Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQjrSrYlZFnL94A_j9C5d9TjJKU.roa
File:                     uQjrSrYlZFnL94A_j9C5d9TjJKU.roa (raw, json)
Hash identifier:          ZXP5HUkgLFnegpzdUFSD0mb5RLQ3bbC3rLvRmMIbgG8=
Subject key identifier:   B9:08:EB:4A:B6:25:64:59:CB:F7:80:3F:8F:D0:B9:77:D4:E3:24:A5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E38
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQjrSrYlZFnL94A_j9C5d9TjJKU.roa
Signing time:             Tue 29 Sep 2020 09:55:29 +0000
ROA not before:           Tue 29 Sep 2020 09:55:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3640 (0xe38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B908EB4AB6256459CBF7803F8FD0B977D4E324A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:d0:d0:6d:0d:6d:87:fb:08:14:d7:1a:d1:
                    71:ad:4b:37:e2:08:ae:3a:4e:3e:4c:5c:22:15:22:
                    94:ff:90:a5:e2:98:5e:55:40:c5:bd:0c:4c:2e:42:
                    8b:c6:b6:e1:bd:56:0a:f2:51:54:a7:4e:c9:d4:bb:
                    42:68:12:13:0f:6a:81:e4:fa:e7:7b:8f:4b:1a:2c:
                    07:fd:a4:5b:a6:d2:f0:d9:62:23:ed:2d:5c:16:33:
                    c1:a2:95:73:00:35:50:c0:cc:68:a3:96:07:4f:1c:
                    73:b6:cd:0f:76:1b:4d:c2:a7:36:26:8e:f8:86:e6:
                    7b:05:8f:5f:bb:cb:f3:42:12:fc:cb:5a:ca:2c:8f:
                    48:93:00:cc:74:41:a2:e6:39:5b:db:ce:30:15:b5:
                    f4:71:4e:32:80:56:5a:11:ad:dd:1e:50:2a:9b:69:
                    16:f4:01:ce:86:27:0e:c5:f5:be:04:ac:9f:06:77:
                    f9:3c:ef:80:2f:e6:ae:9a:1d:a1:02:82:e2:d2:4f:
                    9c:55:b8:77:f6:62:ec:41:6f:2c:07:1d:88:05:2e:
                    b4:ab:4e:89:85:b2:8c:e4:34:81:22:56:a9:30:72:
                    2e:28:9d:9a:e1:1e:d8:d5:d0:e3:09:a1:e9:d2:d3:
                    b1:b1:e1:b5:4a:c1:56:28:96:6c:3c:eb:f7:45:23:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:EB:4A:B6:25:64:59:CB:F7:80:3F:8F:D0:B9:77:D4:E3:24:A5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQjrSrYlZFnL94A_j9C5d9TjJKU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:67:41:28:83:ec:1a:64:76:20:ff:89:5c:a3:a9:fa:66:d1:
         91:20:8d:21:01:4c:ed:6b:f8:1a:ec:0b:bd:9e:bc:89:06:60:
         19:f8:7c:6a:ca:21:20:69:89:88:3b:98:96:0f:f7:c5:76:43:
         10:32:9b:59:bc:a3:03:ed:1b:17:81:2b:04:a0:ff:b0:20:ff:
         75:96:dc:df:0f:13:86:1e:91:1e:12:14:6d:04:63:70:c0:74:
         5c:a6:1f:15:ec:c4:3b:c1:6e:2b:45:7e:2b:da:7e:6d:96:86:
         e9:23:8f:8f:64:a3:2a:b5:23:2d:e0:f9:07:86:65:84:1d:10:
         8a:40:54:de:d0:2a:c5:08:03:18:1d:d8:93:72:de:13:6c:bb:
         9a:7b:83:3f:eb:64:7d:eb:03:95:d3:fc:27:12:49:a4:c9:c1:
         69:80:ca:4e:13:e7:7d:52:d9:ee:20:97:6b:b7:96:88:5b:fa:
         2c:3c:01:e4:08:e7:85:84:e6:93:3b:0d:87:31:48:76:60:6e:
         bc:39:19:7d:bd:0e:1f:26:56:07:43:ba:eb:52:b9:a6:77:18:
         74:b3:96:58:33:fe:e0:35:12:ac:5f:dc:19:a6:6e:b8:aa:44:
         d1:e9:51:4b:4f:ec:87:e1:67:a1:a0:1b:6e:fb:4b:97:73:63:
         e1:21:2b:27
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI5MDhFQjRBQjYyNTY0
NTlDQkY3ODAzRjhGRDBCOTc3RDRFMzI0QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAbtDQbQ1th/sIFNca0XGtSzfiCK46Tj5MXCIVIpT/kKXimF5V
QMW9DEwuQovGtuG9VgryUVSnTsnUu0JoEhMPaoHk+ud7j0saLAf9pFum0vDZYiPt
LVwWM8GilXMANVDAzGijlgdPHHO2zQ92G03CpzYmjviG5nsFj1+7y/NCEvzLWsos
j0iTAMx0QaLmOVvbzjAVtfRxTjKAVloRrd0eUCqbaRb0Ac6GJw7F9b4ErJ8Gd/k8
74Av5q6aHaECguLST5xVuHf2YuxBbywHHYgFLrSrTomFsozkNIEiVqkwci4onZrh
HtjV0OMJoenS07Gx4bVKwVYolmw86/dFIzvpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuQjrSrYlZFnL94A/j9C5d9TjJKUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VRanJTcllsWkZuTDk0QV9q
OUM1ZDlUakpLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sQwwDQYJKoZIhvcNAQELBQADggEBADhnQSiD7BpkdiD/iVyjqfpm0ZEgjSEBTO1r
+BrsC72evIkGYBn4fGrKISBpiYg7mJYP98V2QxAym1m8owPtGxeBKwSg/7Ag/3WW
3N8PE4YekR4SFG0EY3DAdFymHxXsxDvBbitFfivafm2Whukjj49koyq1Iy3g+QeG
ZYQdEIpAVN7QKsUIAxgd2JNy3hNsu5p7gz/rZH3rA5XT/CcSSaTJwWmAyk4T531S
2e4gl2u3lohb+iw8AeQI54WE5pM7DYcxSHZgbrw5GX29Dh8mVgdDuutSuaZ3GHSz
llgz/uA1Eqxf3BmmbriqRNHpUUtP7IfhZ6GgG277S5dzY+EhKyc=
-----END CERTIFICATE-----