Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/iNBysTYLNyrEsBuk-uDVF9YZUzo.roa
File:                     iNBysTYLNyrEsBuk-uDVF9YZUzo.roa (raw, json)
Hash identifier:          Wx4JX4/Qw4W7hd7qSACmQHxp0l/dbhykcf8e/M3oSYs=
Subject key identifier:   88:D0:72:B1:36:0B:37:2A:C4:B0:1B:A4:FA:E0:D5:17:D6:19:53:3A
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       0B
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/iNBysTYLNyrEsBuk-uDVF9YZUzo.roa
Signing time:             Wed 07 Oct 2020 03:17:47 +0000
ROA not before:           Wed 07 Oct 2020 03:17:47 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     209557
IP address blocks:        103.156.184.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Oct  7 03:17:47 2020 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=88D072B1360B372AC4B01BA4FAE0D517D619533A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:cb:2b:32:a0:46:3d:42:7b:39:1e:2e:cb:
                    0e:7a:ba:c6:f1:12:7b:0f:15:6e:91:06:85:72:36:
                    7e:5a:ce:ac:ab:aa:60:fc:60:c6:d1:ac:c7:9f:58:
                    49:17:18:fb:62:ca:a8:c9:a5:96:9a:8a:81:2b:47:
                    25:81:9a:9d:f2:74:e1:bc:06:20:2a:a2:27:79:80:
                    fc:91:be:fe:90:b1:82:b7:82:68:4b:25:b5:28:8c:
                    82:cc:57:4f:bb:b5:6a:1f:6e:3b:1a:99:e0:fd:9f:
                    2d:fc:06:85:e1:47:a2:3b:4d:43:44:ea:21:a4:16:
                    3c:48:45:0e:6c:fc:6c:98:93:4b:9d:cc:34:89:0a:
                    e1:a5:80:43:41:ff:d8:9a:cb:f3:28:c3:c0:ed:1d:
                    24:0f:fb:2c:ab:2d:8c:1d:e2:8e:11:dc:09:f2:95:
                    fe:4e:43:9a:ec:f7:dd:21:8a:aa:2c:8a:dc:d2:f1:
                    8a:bd:ca:e6:aa:8e:33:cf:33:ea:16:e0:12:92:5c:
                    02:be:3f:fb:91:d6:52:c0:78:e7:9d:64:20:1b:aa:
                    4a:78:09:f3:a4:49:bb:1c:7c:9c:91:aa:d9:3b:c9:
                    1c:4b:ca:5e:22:76:a0:ce:12:81:10:ef:0c:64:93:
                    09:9a:d8:88:c4:80:16:cd:e9:12:af:51:01:25:02:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:72:B1:36:0B:37:2A:C4:B0:1B:A4:FA:E0:D5:17:D6:19:53:3A
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/iNBysTYLNyrEsBuk-uDVF9YZUzo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:a8:5a:1c:dd:83:de:89:03:8f:0f:e2:e7:a1:3e:c8:60:
         b3:3b:bb:92:c4:03:58:eb:a9:cf:21:27:8c:de:1f:07:88:ec:
         b0:cd:12:98:33:98:a4:a1:34:10:56:79:0b:47:72:30:55:20:
         96:e5:15:a6:dd:9c:d9:ee:07:d2:74:a1:0d:3f:0a:7f:10:65:
         8c:c7:07:df:d3:61:06:ec:3e:f1:6d:68:79:a3:60:61:05:3c:
         48:c9:a0:5b:e3:4f:aa:d2:33:d9:31:bb:f0:ae:82:08:fb:5c:
         f8:d8:c8:4c:5e:53:05:b4:d1:d1:68:df:28:fe:0d:8f:60:09:
         d7:2b:8c:f2:c1:ed:fd:93:03:da:b0:8b:3b:f1:9b:86:cb:1d:
         7d:a7:50:5a:12:c0:5e:19:e3:90:9b:52:6b:f3:a0:4e:80:f0:
         11:af:b5:68:80:2a:f4:3d:f6:4c:42:73:3f:8f:c2:2e:c9:b6:
         25:1c:d3:df:b2:fd:fc:ee:b0:d0:5e:73:70:b8:2a:6a:54:a3:
         b4:d4:de:2b:a9:68:41:4b:64:ee:98:8f:9a:cb:85:6d:50:a9:
         9e:32:66:25:c5:85:92:f1:fb:5e:c5:92:55:14:64:66:c8:5e:
         02:74:0b:52:76:d8:9a:85:ae:62:ef:c9:b8:97:13:d8:19:33:
         c3:ef:ba:da
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1N0E5
OTRCRDYwNTU1MTQ1Q0I2NDUyREM2QTk4MEZDODUxMTM2QkRBMB4XDTIwMTAwNzAz
MTc0N1oXDTIxMTAwNTA0MDQzNlowMzExMC8GA1UEAxMoODhEMDcyQjEzNjBCMzcy
QUM0QjAxQkE0RkFFMEQ1MTdENjE5NTMzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMO+yysyoEY9Qns5Hi7LDnq6xvESew8VbpEGhXI2flrOrKuqYPxg
xtGsx59YSRcY+2LKqMmllpqKgStHJYGanfJ04bwGICqiJ3mA/JG+/pCxgreCaEsl
tSiMgsxXT7u1ah9uOxqZ4P2fLfwGheFHojtNQ0TqIaQWPEhFDmz8bJiTS53MNIkK
4aWAQ0H/2JrL8yjDwO0dJA/7LKstjB3ijhHcCfKV/k5Dmuz33SGKqiyK3NLxir3K
5qqOM88z6hbgEpJcAr4/+5HWUsB4551kIBuqSngJ86RJuxx8nJGq2TvJHEvKXiJ2
oM4SgRDvDGSTCZrYiMSAFs3pEq9RASUCCEMCAwEAAaOCAfAwggHsMB0GA1UdDgQW
BBSI0HKxNgs3KsSwG6T64NUX1hlTOjAfBgNVHSMEGDAWgBRXqZS9YFVRRctkUtxq
mA/IURNr2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BTExQQVNT
L1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVjZtVXZXQlZVVVhMWkZMY2FwZ1B5RkVUYTlvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFTUy9pTkJ5c1RZTE55ckVzQnVr
LXVEVkY5WVpVem8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Z5y4MA0GCSqGSIb3DQEBCwUAA4IBAQDQgqhaHN2D3okDjw/i56E+yGCzO7uSxANY
66nPISeM3h8HiOywzRKYM5ikoTQQVnkLR3IwVSCW5RWm3ZzZ7gfSdKENPwp/EGWM
xwff02EG7D7xbWh5o2BhBTxIyaBb40+q0jPZMbvwroII+1z42MhMXlMFtNHRaN8o
/g2PYAnXK4zywe39kwPasIs78ZuGyx19p1BaEsBeGeOQm1Jr86BOgPARr7VogCr0
PfZMQnM/j8IuybYlHNPfsv387rDQXnNwuCpqVKO01N4rqWhBS2TumI+ay4VtUKme
MmYlxYWS8ftexZJVFGRmyF4CdAtSdtiaha5i78m4lxPYGTPD77ra
-----END CERTIFICATE-----