Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tN7yWtZDY7XxoJNesK0B6nXwOyc.roa
File:                     tN7yWtZDY7XxoJNesK0B6nXwOyc.roa (raw, json)
Hash identifier:          uMiZWbtz9hx4/+i1SPxHtMIiai+BMGqT93FMAd9fe2k=
Subject key identifier:   B4:DE:F2:5A:D6:43:63:B5:F1:A0:93:5E:B0:AD:01:EA:75:F0:3B:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tN7yWtZDY7XxoJNesK0B6nXwOyc.roa
Signing time:             Wed 29 Sep 2021 02:46:45 +0000
ROA not before:           Wed 29 Sep 2021 02:46:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7059 (0x1b93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B4DEF25AD64363B5F1A0935EB0AD01EA75F03B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:a9:25:ae:39:dc:85:40:be:f1:eb:55:4b:
                    ab:cb:9f:c6:d3:fa:60:33:4c:d9:9d:b4:dd:65:62:
                    0e:f1:9e:c9:c9:c8:ed:0c:bd:37:ea:28:09:32:e5:
                    48:56:5c:73:f7:69:60:ab:ea:70:66:44:23:68:87:
                    f0:dd:f1:2b:4d:f2:e3:23:d7:cd:e4:e8:e0:62:00:
                    18:93:ef:90:43:7f:01:45:1a:fa:d8:2e:bb:ce:ae:
                    b9:31:ce:c2:42:01:73:7b:c8:8e:67:61:78:bb:46:
                    98:30:a0:2a:f6:24:ad:95:d6:09:ea:fc:e5:a5:ce:
                    6d:b6:58:40:bc:9e:1f:e0:44:d5:d7:4c:88:f5:db:
                    47:fb:87:d0:23:83:6d:2f:a0:39:74:52:87:d9:2d:
                    c1:3d:7f:d8:3a:2e:7c:85:9c:e9:b5:52:21:4e:d5:
                    a1:44:02:21:e9:60:85:be:d4:b2:3f:dc:f5:1e:54:
                    a3:a9:cc:cf:31:e5:97:30:35:de:be:b6:80:49:a4:
                    f9:75:85:a4:bb:7c:4f:7e:3c:25:ac:7b:43:36:58:
                    ae:bd:1c:c6:52:9a:dc:ec:c7:de:5e:b4:0d:f8:ee:
                    16:45:9d:93:b0:cb:cf:57:cc:24:2d:41:99:ad:0f:
                    8b:16:cb:f9:db:af:35:34:86:77:23:a9:ee:fa:30:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DE:F2:5A:D6:43:63:B5:F1:A0:93:5E:B0:AD:01:EA:75:F0:3B:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tN7yWtZDY7XxoJNesK0B6nXwOyc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:b3:20:9c:ab:5c:4a:32:47:9b:fe:1b:ca:11:3e:34:54:89:
         25:9d:d8:05:29:b6:8e:68:94:2c:8d:91:49:fa:ab:50:e6:dc:
         62:d4:50:0a:5b:db:24:11:96:77:e5:79:1d:81:81:20:42:b9:
         84:a2:b4:3c:e7:9f:df:a1:2a:01:86:e3:a0:a9:28:66:84:ed:
         06:ab:6f:c3:5c:b6:dd:0b:e6:e3:c9:d3:a8:83:b2:b0:1f:fb:
         a4:be:0c:e5:aa:b4:a8:ff:2f:00:8b:8b:18:2d:6e:2c:07:63:
         72:08:37:1f:6c:46:8c:d5:84:48:37:2f:ee:07:80:2d:fd:d2:
         8b:25:36:d9:c5:31:74:2e:10:c6:e5:e2:97:54:7b:22:32:d3:
         e2:7b:b1:eb:03:c7:f1:87:77:30:e2:d9:96:08:9a:49:1d:6e:
         85:12:9b:e7:2c:1f:21:ab:05:30:73:4a:59:85:6f:21:a5:76:
         f0:e0:1f:2d:40:36:df:47:8d:89:3b:55:ec:ee:c8:3a:0d:f2:
         ad:cb:fd:0d:67:82:35:cb:6b:14:6d:d9:27:c4:5f:14:74:8d:
         76:06:33:11:e4:de:8b:e0:1c:79:02:d9:60:7d:d1:93:d4:93:
         7f:e9:15:ad:71:21:67:65:d6:3c:f8:cb:18:b7:f8:71:54:de:
         1a:b9:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----