Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w9A4JCGSJwzzckadHeoXpZUHvwU.roa
File:                     w9A4JCGSJwzzckadHeoXpZUHvwU.roa (raw, json)
Hash identifier:          PIPS3uun8zplOKR/aa7vI5hcUN4aV44Gob73fCvAMmE=
Subject key identifier:   C3:D0:38:24:21:92:27:0C:F3:72:46:9D:1D:EA:17:A5:95:07:BF:05
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DF4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w9A4JCGSJwzzckadHeoXpZUHvwU.roa
Signing time:             Tue 29 Sep 2020 09:55:10 +0000
ROA not before:           Tue 29 Sep 2020 09:55:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3572 (0xdf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C3D038242192270CF372469D1DEA17A59507BF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2f:a7:95:3a:bc:13:59:9c:17:f5:3f:da:8b:
                    9f:57:06:47:30:9c:92:bf:f6:ad:a0:af:64:a7:62:
                    e2:74:67:59:bc:b6:25:16:b6:2f:4d:7d:7e:4a:52:
                    17:4a:93:bf:5b:53:81:70:80:61:ec:d3:cc:f3:99:
                    9d:7e:14:28:e5:87:85:68:97:07:78:8c:5a:8e:91:
                    16:bf:26:6b:ac:68:6c:d3:a1:74:ad:c9:08:f2:81:
                    f0:64:39:c0:92:38:df:26:ea:f1:29:82:1c:2a:72:
                    a3:90:a6:7d:2a:0b:0b:48:8e:3a:4b:fa:17:01:78:
                    59:8e:91:81:0a:93:db:ce:e2:bd:69:6c:1a:2b:58:
                    df:3e:de:99:c1:34:d5:d1:a1:7f:28:87:c8:81:18:
                    9b:dc:c7:c8:ed:68:f3:63:2c:cd:5b:77:cf:14:7b:
                    99:51:1a:29:80:0e:88:0b:f0:69:1b:8f:4c:db:60:
                    c5:e6:e0:43:c1:2c:36:0f:96:3f:34:4e:6b:8e:49:
                    01:40:c3:67:50:7b:23:78:23:2e:5e:75:66:31:70:
                    34:36:43:ca:54:b2:48:71:86:8b:40:d6:7c:13:35:
                    00:dc:90:bf:a1:73:11:9b:0d:10:5c:c8:aa:15:30:
                    4f:b5:f4:d0:27:2e:2e:87:63:dc:45:c7:df:33:0a:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D0:38:24:21:92:27:0C:F3:72:46:9D:1D:EA:17:A5:95:07:BF:05
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w9A4JCGSJwzzckadHeoXpZUHvwU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:63:60:66:c2:0d:e2:3e:34:a7:7f:ef:36:21:1d:74:3c:
         4b:54:50:6a:d4:5d:7a:32:78:c9:ae:c8:cb:4a:a4:26:9c:ba:
         ff:e0:16:df:76:78:f0:de:a3:de:ef:82:ea:0d:b3:41:66:d2:
         cd:36:90:1c:83:4f:eb:61:3b:d0:1c:ad:d7:e4:3e:a7:aa:f8:
         0e:e7:bd:36:0c:96:4e:f5:0c:b4:4b:8a:ce:62:ab:c4:d4:6d:
         b2:4b:d1:4c:e0:41:e3:f1:0f:5c:c1:2a:e1:97:8b:e3:81:ad:
         ed:9c:0d:63:71:e0:2f:19:a1:35:f2:f1:ce:ec:e1:af:0f:15:
         c0:25:18:c8:64:43:fa:8a:bc:f4:97:39:32:70:0e:ce:40:a6:
         4e:70:47:f6:d5:08:1f:76:8d:21:68:62:37:1d:73:2f:b5:42:
         9e:db:50:f8:de:4d:90:2e:40:48:2f:56:9f:de:49:7b:f1:36:
         a1:8c:bf:da:cd:c4:81:29:b5:97:38:4c:ef:31:d7:1c:df:3f:
         ce:05:37:e4:e1:68:99:69:ff:00:fa:44:7b:d9:10:02:83:f2:
         2d:75:64:91:9d:03:7c:3d:c4:fc:b4:b5:e3:a9:4b:e8:52:3c:
         28:cb:c2:ae:b1:1c:6c:05:56:6c:c2:67:72:12:3d:7e:36:76:
         85:6b:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----