Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/znnzpbO6S9Vp2QNVWJMrSr3EoVM.roa
File:                     znnzpbO6S9Vp2QNVWJMrSr3EoVM.roa (raw, json)
Hash identifier:          uHexSA7a2dF3BoaF0mMBX14WQLYTGM6JkdNxguNbBQc=
Subject key identifier:   CE:79:F3:A5:B3:BA:4B:D5:69:D9:03:55:58:93:2B:4A:BD:C4:A1:53
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B74
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/znnzpbO6S9Vp2QNVWJMrSr3EoVM.roa
Signing time:             Wed 29 Sep 2021 02:46:38 +0000
ROA not before:           Wed 29 Sep 2021 02:46:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.46.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7028 (0x1b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CE79F3A5B3BA4BD569D9035558932B4ABDC4A153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:79:3b:d3:74:4a:53:1d:d9:11:8f:b8:f3:
                    48:d8:9d:28:9a:c1:40:9f:17:28:56:0f:e4:ae:22:
                    4c:83:5a:e1:a2:51:46:5d:34:88:ff:4b:fa:1b:e7:
                    a9:97:11:30:36:b7:1f:34:23:53:23:0d:14:95:3e:
                    86:10:4c:43:be:c4:7d:46:e5:53:30:61:63:03:0b:
                    ba:ea:59:b7:1b:20:1d:ae:2f:0b:34:a9:89:ab:c9:
                    23:5f:32:e2:d9:c1:d4:c8:8d:60:14:2a:36:57:4b:
                    73:44:2c:af:14:7c:63:c1:e6:e6:0c:ac:96:c7:c8:
                    d3:c1:dc:22:e5:6d:1c:96:1a:d0:32:4e:d6:b9:f9:
                    36:b1:2a:da:96:97:b2:10:84:ba:2b:c8:ea:df:89:
                    19:50:6b:1a:5e:41:1f:e7:9c:62:46:a1:9d:ac:67:
                    bd:74:7e:91:ef:7e:09:e8:7b:8f:be:85:12:45:88:
                    52:18:a6:2b:3c:54:28:ea:f1:0a:22:ef:74:80:9b:
                    a2:ee:93:5c:4f:36:51:93:c3:a4:f5:80:da:ed:4e:
                    87:f5:c5:dd:8f:12:d4:ef:b6:b0:f2:ff:db:9b:50:
                    94:6f:16:b4:f6:81:14:3f:86:2d:f6:e8:d1:77:b2:
                    41:05:5b:fd:7d:d3:57:4f:f3:d3:f7:95:84:03:89:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:F3:A5:B3:BA:4B:D5:69:D9:03:55:58:93:2B:4A:BD:C4:A1:53
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/znnzpbO6S9Vp2QNVWJMrSr3EoVM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.64/26

    Signature Algorithm: sha256WithRSAEncryption
         26:32:aa:61:70:fe:74:97:a7:12:0d:fe:37:72:5e:e5:74:1e:
         42:36:99:ae:d9:c2:53:00:22:1f:5f:ca:7c:ee:b6:51:cf:7c:
         6d:e8:07:f0:db:c8:1b:59:5a:1c:be:55:e6:0d:3b:5b:c9:22:
         f3:b1:ea:af:89:12:db:1b:4e:10:36:3f:c1:7a:68:1a:04:30:
         da:f5:36:73:77:c9:e4:32:ff:80:68:06:bd:f8:1c:bf:8b:af:
         8b:d8:13:3d:b6:fe:c2:e1:44:f5:21:5a:84:f3:e3:35:39:90:
         43:8a:09:a8:23:61:20:cf:7a:60:7c:43:6c:ba:73:ec:c8:2e:
         b1:44:94:da:42:a4:b6:a3:75:d2:5f:06:f5:a6:f2:19:96:d9:
         c8:b5:6e:b4:fc:ee:87:56:d6:71:34:95:f1:02:94:33:3d:a0:
         a5:a7:d2:1e:78:36:9c:f2:03:45:bb:3d:1e:ca:fc:9e:aa:f4:
         a2:3c:96:73:73:f4:07:a7:14:67:5e:6d:2a:b4:be:93:0e:a8:
         18:db:5f:94:af:05:16:fe:38:38:ae:b9:a8:fe:68:3c:46:e1:
         11:99:f1:b2:52:6f:4e:1c:7d:69:a7:5e:77:03:bc:ff:61:d7:
         dd:d2:e8:ae:37:8a:fc:5e:23:b9:77:b6:c0:50:48:71:7c:80:
         b7:1e:6f:25
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICG3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MzhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKENFNzlGM0E1QjNCQTRC
RDU2OUQ5MDM1NTU4OTMyQjRBQkRDNEExNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXtXk703RKUx3ZEY+480jYnSiawUCfFyhWD+SuIkyDWuGiUUZd
NIj/S/ob56mXETA2tx80I1MjDRSVPoYQTEO+xH1G5VMwYWMDC7rqWbcbIB2uLws0
qYmrySNfMuLZwdTIjWAUKjZXS3NELK8UfGPB5uYMrJbHyNPB3CLlbRyWGtAyTta5
+TaxKtqWl7IQhLoryOrfiRlQaxpeQR/nnGJGoZ2sZ710fpHvfgnoe4++hRJFiFIY
pis8VCjq8Qoi73SAm6Luk1xPNlGTw6T1gNrtTof1xd2PEtTvtrDy/9ubUJRvFrT2
gRQ/hi326NF3skEFW/1901dP89P3lYQDiZdtAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUznnzpbO6S9Vp2QNVWJMrSr3EoVMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pubnpwYk82UzlWcDJRTlZX
Sk1yU3IzRW9WTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
sS5AMA0GCSqGSIb3DQEBCwUAA4IBAQAmMqphcP50l6cSDf43cl7ldB5CNpmu2cJT
ACIfX8p87rZRz3xt6Afw28gbWVocvlXmDTtbySLzseqviRLbG04QNj/BemgaBDDa
9TZzd8nkMv+AaAa9+By/i6+L2BM9tv7C4UT1IVqE8+M1OZBDigmoI2Egz3pgfENs
unPsyC6xRJTaQqS2o3XSXwb1pvIZltnItW60/O6HVtZxNJXxApQzPaClp9IeeDac
8gNFuz0eyvyeqvSiPJZzc/QHpxRnXm0qtL6TDqgY21+UrwUW/jg4rrmo/mg8RuER
mfGyUm9OHH1pp153A7z/Ydfd0uiuN4r8XiO5d7bAUEhxfIC3Hm8l
-----END CERTIFICATE-----