Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lV44IC6L5tNUUBkONoazfabt9o4.roa
File:                     lV44IC6L5tNUUBkONoazfabt9o4.roa (raw, json)
Hash identifier:          CpAlItyVS/LMXuVLCNcZq1WFYA0Zww1JtTsVgPoyyuc=
Subject key identifier:   95:5E:38:20:2E:8B:E6:D3:54:50:19:0E:36:86:B3:7D:A6:ED:F6:8E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       153D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lV44IC6L5tNUUBkONoazfabt9o4.roa
Signing time:             Sun 07 Feb 2021 12:03:34 +0000
ROA not before:           Sun 07 Feb 2021 12:03:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.114.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5437 (0x153d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=955E38202E8BE6D35450190E3686B37DA6EDF68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:8f:bc:c6:91:1b:f8:68:3c:91:eb:89:4c:
                    65:ba:4e:32:00:24:8b:e0:e2:40:3b:ca:09:ed:d6:
                    d4:dd:73:47:3b:ea:c0:88:18:c6:b8:d7:ea:86:be:
                    67:9d:b1:db:f3:96:f8:96:77:a2:87:b3:1b:6b:e6:
                    58:dd:46:3a:4d:13:b2:91:4d:27:e5:ee:28:4f:80:
                    ec:f5:84:fd:1c:66:c4:4a:55:59:3a:e9:c0:56:eb:
                    60:85:9e:58:1d:02:dd:f5:8d:d3:12:ab:b5:bb:69:
                    a6:83:6a:79:c5:51:5e:f6:c6:0f:9b:9a:03:2c:9f:
                    bc:e9:9a:2c:4d:19:ec:37:3b:b8:b4:0a:e3:c6:d7:
                    c5:21:79:4d:b4:f8:fd:44:ac:4f:b0:79:4d:59:1f:
                    cc:c9:b7:14:fa:64:5a:64:da:e4:63:a3:c8:08:88:
                    34:42:4d:7e:a3:14:03:49:cc:ba:9d:64:89:e3:5c:
                    93:44:66:ed:75:31:6a:8e:31:4e:6c:8c:bf:96:9d:
                    8f:c9:1a:d4:f3:a6:0a:8d:96:07:49:a3:82:8c:74:
                    8c:52:1a:d8:1f:d3:21:32:d3:bd:a8:36:f9:e0:d9:
                    20:a8:d1:06:2c:4d:fd:5f:0d:84:fa:ed:bc:5a:ac:
                    f3:79:6b:8f:8d:99:a2:d5:34:55:f0:91:81:ee:28:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5E:38:20:2E:8B:E6:D3:54:50:19:0E:36:86:B3:7D:A6:ED:F6:8E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lV44IC6L5tNUUBkONoazfabt9o4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:ef:cd:6a:ad:43:14:ed:27:e9:a5:81:f7:62:86:f2:b7:
         56:6c:83:e8:f9:da:cc:17:ea:d3:01:80:bd:aa:e8:21:cc:70:
         a4:5a:98:f9:54:5d:d3:73:7e:c6:91:b7:f5:87:e0:22:45:69:
         f9:4c:c8:d3:62:7a:7c:eb:70:76:d0:d7:50:50:b7:0c:7f:c4:
         e3:ff:f5:9e:55:86:64:26:d9:c6:61:bc:b3:f6:5b:71:3e:4a:
         f6:fd:86:92:d6:dd:b0:63:0d:96:cf:85:ab:03:8e:2a:8f:9f:
         0f:00:77:88:24:ff:bc:d3:d5:cc:dd:ce:d1:cf:6c:f6:0b:8c:
         88:7e:c8:bd:5d:1a:c2:55:02:79:d8:f6:1e:2b:87:e5:c7:22:
         d0:cd:1e:ad:b9:fd:8d:25:5e:d1:e6:7f:ef:44:a2:4f:07:3b:
         02:82:e1:f1:33:4b:d8:66:20:83:00:d6:19:d4:20:7e:35:53:
         53:78:37:2b:7b:e6:17:aa:fb:72:cf:4a:c8:ad:ed:19:c3:8c:
         3c:96:d1:4e:0c:55:5e:05:45:96:4c:28:f6:89:e6:91:6c:85:
         b2:1a:72:a6:c3:b4:ed:ed:28:61:f9:4a:7f:82:c8:e3:b1:d7:
         59:c6:fd:e8:26:7a:f1:3e:7b:cc:63:1c:ae:87:7b:a4:b6:99:
         60:de:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----