Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/kqk7T2nzdYLnt1ND6rjwP1Iux4k.roa
File:                     kqk7T2nzdYLnt1ND6rjwP1Iux4k.roa (raw, json)
Hash identifier:          Gc/brQQPRJok136FYYNDnx2fk1q5CUuyk4dH3bE+q5k=
Subject key identifier:   92:A9:3B:4F:69:F3:75:82:E7:B7:53:43:EA:B8:F0:3F:52:2E:C7:89
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       011E
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/kqk7T2nzdYLnt1ND6rjwP1Iux4k.roa
Signing time:             Sat 19 Dec 2020 07:17:22 +0000
ROA not before:           Sat 19 Dec 2020 07:17:22 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     60614
IP address blocks:        2406:8dc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Dec 19 07:17:22 2020 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=92A93B4F69F37582E7B75343EAB8F03F522EC789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:d6:e2:b2:53:21:d1:a5:57:89:04:a5:d6:
                    58:3e:ed:0c:ac:e7:3a:f2:1a:10:26:38:ce:46:96:
                    12:d3:a5:f7:64:76:77:ce:e2:b3:a3:12:44:4c:08:
                    98:d8:38:11:a5:28:3a:af:7f:07:e2:82:35:5e:eb:
                    52:98:02:36:c1:d0:f2:83:59:ee:40:ee:ae:ca:88:
                    85:5f:d6:41:cd:63:c0:fd:a2:70:02:70:eb:98:b4:
                    9f:e2:04:2f:eb:9c:c2:01:25:9a:0e:dd:67:30:41:
                    70:92:f4:84:38:38:29:9a:a9:55:cf:9c:24:70:5e:
                    72:5e:b9:0d:09:66:c0:d3:79:de:40:5a:99:ec:46:
                    ac:61:65:95:36:38:7b:d4:f3:bd:5f:dc:a1:c2:bb:
                    15:98:c6:e4:3a:40:10:0e:8c:83:f2:9b:4a:8c:28:
                    cf:98:b0:4c:bb:d6:a0:e9:fd:7c:9a:00:3f:98:2b:
                    6d:7a:20:e2:c8:fa:2b:1a:c4:d3:a0:77:2b:87:be:
                    1f:ac:28:e8:4a:a1:0c:2f:21:b3:37:85:e7:9b:af:
                    33:ba:7b:06:57:82:46:fa:d2:ec:bf:b0:45:dc:95:
                    6b:0f:c3:07:2c:09:78:5e:85:b3:40:fb:b8:e0:fa:
                    50:53:07:d6:2b:ff:ad:9a:3f:fd:38:68:8c:b8:4d:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:3B:4F:69:F3:75:82:E7:B7:53:43:EA:B8:F0:3F:52:2E:C7:89
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/kqk7T2nzdYLnt1ND6rjwP1Iux4k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:30:2f:4a:b4:5c:57:e9:be:8d:0e:c7:93:df:a0:98:b5:
         a4:d2:0f:9a:74:df:27:4f:28:22:0a:7f:64:99:ef:7d:53:29:
         84:d7:07:45:5d:63:7f:d3:6f:c6:35:b6:2d:ec:d3:2b:6b:c2:
         e1:08:6d:4d:d6:23:85:ae:b1:a6:83:f4:0d:12:af:34:3c:58:
         ca:89:28:6d:89:9a:7a:3f:35:be:42:17:4e:e1:1b:ae:09:a8:
         8c:a7:e3:a7:06:b5:0f:8c:26:5d:e4:30:13:e1:a5:13:49:33:
         ab:c8:c9:fd:92:d1:1d:3a:58:23:2b:b2:dc:e7:7e:0e:91:c3:
         9d:43:57:c6:ad:ea:da:97:8b:88:3b:4f:e2:97:52:dd:e8:db:
         4d:26:8f:49:9e:c8:b0:9e:9f:ff:5b:fd:8e:9f:3f:57:17:aa:
         31:dc:1b:87:99:d8:be:6e:00:5f:a6:97:f7:2e:7f:ea:18:f0:
         5a:85:1b:94:1e:81:97:c9:9f:e3:dc:2d:a0:6d:90:5d:0d:69:
         a3:e4:a4:89:51:75:0f:43:82:c2:43:5c:85:50:bf:35:21:8a:
         aa:19:53:e5:d0:aa:dc:2e:aa:b7:1a:c7:38:6a:e5:c4:d8:3b:
         b3:c7:3c:aa:ec:14:8e:19:7e:a0:00:10:e4:ce:b3:3a:04:06:
         70:f7:3a:60
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMDEyMTkw
NzE3MjJaFw0yMTEwMDUwNDA0MzZaMDMxMTAvBgNVBAMTKDkyQTkzQjRGNjlGMzc1
ODJFN0I3NTM0M0VBQjhGMDNGNTIyRUM3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnOtbislMh0aVXiQSl1lg+7Qys5zryGhAmOM5GlhLTpfdkdnfO
4rOjEkRMCJjYOBGlKDqvfwfigjVe61KYAjbB0PKDWe5A7q7KiIVf1kHNY8D9onAC
cOuYtJ/iBC/rnMIBJZoO3WcwQXCS9IQ4OCmaqVXPnCRwXnJeuQ0JZsDTed5AWpns
RqxhZZU2OHvU871f3KHCuxWYxuQ6QBAOjIPym0qMKM+YsEy71qDp/XyaAD+YK216
IOLI+isaxNOgdyuHvh+sKOhKoQwvIbM3heebrzO6ewZXgkb60uy/sEXclWsPwwcs
CXhehbNA+7jg+lBTB9Yr/62aP/04aIy4Tf/xAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUkqk7T2nzdYLnt1ND6rjwP1Iux4kwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1Mva3FrN1QybnpkWUxudDFO
RDZyandQMUl1eDRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQGjcAwDQYJKoZIhvcNAQELBQADggEBALNtMC9KtFxX6b6NDseT36CYtaTSD5p0
3ydPKCIKf2SZ731TKYTXB0VdY3/Tb8Y1ti3s0ytrwuEIbU3WI4WusaaD9A0SrzQ8
WMqJKG2Jmno/Nb5CF07hG64JqIyn46cGtQ+MJl3kMBPhpRNJM6vIyf2S0R06WCMr
stznfg6Rw51DV8at6tqXi4g7T+KXUt3o200mj0meyLCen/9b/Y6fP1cXqjHcG4eZ
2L5uAF+ml/cuf+oY8FqFG5QegZfJn+PcLaBtkF0NaaPkpIlRdQ9DgsJDXIVQvzUh
iqoZU+XQqtwuqrcaxzhq5cTYO7PHPKrsFI4ZfqAAEOTOszoEBnD3OmA=
-----END CERTIFICATE-----