Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQcD4xZG75JjYU5ELWOCVpK3-iw.roa
File:                     uQcD4xZG75JjYU5ELWOCVpK3-iw.roa (raw, json)
Hash identifier:          xHsP1fl0ye2EvG6/LgaILMV7ceJRddKzW58MmsbINPQ=
Subject key identifier:   B9:07:03:E3:16:46:EF:92:63:61:4E:44:2D:63:82:56:92:B7:FA:2C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C02
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQcD4xZG75JjYU5ELWOCVpK3-iw.roa
Signing time:             Wed 29 Sep 2021 02:47:15 +0000
ROA not before:           Wed 29 Sep 2021 02:47:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7170 (0x1c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B90703E31646EF9263614E442D63825692B7FA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:d9:f6:c2:89:ee:d7:72:98:fe:4d:5d:d2:
                    c3:00:59:15:d7:7b:c6:1f:cb:b5:d5:da:03:6d:b6:
                    0c:b0:92:67:6e:3b:1c:a2:4c:85:a9:ea:aa:4e:e8:
                    0d:9c:a4:a0:eb:bb:af:1f:15:cf:f5:eb:c2:04:a3:
                    e9:43:25:6c:98:60:79:1a:f9:47:99:1b:22:55:d1:
                    9d:94:4e:1a:d3:58:dd:de:8f:d4:43:76:9c:5b:fc:
                    37:3a:3c:dd:61:35:94:90:3e:f6:34:69:f1:57:3e:
                    c8:54:77:ec:2b:40:50:86:7e:c2:cd:b6:78:ff:78:
                    66:b9:fd:f4:57:8f:54:7c:ac:31:ed:56:f4:a4:72:
                    6f:22:43:fb:7e:23:4b:55:04:39:f4:a8:f7:93:a5:
                    5b:2b:1a:13:f9:1c:5b:d8:00:e8:f6:a4:e5:98:00:
                    c9:02:3a:1f:75:2e:aa:06:e6:19:fa:e7:98:ce:a0:
                    45:c7:29:dc:b9:d6:48:cd:02:2c:89:c3:08:86:a4:
                    dc:fc:e4:7a:9e:85:b3:1f:e5:be:00:76:2c:d2:db:
                    0c:91:cf:f4:84:6d:78:6b:b8:c2:e7:d2:d1:e6:b0:
                    88:71:29:32:95:19:1b:12:bc:b9:79:e2:4f:d1:25:
                    52:44:75:10:cf:4a:4a:f1:c3:62:62:53:d7:f4:5a:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:07:03:E3:16:46:EF:92:63:61:4E:44:2D:63:82:56:92:B7:FA:2C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQcD4xZG75JjYU5ELWOCVpK3-iw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:39:13:06:f7:8d:34:b8:c0:5c:4c:ba:09:ac:b6:4c:37:93:
         ac:fe:47:5f:b8:73:24:d6:a3:b4:19:ed:79:ec:25:16:e2:4e:
         db:e1:5c:2e:bb:06:27:b4:e1:f6:18:8f:e8:28:9a:8f:ad:f6:
         47:c9:9a:c9:05:a8:e3:a5:93:a2:25:40:f7:48:d2:b5:f3:77:
         d4:c6:b8:be:43:73:f1:ae:6d:21:7e:2b:0d:4d:b8:d2:5a:01:
         74:e0:e4:09:81:02:ac:ab:5f:70:3c:40:c9:05:c9:58:6e:1f:
         2b:bd:c2:4e:41:2f:55:ca:4f:d4:84:2a:4a:fa:2a:25:25:ec:
         52:fe:fc:e0:62:b7:b2:da:d6:cb:0b:14:53:c3:25:84:bc:58:
         60:8e:aa:31:a8:c4:86:8c:e8:56:62:31:b8:e6:5e:dd:db:87:
         5d:ea:38:d0:12:3e:02:43:62:4a:71:48:ff:af:82:74:7f:9a:
         2c:01:3d:19:d7:d9:8e:06:70:94:fa:09:3c:40:f1:bf:a8:3b:
         be:9a:29:78:00:c5:83:da:94:c4:97:9a:fb:61:87:da:97:0a:
         f9:65:c2:49:b5:46:8f:d2:14:18:cf:3d:9c:f3:0b:68:6f:a7:
         b9:91:a4:ea:b4:c6:74:3d:9e:2e:2c:49:62:40:31:a5:b0:05:
         79:61:93:5b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MTVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI5MDcwM0UzMTY0NkVG
OTI2MzYxNEU0NDJENjM4MjU2OTJCN0ZBMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnN9n2wonu13KY/k1d0sMAWRXXe8Yfy7XV2gNttgywkmduOxyi
TIWp6qpO6A2cpKDru68fFc/168IEo+lDJWyYYHka+UeZGyJV0Z2UThrTWN3ej9RD
dpxb/Dc6PN1hNZSQPvY0afFXPshUd+wrQFCGfsLNtnj/eGa5/fRXj1R8rDHtVvSk
cm8iQ/t+I0tVBDn0qPeTpVsrGhP5HFvYAOj2pOWYAMkCOh91LqoG5hn655jOoEXH
Kdy51kjNAiyJwwiGpNz85HqehbMf5b4AdizS2wyRz/SEbXhruMLn0tHmsIhxKTKV
GRsSvLl54k/RJVJEdRDPSkrxw2JiU9f0WsRHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuQcD4xZG75JjYU5ELWOCVpK3+iwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VRY0Q0eFpHNzVKallVNUVM
V09DVnBLMy1pdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sUAwDQYJKoZIhvcNAQELBQADggEBAJg5Ewb3jTS4wFxMugmstkw3k6z+R1+4cyTW
o7QZ7XnsJRbiTtvhXC67Bie04fYYj+gomo+t9kfJmskFqOOlk6IlQPdI0rXzd9TG
uL5Dc/GubSF+Kw1NuNJaAXTg5AmBAqyrX3A8QMkFyVhuHyu9wk5BL1XKT9SEKkr6
KiUl7FL+/OBit7La1ssLFFPDJYS8WGCOqjGoxIaM6FZiMbjmXt3bh13qONASPgJD
YkpxSP+vgnR/miwBPRnX2Y4GcJT6CTxA8b+oO76aKXgAxYPalMSXmvthh9qXCvll
wkm1Ro/SFBjPPZzzC2hvp7mRpOq0xnQ9ni4sSWJAMaWwBXlhk1s=
-----END CERTIFICATE-----