Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/werOhesEwuEYMzOECdVa8fjjICE.roa
File:                     werOhesEwuEYMzOECdVa8fjjICE.roa (raw, json)
Hash identifier:          PsrAvFgQyIprS3nj4zaXl0NHgxyYRz0HeumkjQk2UuQ=
Subject key identifier:   C1:EA:CE:85:EB:04:C2:E1:18:33:33:84:09:D5:5A:F1:F8:E3:20:21
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CE0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/werOhesEwuEYMzOECdVa8fjjICE.roa
Signing time:             Tue 29 Sep 2020 09:53:54 +0000
ROA not before:           Tue 29 Sep 2020 09:53:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C1EACE85EB04C2E11833338409D55AF1F8E32021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:a3:76:e1:a6:42:c4:59:6c:a7:70:72:95:
                    d4:7e:a2:fc:7a:1f:21:84:54:15:fc:b9:4d:1b:9f:
                    da:54:ba:3d:96:ce:af:ba:15:37:5c:40:08:ed:ed:
                    ef:47:ef:0b:9b:45:87:71:3c:a1:c1:0d:43:28:8f:
                    28:55:d7:0e:45:c2:15:39:a1:b2:9d:ab:e9:4e:0e:
                    0f:7c:7a:c9:9c:77:5f:89:0b:03:2b:1f:cb:50:8c:
                    ad:16:eb:ab:f4:60:00:6f:61:2e:b5:47:68:f4:f8:
                    dd:c2:71:84:d0:6e:ba:d8:03:99:b7:24:d7:75:bc:
                    79:05:59:ae:bb:50:3a:2a:26:56:5e:42:4f:04:44:
                    19:0e:10:41:bc:3d:2b:ca:fb:7d:a5:bb:8f:6e:8b:
                    eb:03:fc:74:a1:0b:1d:5c:f2:fb:68:e7:43:d7:6d:
                    d8:8c:ef:bc:f1:8a:0f:27:db:e1:3e:1e:f5:79:fd:
                    43:f8:bd:ad:7d:7a:41:51:3d:02:23:45:df:ab:ef:
                    15:15:2b:dc:cb:2d:1c:d0:35:d7:7c:e1:33:95:c4:
                    0e:88:d1:e5:03:9a:53:7c:26:4e:8e:fa:05:9e:12:
                    87:14:07:ff:7a:fd:b7:48:ed:0a:a4:d1:43:f9:23:
                    e8:f7:2d:34:fc:bc:8b:02:79:94:8f:24:7f:29:3b:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:CE:85:EB:04:C2:E1:18:33:33:84:09:D5:5A:F1:F8:E3:20:21
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/werOhesEwuEYMzOECdVa8fjjICE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:2b:f5:24:78:89:a3:a3:d6:ab:9b:1d:54:cb:7d:c5:52:
         af:29:19:8c:0f:c0:aa:c3:0a:bd:2a:87:f2:64:0c:92:a1:45:
         26:57:84:cb:d2:88:55:d8:1e:05:a9:c4:c6:b6:60:21:d7:e4:
         ed:38:65:53:34:cb:63:2f:68:1f:15:a7:00:32:05:d3:41:7b:
         77:66:20:30:23:91:70:d6:05:ee:0b:99:3c:ed:99:d4:64:6d:
         8f:ea:9e:eb:70:dc:29:ab:17:e7:82:50:a4:c4:2f:16:e1:0f:
         d2:d5:05:e8:a9:9a:ac:8b:43:97:f7:6e:82:e8:89:17:90:cb:
         27:c6:56:f7:c8:7c:aa:dc:0f:84:c4:ca:e2:c7:0b:bc:ae:d9:
         3e:9b:56:cb:e0:dc:57:57:4f:93:8f:92:d4:a0:15:ff:6e:99:
         e0:51:a4:e4:34:ed:8c:e8:8c:f9:7a:a0:dd:aa:a9:61:dc:74:
         6a:4b:8a:7f:0b:4d:c5:0d:20:b2:89:a7:f7:e9:4a:ff:d0:ba:
         e3:ad:76:b9:64:79:db:9c:40:7f:0e:7c:e6:51:fa:ff:79:38:
         f3:f5:79:0e:8e:52:5c:b4:b6:62:2c:60:61:05:51:13:8f:2a:
         31:e1:a7:2a:8f:99:03:12:37:45:66:8d:2f:35:6d:59:60:58:
         0b:d6:64:4b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTUzNTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMxRUFDRTg1RUIwNEMy
RTExODMzMzM4NDA5RDU1QUYxRjhFMzIwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgNaN24aZCxFlsp3ByldR+ovx6HyGEVBX8uU0bn9pUuj2Wzq+6
FTdcQAjt7e9H7wubRYdxPKHBDUMojyhV1w5FwhU5obKdq+lODg98esmcd1+JCwMr
H8tQjK0W66v0YABvYS61R2j0+N3CcYTQbrrYA5m3JNd1vHkFWa67UDoqJlZeQk8E
RBkOEEG8PSvK+32lu49ui+sD/HShCx1c8vto50PXbdiM77zxig8n2+E+HvV5/UP4
va19ekFRPQIjRd+r7xUVK9zLLRzQNdd84TOVxA6I0eUDmlN8Jk6O+gWeEocUB/96
/bdI7Qqk0UP5I+j3LTT8vIsCeZSPJH8pO7aPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwerOhesEwuEYMzOECdVa8fjjICEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dlck9oZXNFd3VFWU16T0VD
ZFZhOGZqaklDRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sNAwDQYJKoZIhvcNAQELBQADggEBAJ74K/UkeImjo9armx1Uy33FUq8pGYwPwKrD
Cr0qh/JkDJKhRSZXhMvSiFXYHgWpxMa2YCHX5O04ZVM0y2MvaB8VpwAyBdNBe3dm
IDAjkXDWBe4LmTztmdRkbY/qnutw3CmrF+eCUKTELxbhD9LVBeipmqyLQ5f3boLo
iReQyyfGVvfIfKrcD4TEyuLHC7yu2T6bVsvg3FdXT5OPktSgFf9umeBRpOQ07Yzo
jPl6oN2qqWHcdGpLin8LTcUNILKJp/fpSv/QuuOtdrlkeducQH8OfOZR+v95OPP1
eQ6OUly0tmIsYGEFUROPKjHhpyqPmQMSN0VmjS81bVlgWAvWZEs=
-----END CERTIFICATE-----