Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u88O-Ef--Ptq4vZNlhDPHO_zGZY.roa
File:                     u88O-Ef--Ptq4vZNlhDPHO_zGZY.roa (raw, json)
Hash identifier:          uKlXp23ef+Za/mqBaLwhO8UgAwpfB+srQhsNkGnwPKc=
Subject key identifier:   BB:CF:0E:F8:47:FE:F8:FB:6A:E2:F6:4D:96:10:CF:1C:EF:F3:19:96
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C03
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u88O-Ef--Ptq4vZNlhDPHO_zGZY.roa
Signing time:             Wed 29 Sep 2021 02:47:16 +0000
ROA not before:           Wed 29 Sep 2021 02:47:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7171 (0x1c03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BBCF0EF847FEF8FB6AE2F64D9610CF1CEFF31996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:1d:88:ed:bf:1a:f2:a0:22:2a:6a:f6:98:
                    3d:14:17:01:11:93:b6:f5:6e:5f:f4:c7:be:ae:ec:
                    1f:a0:4d:6b:d1:9c:37:79:8a:88:90:d4:3a:25:2b:
                    1e:3d:7e:78:78:ba:d4:ff:2f:8a:c0:25:bb:41:bf:
                    78:48:09:31:2f:55:c9:5e:68:b7:b1:c2:a8:ed:ec:
                    da:d1:40:d0:37:28:d3:4a:3a:76:f8:42:e0:a1:d8:
                    ce:77:9c:32:93:17:18:6a:95:ee:cd:90:a0:8f:9f:
                    aa:a1:e5:23:f0:95:58:70:87:b9:f4:c9:38:e9:23:
                    8a:67:51:e4:ec:d8:35:cf:49:1f:2b:61:d0:51:02:
                    3f:fd:be:14:19:9c:78:cd:31:be:ef:35:19:12:2a:
                    21:3a:8e:a0:1e:23:96:06:7f:e0:ca:75:24:90:90:
                    cb:3a:6b:5b:60:c8:28:81:64:8d:ff:40:a6:88:b1:
                    0f:84:8f:75:f3:b8:92:23:5f:02:ed:a2:36:62:83:
                    3d:c2:dc:4e:ba:a5:ac:57:f3:a5:5e:84:75:54:4f:
                    2c:3a:32:a4:de:14:a8:b0:e6:a8:f2:84:6a:e2:83:
                    b8:de:7d:90:cf:d0:15:cf:d7:06:de:76:41:32:4d:
                    1a:ad:4f:21:cf:c2:23:79:f9:c0:d8:06:2d:b1:9a:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CF:0E:F8:47:FE:F8:FB:6A:E2:F6:4D:96:10:CF:1C:EF:F3:19:96
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u88O-Ef--Ptq4vZNlhDPHO_zGZY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:4d:39:95:26:07:3c:24:53:56:57:50:c1:1b:fa:76:9d:
         ba:ea:95:41:cd:37:92:16:7e:c6:40:65:7a:55:70:57:4d:98:
         a6:f1:6e:88:c3:bf:9b:64:f3:0b:61:4a:83:ac:91:00:d9:3d:
         da:88:a7:f9:13:dc:c7:9b:6c:04:c8:ac:dc:fb:0d:b5:7b:33:
         5f:11:2d:44:6d:a8:b7:b5:6b:8b:23:4a:0c:55:f9:73:5d:6f:
         cf:6a:00:0a:c6:48:2e:55:31:f0:3e:ce:6c:6a:a8:fb:0a:98:
         09:4f:36:3b:23:f8:40:e5:db:cd:e4:fd:6a:3c:b4:6e:fc:d5:
         d4:4d:6c:e9:d3:0c:f7:3a:17:33:17:5a:1d:1d:1a:9b:42:15:
         87:0e:a7:57:66:bc:06:52:3d:4d:78:18:01:02:e4:af:de:18:
         77:90:06:f2:bc:00:dc:19:08:5d:ff:2d:bc:10:0c:87:7f:eb:
         21:0e:59:b3:0e:21:7d:94:19:3e:11:2f:f2:21:9b:82:d3:29:
         f5:36:c5:c3:47:6d:30:57:b5:12:ca:81:ae:a7:10:e8:27:f3:
         ba:a3:0f:1e:36:6d:47:48:59:7a:2a:bc:23:73:dd:d1:f9:96:
         bb:c2:f8:4f:79:2b:8d:69:6c:cb:84:56:be:26:39:35:0f:b9:
         88:81:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----