5:86:05:
                    f3:2f:3f:52:8b:53:b3:7b:5c:8d:0a:5f:77:8a:85:
                    8e:1d:ae:56:b8:e1:bb:65:3d:47:84:8c:fc:7c:14:
                    00:df:e0:eb:d3:0a:d6:f5:84:71:61:3b:40:cf:48:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:A1:53:35:E7:B7:64:5E:AC:6C:2E:50:0B:46:EC:91:EF:EB:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iduhUzXnt2RerGwuUAtG7JHv6-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:ee:e3:07:7f:ca:61:c5:26:52:46:0b:86:74:6d:b4:2a:
         21:bf:bd:66:a6:2d:d9:f8:d2:d8:63:02:e5:1d:1a:e9:e0:13:
         30:2a:8e:9c:bc:7f:88:74:1f:fb:e4:78:56:30:cf:52:ad:e2:
         a4:fc:20:2e:26:c9:6d:aa:f4:77:2b:42:d2:f1:5a:86:35:65:
         db:d2:0c:30:10:32:1d:57:82:f6:7a:bd:e9:db:f0:a7:b0:f9:
         45:89:d5:cc:27:2c:c4:3f:10:8a:d1:47:b7:de:79:b6:3e:50:
         6f:cf:c3:6c:a3:e8:a0:83:c3:51:a5:6c:ae:c5:c0:69:71:7e:
         d4:90:28:fe:fc:88:ce:d0:fc:e8:3f:b2:69:1b:9b:f0:28:41:
         33:03:24:cd:0c:c5:08:11:b1:c2:01:61:9e:fe:8f:3a:b3:35:
         2c:ca:23:ac:0b:f1:29:eb:8d:ee:38:0d:9b:a1:5e:9e:a5:d0:
         a6:c4:5a:c6:fa:69:fd:b1:22:6c:f5:1b:1f:bc:15:6c:6c:6a:
         65:dd:fa:52:b4:d7:6e:00:c3:b9:58:f0:eb:52:0c:96:a4:d6:
         66:30:ae:06:68:9b:16:44:96:09:6b:b9:a0:56:3a:a1:8a:dc:
         b8:37:d2:0a:a9:f8:52:50:80:37:3b:1d:49:26:96:9f:ea:ed:
         5b:b4:0d:a2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU3MzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg5REJBMTUzMzVFN0I3
NjQ1RUFDNkMyRTUwMEI0NkVDOTFFRkVCRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR/8myVwhdWstvcpVqAYnDsZ4U2pL3drgn93IyafJ2oODMOs5E
SpMC4d0WPlelOfaSg7uNOUjZ1nG75QX4MmShRrO3/QPhNSR41BvtujCPYf3lgusa
uPsd0vandKl3hnGslR6bRXcKGpdVFVvD0lWOOOuKBKvZkVr42oCRkbbkNikgOdg3
FV9YkwhaUq4lCHGh+y1ePX/psE+lTCG82aXzfG6TfBRBymJADvAyhOkPtTNmYnGE
VGhM+i+etPNuJEsXPVwDYa90StdosFlNitWGBfMvP1KLU7N7XI0KX3eKhY4drla4
4btlPUeEjPx8FADf4OvTCtb1hHFhO0DPSLLxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiduhUzXnt2RerGwuUAtG7JHv6+MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lkdWhVelhudDJSZXJHd3VV
QXRHN0pIdjYtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
sCAwDQYJKoZIhvcNAQELBQADggEBAJRK7uMHf8phxSZSRguGdG20KiG/vWamLdn4
0thjAuUdGungEzAqjpy8f4h0H/vkeFYwz1Kt4qT8IC4myW2q9HcrQtLxWoY1ZdvS
DDAQMh1XgvZ6venb8Kew+UWJ1cwnLMQ/EIrRR7feebY+UG/Pw2yj6KCDw1GlbK7F
wGlxftSQKP78iM7Q/Og/smkbm/AoQTMDJM0MxQgRscIBYZ7+jzqzNSzKI6wL8Snr
je44DZuhXp6l0KbEWsb6af2xImz1Gx+8FWxsamXd+lK0124Aw7lY8OtSDJak1mYw
rgZomxZElglruaBWOqGK3Lg30gqp+FJQgDc7HUkmlp/q7Vu0DaI=
-----END CERTIFICATE-----