Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j53Qkaig2-AvyY7dVr76Xrr8hic.roa
File:                     j53Qkaig2-AvyY7dVr76Xrr8hic.roa (raw, json)
Hash identifier:          65XELHg+Wxz5gpTm0dNH4WCK4hloNAWRW99fECbc4xw=
Subject key identifier:   8F:9D:D0:91:A8:A0:DB:E0:2F:C9:8E:DD:56:BE:FA:5E:BA:FC:86:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1593
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j53Qkaig2-AvyY7dVr76Xrr8hic.roa
Signing time:             Sun 07 Feb 2021 12:05:22 +0000
ROA not before:           Sun 07 Feb 2021 12:05:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.46.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5523 (0x1593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:05:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8F9DD091A8A0DBE02FC98EDD56BEFA5EBAFC8627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:8f:d3:fd:66:56:c0:fb:ab:39:7b:38:54:
                    60:26:0d:a1:5b:47:1a:20:1d:b2:8e:da:38:27:b6:
                    ae:a4:a6:87:ed:7c:27:04:65:08:b3:96:37:2b:f4:
                    0f:4d:70:8e:fb:36:d4:ca:39:3a:aa:62:93:0f:55:
                    3d:a1:1f:f9:15:f5:bf:c4:d3:6c:5b:24:34:da:5e:
                    62:c7:00:7e:15:7b:91:d4:a4:c9:a9:4e:d5:26:c1:
                    fc:b4:77:57:54:a6:92:e5:06:71:b6:f7:16:a4:cd:
                    4a:23:24:7e:9d:bb:b6:b9:23:aa:44:72:8a:d3:03:
                    59:5d:40:95:1b:ba:0d:e5:57:ef:6b:3e:0f:e8:e3:
                    e9:12:8c:e6:4a:89:aa:f9:33:aa:e5:c3:99:ba:e5:
                    75:b9:7d:11:60:0c:74:84:a6:12:a9:eb:fc:7d:42:
                    6f:47:84:b4:06:7a:d2:84:bb:df:40:1c:f0:68:6a:
                    25:31:44:cd:c0:9a:68:1f:6a:8a:89:c5:1a:c6:df:
                    4e:1e:3f:7d:c0:9c:31:ce:43:a6:11:4e:89:49:25:
                    c1:10:c7:2a:c1:7a:bf:ff:ee:da:1c:57:74:05:0f:
                    02:61:a8:0b:48:b9:88:ed:5b:a2:6e:dd:0c:0c:c0:
                    41:06:bc:8c:22:21:79:59:a9:8f:6e:eb:b3:bd:16:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:D0:91:A8:A0:DB:E0:2F:C9:8E:DD:56:BE:FA:5E:BA:FC:86:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j53Qkaig2-AvyY7dVr76Xrr8hic.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.0/26

    Signature Algorithm: sha256WithRSAEncryption
         58:76:8e:31:4d:13:95:93:ee:7a:50:7e:e9:52:02:19:60:5c:
         4f:0c:e2:70:8e:18:21:6d:21:df:82:24:d3:a4:56:e7:c4:9d:
         db:db:d5:77:ec:e0:b2:9c:07:dd:87:8e:e7:80:f9:9e:d7:9f:
         87:93:a7:73:cb:57:c2:50:77:30:f8:88:e8:af:9e:66:ff:10:
         7d:9e:d5:f9:fd:84:f2:db:7d:88:ae:73:c2:fe:ab:8d:c9:c8:
         be:8f:4d:a2:28:c8:ed:d0:67:f6:12:f6:6a:8b:27:7e:73:4f:
         18:36:8f:a8:28:74:ef:a6:3b:01:de:19:ff:99:db:4f:f5:e7:
         41:bd:c1:44:1d:2a:cf:9c:d2:50:9d:cc:4f:1a:06:37:b2:61:
         e3:6d:74:f5:b5:a2:57:d3:78:04:4c:9c:b2:c4:dd:2c:26:dd:
         66:e4:8e:5c:59:d4:e5:99:ce:12:0c:90:42:b0:ed:f5:72:89:
         63:43:40:c8:ac:aa:7b:ed:cb:25:c6:7f:99:3b:89:0f:74:44:
         7e:09:03:8a:1c:c9:a9:6a:03:0b:b0:6f:a6:64:f2:b0:c4:a2:
         ef:35:42:e4:4f:d8:7b:95:6d:df:4f:16:dc:fd:b3:5c:4c:93:
         d7:ab:f8:15:4e:5e:e0:fa:4c:4f:2e:9f:55:a9:77:c3:4b:b9:
         18:19:87:5b
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICFZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA1MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhGOUREMDkxQThBMERC
RTAyRkM5OEVERDU2QkVGQTVFQkFGQzg2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkE4/T/WZWwPurOXs4VGAmDaFbRxogHbKO2jgntq6kpoftfCcE
ZQizljcr9A9NcI77NtTKOTqqYpMPVT2hH/kV9b/E02xbJDTaXmLHAH4Ve5HUpMmp
TtUmwfy0d1dUppLlBnG29xakzUojJH6du7a5I6pEcorTA1ldQJUbug3lV+9rPg/o
4+kSjOZKiar5M6rlw5m65XW5fRFgDHSEphKp6/x9Qm9HhLQGetKEu99AHPBoaiUx
RM3AmmgfaoqJxRrG304eP33AnDHOQ6YRTolJJcEQxyrBer//7tocV3QFDwJhqAtI
uYjtW6Ju3QwMwEEGvIwiIXlZqY9u67O9FlODAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUj53Qkaig2+AvyY7dVr76Xrr8hicwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2o1M1FrYWlnMi1BdnlZN2RW
cjc2WHJyOGhpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
sS4AMA0GCSqGSIb3DQEBCwUAA4IBAQBYdo4xTROVk+56UH7pUgIZYFxPDOJwjhgh
bSHfgiTTpFbnxJ3b29V37OCynAfdh47ngPme15+Hk6dzy1fCUHcw+Ijor55m/xB9
ntX5/YTy232IrnPC/quNyci+j02iKMjt0Gf2EvZqiyd+c08YNo+oKHTvpjsB3hn/
mdtP9edBvcFEHSrPnNJQncxPGgY3smHjbXT1taJX03gETJyyxN0sJt1m5I5cWdTl
mc4SDJBCsO31coljQ0DIrKp77cslxn+ZO4kPdER+CQOKHMmpagMLsG+mZPKwxKLv
NULkT9h7lW3fTxbc/bNcTJPXq/gVTl7g+kxPLp9VqXfDS7kYGYdb
-----END CERTIFICATE-----