Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vObVXgxL7YGiA1JYpqLMS2YFKhc.roa
File:                     vObVXgxL7YGiA1JYpqLMS2YFKhc.roa (raw, json)
Hash identifier:          8s0n8wGVoi+vHOt9kn0qPycOvXqNXvNj3Vj5/pkuZXQ=
Subject key identifier:   BC:E6:D5:5E:0C:4B:ED:81:A2:03:52:58:A6:A2:CC:4B:66:05:2A:17
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BBA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vObVXgxL7YGiA1JYpqLMS2YFKhc.roa
Signing time:             Wed 29 Sep 2021 02:46:55 +0000
ROA not before:           Wed 29 Sep 2021 02:46:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7098 (0x1bba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BCE6D55E0C4BED81A2035258A6A2CC4B66052A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:f7:43:3b:d9:9d:a8:1e:59:3f:1f:b8:cc:
                    7c:e4:d6:64:67:dc:d4:fd:27:3c:88:cf:7a:e5:5c:
                    4b:10:17:b6:45:fa:65:73:97:03:8f:81:1a:5a:9a:
                    12:bc:a5:79:52:a2:4a:95:d4:9e:b3:11:0b:7a:21:
                    6c:ac:4b:8d:46:77:66:e8:c1:e3:ff:cc:b7:52:8a:
                    e8:84:f7:11:ee:78:cf:ed:d7:6d:f1:a3:3c:1f:b8:
                    e3:48:1d:49:11:bb:84:b2:c1:a1:db:39:d9:86:d2:
                    7a:30:ef:b1:b7:09:4d:c9:a9:0d:27:5d:5b:33:04:
                    3d:41:15:9e:50:e6:2b:09:36:9d:69:ef:9c:bf:4a:
                    6c:87:01:01:31:94:fa:9c:7c:66:fa:a6:e3:f9:5a:
                    46:e9:9d:f7:21:c0:81:72:11:85:42:c8:44:51:12:
                    0c:75:a7:c5:b2:d4:3f:d1:a3:a3:b1:08:0b:70:f4:
                    c5:e2:d8:cd:08:31:62:8c:a9:94:9a:a5:43:29:31:
                    bd:57:20:1c:5c:5c:47:ee:bd:f9:20:5e:44:f9:7b:
                    2e:70:af:1b:9e:56:35:3c:85:66:42:0b:04:cb:78:
                    1b:55:13:a8:97:a9:8a:bc:46:da:ae:49:3c:36:36:
                    ff:f0:05:a1:71:c5:d7:0b:e7:c2:03:b9:a3:e0:43:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:D5:5E:0C:4B:ED:81:A2:03:52:58:A6:A2:CC:4B:66:05:2A:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vObVXgxL7YGiA1JYpqLMS2YFKhc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:b0:af:98:dc:f8:87:2f:b6:ae:3c:5c:15:53:58:09:4d:
         a7:d2:c0:18:5b:29:83:f1:92:e5:e0:dd:c7:8c:43:93:35:aa:
         07:ec:9c:7a:99:22:9b:cd:fe:69:e8:18:b1:9c:3c:e2:a8:51:
         60:61:6c:96:2d:77:ee:2b:b7:f6:ed:0a:38:11:b4:bc:9c:22:
         59:4a:20:7f:88:78:74:3c:69:e7:52:80:2c:5e:2e:2f:dd:f1:
         2e:39:ab:10:7f:64:67:3d:25:8b:ce:72:c7:88:53:f7:04:7b:
         fd:ac:a8:0b:bc:64:5a:f6:e5:b8:2a:94:96:00:d6:21:ef:65:
         c6:f8:68:ae:23:20:36:1f:0b:8c:42:4c:a2:39:46:13:bc:36:
         92:32:2e:27:1a:04:98:15:63:76:1d:15:7d:01:81:fc:17:a9:
         a2:fa:af:69:ea:7b:c0:8d:b3:18:c9:6a:46:c3:b6:0c:89:5d:
         db:ed:09:65:86:bb:7b:94:3a:c0:16:9f:7b:79:ee:3c:47:fe:
         ae:c5:32:1b:58:d9:5a:f9:fd:e7:69:a0:76:f1:57:73:dc:e2:
         5f:15:2e:89:3a:15:45:2e:d5:20:df:d2:67:e3:91:65:cd:a2:
         37:59:3a:ca:57:92:8e:d6:50:30:d2:1c:0d:a2:90:8a:8d:d7:
         7e:c9:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----