Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mp-IUmcMDFLUk0UVILY7MzfmCdk.roa
File:                     mp-IUmcMDFLUk0UVILY7MzfmCdk.roa (raw, json)
Hash identifier:          emeoIec93e7KRduN4v4AV81LfRkEuapZmfEres72IbU=
Subject key identifier:   9A:9F:88:52:67:0C:0C:52:D4:93:45:15:20:B6:3B:33:37:E6:09:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B44
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mp-IUmcMDFLUk0UVILY7MzfmCdk.roa
Signing time:             Wed 29 Sep 2021 02:46:22 +0000
ROA not before:           Wed 29 Sep 2021 02:46:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6980 (0x1b44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9A9F8852670C0C52D493451520B63B3337E609D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:1a:63:57:1d:50:89:aa:2c:6f:6c:dd:8d:
                    49:23:b2:33:2a:81:e4:38:37:ae:75:bf:f5:5c:85:
                    cb:33:a2:db:e1:f6:0c:ec:9d:ff:a3:a9:5b:b7:00:
                    74:5b:31:8e:e6:c6:0a:d8:bc:94:de:c2:93:d3:9a:
                    00:71:57:3a:b8:e6:26:1c:ce:40:c5:a6:25:b5:c5:
                    f1:79:c9:ba:70:c0:58:02:12:c2:67:22:36:36:c9:
                    b6:fa:26:d4:a7:80:66:10:41:b8:fa:1f:7d:c8:42:
                    aa:6b:24:a7:56:87:59:70:64:18:06:11:3f:88:90:
                    79:d5:55:56:10:ae:1f:18:c0:91:c2:d3:2d:b2:17:
                    20:81:c2:a4:b1:31:80:69:80:ec:0d:42:81:7c:48:
                    f6:45:1e:ec:75:b0:64:92:04:11:e3:cc:e7:f3:66:
                    66:9e:1a:dd:3a:f2:b6:0a:db:78:c4:04:de:99:43:
                    2e:6e:b4:c9:53:9b:b1:79:06:f4:dc:4f:b2:76:ca:
                    dc:f2:f4:03:a2:dd:bc:16:5b:8b:ca:dd:4a:aa:23:
                    d5:3f:0f:de:61:ac:bb:31:a7:81:c5:5f:b0:1f:9a:
                    70:44:11:e3:78:4f:0c:26:b4:4e:09:eb:71:75:41:
                    8c:43:28:8f:2f:5b:86:35:f1:9e:74:cb:f3:bb:27:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9F:88:52:67:0C:0C:52:D4:93:45:15:20:B6:3B:33:37:E6:09:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mp-IUmcMDFLUk0UVILY7MzfmCdk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:40:82:b3:18:23:ba:84:97:ba:03:59:3e:a1:55:f7:f9:78:
         3d:8b:5b:7b:df:75:de:ce:6b:2e:62:89:e0:e8:90:22:25:99:
         8f:63:ab:90:24:2b:e2:7f:f2:ec:08:fd:da:21:fb:17:56:eb:
         1f:ea:2c:97:d1:d3:06:5f:fe:50:23:72:74:b4:f5:6f:3f:c0:
         ab:a6:45:16:b0:e6:ab:f6:70:ce:bb:76:f4:d9:7e:cd:a5:c9:
         ef:69:4b:d3:76:34:0b:14:e7:77:87:bd:b9:48:fb:0b:62:a1:
         b3:fc:7f:f9:dd:07:69:dd:bf:2f:e9:0c:c9:e2:f7:58:cb:df:
         c4:89:87:f5:67:ee:3e:3a:59:56:da:f6:38:56:c6:88:8c:ea:
         f8:01:d1:f8:d7:49:f1:b1:26:57:37:7b:71:88:4c:18:55:75:
         1a:14:81:6f:e4:04:bf:cb:db:85:9e:36:f8:19:09:44:bc:22:
         b0:12:1a:05:57:5b:d7:eb:af:a3:5f:76:8b:63:19:e2:89:92:
         fb:ef:e0:92:04:4f:5f:0e:d9:53:ba:23:18:ee:60:d9:09:b3:
         f5:a5:2e:04:9c:8a:8f:ac:fc:b2:14:28:76:4f:3c:35:c5:73:
         39:7a:5d:21:d6:2b:f5:50:0f:49:94:81:86:4f:59:80:61:c9:
         0f:18:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----