Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/quL6E3VAAAnKvFfxr2C4bXP41eM.roa
File:                     quL6E3VAAAnKvFfxr2C4bXP41eM.roa (raw, json)
Hash identifier:          RynSugU3X5yz6D6qe8WYYtS9Jx0Pg0MaK+Rcj4ycflU=
Subject key identifier:   AA:E2:FA:13:75:40:00:09:CA:BC:57:F1:AF:60:B8:6D:73:F8:D5:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E33
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/quL6E3VAAAnKvFfxr2C4bXP41eM.roa
Signing time:             Tue 29 Sep 2020 09:55:28 +0000
ROA not before:           Tue 29 Sep 2020 09:55:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3635 (0xe33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AAE2FA1375400009CABC57F1AF60B86D73F8D5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:3e:0a:d4:ee:e7:c2:3d:97:50:30:d7:fb:
                    fc:e9:98:c5:58:60:1c:66:ea:1c:0a:1f:61:90:50:
                    f7:0c:b7:ab:ac:8e:0c:6b:f4:11:b2:ed:f8:5e:b8:
                    57:ed:c5:33:27:9b:22:da:57:77:d6:43:28:2b:ca:
                    7d:11:3f:a9:9e:61:7b:27:7a:c8:7b:68:c1:bb:58:
                    5a:95:7d:48:cd:c9:39:f9:2b:62:90:fe:35:35:dd:
                    93:fd:4d:aa:15:2d:a3:bc:61:bb:26:e8:d3:86:9d:
                    cd:93:24:0b:63:f5:20:34:d3:2d:dc:99:ed:2c:c3:
                    6d:13:84:fd:95:3d:69:fb:ff:a1:5e:fe:d9:01:d8:
                    23:80:35:2b:db:e9:08:8f:1c:c8:6f:af:7a:f8:2e:
                    35:72:79:ee:6b:e3:f9:44:7e:b7:2a:44:4b:be:73:
                    51:c0:3b:c3:64:43:1b:8c:e8:66:55:76:c3:3f:a7:
                    28:40:b2:a1:bb:df:a9:c9:67:98:e4:dd:d5:a7:ab:
                    f0:d0:00:9c:e0:08:07:16:73:48:a7:97:3e:82:d9:
                    15:ec:73:70:d0:0c:0c:26:34:75:82:65:ed:53:2a:
                    69:83:1f:01:3f:45:51:4c:d1:3f:b8:cd:ae:79:ca:
                    b1:95:54:b0:3a:c7:2f:d6:cd:eb:92:a0:50:a5:4e:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E2:FA:13:75:40:00:09:CA:BC:57:F1:AF:60:B8:6D:73:F8:D5:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/quL6E3VAAAnKvFfxr2C4bXP41eM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:74:44:a2:b2:ea:ab:e1:4f:f5:43:77:93:62:8f:58:f3:22:
         dc:8e:7c:72:f8:8a:c6:e1:04:f4:c3:4d:b3:b3:b3:2c:2e:fe:
         df:a7:65:c3:e1:40:51:1f:31:db:92:31:53:e5:c8:dc:51:dc:
         80:17:b6:87:94:5f:ec:f2:78:28:8e:eb:53:16:e9:69:4d:1f:
         61:d0:70:94:9f:80:74:43:65:81:21:94:89:fc:72:67:c2:dc:
         ae:d4:ec:45:81:ab:0a:1b:61:37:46:a4:78:a6:39:4e:40:54:
         c3:73:15:20:7a:d0:da:b9:2b:35:ce:f0:60:b2:65:0f:35:3f:
         4a:23:dc:2a:df:47:67:c8:7a:2e:9a:f8:e4:68:c9:c7:c5:87:
         0b:eb:72:e6:17:11:eb:8a:74:26:69:a5:3a:bb:c6:5b:b6:0d:
         1b:ea:64:87:3f:be:63:fb:a8:8b:0e:16:3d:c5:14:81:17:1e:
         14:2f:49:ae:4c:e0:ec:7f:9d:09:c7:b2:bf:21:c9:8d:51:64:
         ef:d9:8b:76:2e:30:c0:a4:8e:88:30:c7:a9:05:16:50:5d:75:
         5a:c6:3b:75:2b:0b:a6:58:f1:78:ab:66:4a:fc:a1:2b:3f:4b:
         bb:d1:7e:57:11:40:9e:60:6d:3e:c6:62:a5:dc:eb:bf:49:bd:
         85:a2:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----