Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kPHYr8rRUxltdIVuZ5-rpn-BNX8.roa
File:                     kPHYr8rRUxltdIVuZ5-rpn-BNX8.roa (raw, json)
Hash identifier:          ud1oiciGTuWml2G0/LxLnh39BXIwEQbg0qyLjyBQcQc=
Subject key identifier:   90:F1:D8:AF:CA:D1:53:19:6D:74:85:6E:67:9F:AB:A6:7F:81:35:7F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DBB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kPHYr8rRUxltdIVuZ5-rpn-BNX8.roa
Signing time:             Tue 29 Sep 2020 09:54:54 +0000
ROA not before:           Tue 29 Sep 2020 09:54:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3515 (0xdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=90F1D8AFCAD153196D74856E679FABA67F81357F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3c:ce:57:89:33:41:a4:2f:6c:f3:33:87:c3:
                    20:3b:30:09:7a:72:a3:7e:e8:7f:33:8f:5e:97:2d:
                    c8:40:53:c7:2e:75:e1:5d:43:3f:46:c7:5a:cd:f3:
                    70:87:49:8d:e7:39:e8:61:cc:1f:e6:9c:18:5f:64:
                    3f:fc:4e:52:a3:54:29:b1:98:39:8d:16:bd:31:ce:
                    e3:49:5d:df:8d:86:b1:78:83:eb:56:35:45:ee:83:
                    c0:f7:d3:bd:71:71:3d:67:d5:87:36:3f:b5:77:47:
                    2c:69:46:89:b2:e6:a2:57:bb:d1:f6:6a:6f:1e:4f:
                    e2:e9:40:26:18:ab:33:c7:5f:e3:a8:f8:d2:70:ba:
                    50:bf:74:a6:fd:b8:09:66:d9:bf:ab:aa:1c:9c:95:
                    a9:97:cf:aa:15:57:cd:2a:81:a0:1e:e3:00:b0:ed:
                    6f:8b:d8:d6:6d:38:7e:d3:47:9d:a7:63:42:e3:fd:
                    e0:f4:79:3e:60:2c:75:d1:55:39:b0:ae:f0:e0:88:
                    84:12:9a:ad:42:88:3c:4b:dd:62:f7:28:5f:59:5e:
                    9c:31:84:2c:fe:d1:90:78:6f:85:38:4e:14:73:fd:
                    d7:67:ea:bb:85:f5:b0:65:89:8c:8f:2d:f1:a3:7d:
                    67:d4:60:88:62:aa:3d:ec:5e:49:c6:8c:21:42:3c:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:D8:AF:CA:D1:53:19:6D:74:85:6E:67:9F:AB:A6:7F:81:35:7F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kPHYr8rRUxltdIVuZ5-rpn-BNX8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:d3:b9:e6:20:fa:47:6b:b6:21:3f:41:f8:ee:27:33:56:78:
         9e:c9:6c:75:e4:c1:8a:13:72:40:e7:c7:cc:a2:ac:5a:1a:8f:
         7a:fe:ef:6a:5b:25:a8:79:68:e9:09:7d:00:70:a5:54:7b:93:
         8e:e5:d0:50:85:47:48:6a:ff:ac:39:84:54:ec:ce:82:76:0f:
         4f:da:c1:52:ab:a2:0f:43:6e:22:45:2e:0c:c6:da:22:75:08:
         8d:7f:aa:eb:57:2b:87:7c:cb:4a:d4:99:41:96:7d:af:5f:26:
         5f:f9:8a:79:7a:21:21:9d:92:3b:37:6f:27:ae:bd:2b:03:48:
         38:f5:70:8c:70:3a:ec:58:1b:47:ab:03:26:8c:d0:bc:3e:74:
         74:5c:ee:2d:e9:97:65:ac:f6:6d:5a:c4:58:46:62:0c:0d:ba:
         19:de:27:45:a4:dd:74:26:07:bd:57:e0:29:ac:7e:c1:c5:ad:
         6b:df:0a:65:c2:41:2d:7d:46:bd:73:ad:b7:0d:86:6a:3c:3c:
         8e:d2:9b:93:16:60:fd:26:4e:27:ba:74:a2:69:97:39:42:e1:
         07:91:c4:e7:b0:45:c4:04:3b:85:34:7e:8c:f0:69:81:13:d4:
         a4:72:42:fb:a4:bc:a6:a4:d0:c9:9d:f5:09:86:30:e4:bb:06:
         39:d5:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----