Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa
File:                     VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa (raw, json)
Hash identifier:          XZGvSjd69161tdNlXGYo8U1AXKJ0TPhpyg1rcMuxrXQ=
Subject key identifier:   54:FB:68:D9:92:7E:2E:64:57:DE:B2:31:CC:C7:C2:18:B9:D2:5E:A7
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       0135
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa
Signing time:             Tue 29 Dec 2020 10:52:56 +0000
ROA not before:           Tue 29 Dec 2020 10:52:56 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     51044
IP address blocks:        2406:8dc0:2500::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Dec 29 10:52:56 2020 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=54FB68D9927E2E6457DEB231CCC7C218B9D25EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:37:83:28:6e:ae:d3:94:e0:f4:04:a8:60:
                    90:9c:d7:45:0e:5c:da:00:ba:97:a7:81:9f:e2:f4:
                    0d:d0:ce:ef:e1:32:b2:f0:81:4f:6a:74:39:0c:94:
                    25:2b:e2:9d:f4:2b:a8:2e:98:e8:4f:09:bc:fa:e4:
                    68:57:65:f9:93:07:33:7d:d1:c7:bf:94:92:da:76:
                    90:23:ad:c4:d2:53:f3:64:0b:ec:f1:80:56:f9:53:
                    27:91:00:4e:0d:0c:6a:56:f2:e1:7f:ca:2b:43:37:
                    f3:fe:d9:fe:32:27:e3:ea:af:99:bb:89:c9:ba:ee:
                    c9:4f:1d:cf:d0:aa:45:f7:73:50:b7:29:d4:bc:4f:
                    92:ec:da:1f:a0:70:4c:6d:ae:31:7e:09:ee:b9:56:
                    ea:be:5b:b6:12:c5:ff:dd:23:68:6f:8d:3c:a9:0d:
                    9a:6b:53:43:79:3e:8b:ce:93:55:2d:42:e2:53:0e:
                    e7:32:86:7f:3e:66:4c:aa:be:0c:84:dd:41:88:ec:
                    fa:69:58:cd:7c:41:84:c8:de:40:43:59:ed:58:78:
                    28:3c:ff:a1:4b:6e:6f:23:3e:fb:24:32:d1:7c:9b:
                    4e:eb:c1:04:41:ee:a2:b8:52:7a:25:20:ea:b4:21:
                    79:c3:7c:44:ad:37:3e:10:f3:3b:31:e4:19:63:de:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:68:D9:92:7E:2E:64:57:DE:B2:31:CC:C7:C2:18:B9:D2:5E:A7
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/VPto2ZJ-LmRX3rIxzMfCGLnSXqc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0:2500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:49:5b:e8:94:c6:ef:f5:4b:64:99:be:5b:1b:fc:11:6c:
         7a:08:e5:ca:21:7b:33:05:1d:37:38:b6:cf:72:7d:fc:c5:aa:
         a8:0e:4f:9f:7d:4e:21:23:f9:83:31:c1:c8:60:aa:41:b5:ac:
         64:f6:93:67:08:2a:ec:47:36:42:67:e3:eb:0e:cb:e9:78:4a:
         09:a2:1f:d5:21:89:f1:99:7a:3d:fd:35:92:e0:49:98:c5:42:
         a6:98:a0:95:f1:8d:07:12:de:fc:8d:9a:ee:46:0b:74:49:30:
         ff:ea:38:98:66:db:96:52:10:f7:fa:fb:e2:c9:98:53:43:fc:
         ff:45:44:b2:0e:0a:ae:78:fa:f4:b6:b6:60:a4:46:4e:8b:b3:
         3f:1a:1c:d8:19:b9:a9:b5:d6:e8:a1:c4:63:db:28:04:03:b5:
         e9:a4:dd:8c:84:7b:e9:ab:f3:46:87:2b:a6:a3:fb:f4:37:bb:
         2c:d7:35:bd:00:52:d2:01:bd:44:29:0f:57:27:f9:d2:b7:8b:
         e0:b5:a2:3d:bf:87:a5:22:ce:d9:2e:00:9a:ed:df:76:98:17:
         00:89:ae:2e:c7:48:81:62:c3:7f:3f:15:e9:7d:1f:c3:c8:e6:
         34:c6:9b:78:cc:81:e7:11:90:e4:91:a4:e8:e3:cc:fa:58:c3:
         06:8a:ca:5c
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMDEyMjkx
MDUyNTZaFw0yMTEwMDUwNDA0MzZaMDMxMTAvBgNVBAMTKDU0RkI2OEQ5OTI3RTJF
NjQ1N0RFQjIzMUNDQzdDMjE4QjlEMjVFQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAvjeDKG6u05Tg9ASoYJCc10UOXNoAupengZ/i9A3Qzu/hMrLw
gU9qdDkMlCUr4p30K6gumOhPCbz65GhXZfmTBzN90ce/lJLadpAjrcTSU/NkC+zx
gFb5UyeRAE4NDGpW8uF/yitDN/P+2f4yJ+Pqr5m7icm67slPHc/QqkX3c1C3KdS8
T5Ls2h+gcExtrjF+Ce65Vuq+W7YSxf/dI2hvjTypDZprU0N5PovOk1UtQuJTDucy
hn8+ZkyqvgyE3UGI7PppWM18QYTI3kBDWe1YeCg8/6FLbm8jPvskMtF8m07rwQRB
7qK4UnolIOq0IXnDfEStNz4Q8zsx5Blj3kbFAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUVPto2ZJ+LmRX3rIxzMfCGLnSXqcwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvVlB0bzJaSi1MbVJYM3JJ
eHpNZkNHTG5TWHFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG
ACQGjcAlMA0GCSqGSIb3DQEBCwUAA4IBAQA8Oklb6JTG7/VLZJm+Wxv8EWx6COXK
IXszBR03OLbPcn38xaqoDk+ffU4hI/mDMcHIYKpBtaxk9pNnCCrsRzZCZ+PrDsvp
eEoJoh/VIYnxmXo9/TWS4EmYxUKmmKCV8Y0HEt78jZruRgt0STD/6jiYZtuWUhD3
+vviyZhTQ/z/RUSyDgquePr0trZgpEZOi7M/GhzYGbmptdboocRj2ygEA7XppN2M
hHvpq/NGhyumo/v0N7ss1zW9AFLSAb1EKQ9XJ/nSt4vgtaI9v4elIs7ZLgCa7d92
mBcAia4ux0iBYsN/PxXpfR/DyOY0xpt4zIHnEZDkkaTo48z6WMMGispc
-----END CERTIFICATE-----