Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j22pMg_yI9fBZXWDVZrMI-uqjvw.roa
File:                     j22pMg_yI9fBZXWDVZrMI-uqjvw.roa (raw, json)
Hash identifier:          c+kIkn54mDL1E/uDWsInQEIYkD/OpvuvnEWG0AQz/U4=
Subject key identifier:   8F:6D:A9:32:0F:F2:23:D7:C1:65:75:83:55:9A:CC:23:EB:AA:8E:FC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j22pMg_yI9fBZXWDVZrMI-uqjvw.roa
Signing time:             Tue 29 Sep 2020 09:57:05 +0000
ROA not before:           Tue 29 Sep 2020 09:57:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3982 (0xf8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8F6DA9320FF223D7C1657583559ACC23EBAA8EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:4a:61:e6:bf:56:e0:46:5f:7a:95:fd:25:
                    34:a5:41:bc:98:20:4e:21:09:53:b1:a2:50:94:00:
                    2f:4a:8e:de:9e:c4:21:15:a3:ce:ad:cb:c5:75:16:
                    b7:2f:e5:08:e8:2d:bb:16:ca:af:db:80:73:aa:9f:
                    39:ab:c5:5c:25:ba:ef:fa:cb:f2:4d:17:a0:c8:f9:
                    0b:2f:5e:53:ca:d4:71:db:83:a8:63:9a:8f:eb:c9:
                    13:82:92:54:d5:b3:ff:4e:28:57:90:37:19:d3:aa:
                    41:7c:a8:3e:f1:20:28:90:22:20:d6:97:93:68:1e:
                    d8:c6:8f:5d:80:01:df:2a:e3:8b:42:13:d3:cf:70:
                    7f:57:d6:69:51:db:24:80:ae:1b:61:7f:d9:17:fb:
                    73:96:d7:a2:7a:a7:00:a0:a5:63:2b:1e:1b:e6:6b:
                    f3:d6:c2:9d:8c:7b:3f:50:cd:2a:53:7e:78:90:d2:
                    02:36:70:bc:72:76:c6:75:a7:8b:0c:93:bb:47:23:
                    4e:e0:71:9d:26:9b:c9:ae:b8:58:47:fb:17:45:54:
                    8b:86:db:77:32:c0:be:5f:12:d4:a5:ca:f1:09:22:
                    08:e4:2d:a2:2c:9a:3a:32:bd:3a:49:b3:0c:d8:f4:
                    20:78:36:11:04:cd:3a:41:c6:f2:cb:fc:30:16:26:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:A9:32:0F:F2:23:D7:C1:65:75:83:55:9A:CC:23:EB:AA:8E:FC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j22pMg_yI9fBZXWDVZrMI-uqjvw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:57:38:88:3a:0d:5a:8a:73:92:d7:09:e0:48:f3:26:3a:
         d3:90:26:c9:02:9e:fe:64:b3:b1:54:d7:2e:c0:92:32:f7:4a:
         75:b3:c4:03:20:8e:fb:ff:f4:f4:da:26:9c:ff:8c:09:0b:d5:
         2a:ae:6c:3e:8d:0d:87:ca:46:9d:6a:24:20:3b:19:2a:a1:c6:
         a2:77:c3:5a:e3:1c:38:40:42:fc:93:69:01:c1:65:a2:69:45:
         06:f1:fe:27:6b:4f:9d:bf:63:a2:38:1b:39:ce:53:6d:d8:20:
         0d:64:00:eb:60:f0:82:76:43:39:09:7f:d1:03:06:60:e5:a3:
         70:ac:3d:9c:17:e8:7f:25:e3:f4:40:a4:b9:c6:1e:b6:a7:da:
         a6:77:1d:a4:f5:a2:ef:df:84:50:5c:f2:97:0e:15:71:1d:db:
         1d:82:ab:09:cc:78:f1:e4:14:d1:ce:8d:15:ec:59:47:6e:c5:
         4e:87:fb:98:ab:01:50:80:c4:c4:dc:cc:b4:84:b6:14:17:2b:
         51:c0:e4:54:76:35:6b:45:ed:e3:45:2b:40:2b:aa:7b:7e:0b:
         5a:ea:97:69:46:80:99:e8:2c:74:68:97:bc:c3:0b:ef:d7:06:
         a4:78:1b:89:c9:c6:9b:b2:20:45:0b:68:44:d9:7f:24:b6:2e:
         f0:03:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----