Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nh4ZLeA2m9nsYcdQWjKZfT791R4.roa
File:                     nh4ZLeA2m9nsYcdQWjKZfT791R4.roa (raw, json)
Hash identifier:          f3yml+0L1s7y5tgA+rxQviGJMvCNBk/FyEzfJp8cMJQ=
Subject key identifier:   9E:1E:19:2D:E0:36:9B:D9:EC:61:C7:50:5A:32:99:7D:3E:FD:D5:1E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B77
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nh4ZLeA2m9nsYcdQWjKZfT791R4.roa
Signing time:             Wed 29 Sep 2021 02:46:38 +0000
ROA not before:           Wed 29 Sep 2021 02:46:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7031 (0x1b77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9E1E192DE0369BD9EC61C7505A32997D3EFDD51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:50:7c:ab:9d:17:ec:37:8b:0f:0a:ad:8c:
                    60:04:ac:04:46:c6:1e:4e:63:2c:31:05:f4:7f:9b:
                    ba:12:1f:f7:91:c0:5d:0e:9b:fa:cb:61:21:5a:7e:
                    43:b8:38:f5:df:6f:6a:a4:c8:79:a3:ed:37:04:86:
                    c1:06:a0:f8:07:aa:65:5a:af:fa:8f:83:ab:77:85:
                    97:28:69:60:b6:69:f8:0d:c5:9a:35:4d:46:c8:1d:
                    51:cc:8a:4c:97:ea:01:83:73:0a:b7:1e:74:64:0a:
                    90:10:05:93:d7:2c:68:a1:a2:9b:6a:99:4a:a8:68:
                    53:9e:69:93:bd:bf:10:a6:2b:06:98:82:e6:29:14:
                    c6:66:11:5b:0f:57:c3:c1:91:49:1f:05:79:a9:da:
                    ff:2d:27:2d:67:d3:47:b1:45:96:10:cd:6b:19:1a:
                    57:41:3f:b0:7c:b8:ce:ab:fa:a2:d8:59:4c:0b:d8:
                    a0:7a:22:9a:07:90:47:2c:a7:85:53:0b:82:b1:e3:
                    fc:6b:e8:4f:c9:07:35:48:a5:92:fc:d8:6a:d1:87:
                    e3:e6:11:c8:78:42:03:c4:44:2e:7c:49:f4:d8:4b:
                    a6:76:fb:73:83:94:15:b4:99:f1:64:40:41:c7:da:
                    c5:b7:58:6d:dc:67:1e:fb:a1:56:04:96:2d:70:21:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1E:19:2D:E0:36:9B:D9:EC:61:C7:50:5A:32:99:7D:3E:FD:D5:1E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nh4ZLeA2m9nsYcdQWjKZfT791R4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:7c:0a:81:4d:94:56:bf:32:6f:64:31:4b:59:a4:bb:70:0e:
         13:c7:ff:f9:92:2b:cc:e5:b3:a8:21:1d:23:30:8c:84:9e:1d:
         46:72:45:00:fd:06:f4:ce:f7:e9:bc:57:aa:7d:5d:61:f4:69:
         cb:a5:aa:49:de:b4:51:1b:ab:dc:e2:65:3f:62:a9:a2:75:2f:
         33:01:50:16:00:c9:33:dd:7c:69:d7:36:88:11:bb:db:2a:3c:
         8e:1e:86:85:f8:59:35:31:df:fc:51:34:7a:37:5b:e0:9c:e9:
         bf:ec:4f:5a:b4:ba:0a:11:99:d9:8b:27:72:58:3c:f7:18:43:
         6a:c4:b2:fb:2f:56:9a:26:f5:f6:05:0d:66:c8:44:1b:a7:1c:
         af:0f:25:c8:22:79:8b:6d:de:18:b0:c3:39:93:e1:26:2d:60:
         5e:35:57:d4:40:2b:90:3d:d5:6b:36:f1:05:04:08:05:21:93:
         a4:c0:30:87:5a:70:a6:96:19:e0:66:fd:50:e4:09:8d:49:ec:
         20:da:a2:2c:85:54:93:08:f0:65:8f:21:61:36:66:91:bd:b6:
         71:4f:ff:95:5b:61:de:28:ae:ee:cd:24:df:b6:74:f2:74:49:
         79:d9:de:76:3a:55:df:fb:23:67:db:ec:02:9a:e2:2d:19:4a:
         f5:97:d3:10
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MzhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlFMUUxOTJERTAzNjlC
RDlFQzYxQzc1MDVBMzI5OTdEM0VGREQ1MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRMlB8q50X7DeLDwqtjGAErARGxh5OYywxBfR/m7oSH/eRwF0O
m/rLYSFafkO4OPXfb2qkyHmj7TcEhsEGoPgHqmVar/qPg6t3hZcoaWC2afgNxZo1
TUbIHVHMikyX6gGDcwq3HnRkCpAQBZPXLGihoptqmUqoaFOeaZO9vxCmKwaYguYp
FMZmEVsPV8PBkUkfBXmp2v8tJy1n00exRZYQzWsZGldBP7B8uM6r+qLYWUwL2KB6
IpoHkEcsp4VTC4Kx4/xr6E/JBzVIpZL82GrRh+PmEch4QgPERC58SfTYS6Z2+3OD
lBW0mfFkQEHH2sW3WG3cZx77oVYEli1wIbplAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnh4ZLeA2m9nsYcdQWjKZfT791R4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25oNFpMZUEybTluc1ljZFFX
aktaZlQ3OTFSNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sQgwDQYJKoZIhvcNAQELBQADggEBAEZ8CoFNlFa/Mm9kMUtZpLtwDhPH//mSK8zl
s6ghHSMwjISeHUZyRQD9BvTO9+m8V6p9XWH0aculqknetFEbq9ziZT9iqaJ1LzMB
UBYAyTPdfGnXNogRu9sqPI4ehoX4WTUx3/xRNHo3W+Cc6b/sT1q0ugoRmdmLJ3JY
PPcYQ2rEsvsvVpom9fYFDWbIRBunHK8PJcgieYtt3hiwwzmT4SYtYF41V9RAK5A9
1Ws28QUECAUhk6TAMIdacKaWGeBm/VDkCY1J7CDaoiyFVJMI8GWPIWE2ZpG9tnFP
/5VbYd4oru7NJN+2dPJ0SXnZ3nY6Vd/7I2fb7AKa4i0ZSvWX0xA=
-----END CERTIFICATE-----