Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3aad2rTFvY-jvwikYzs4a1IiHIs.roa
File:                     3aad2rTFvY-jvwikYzs4a1IiHIs.roa (raw, json)
Hash identifier:          bAWvRP6mbn0RhcxgpNVPdBo9170vxntGT/0QA5iY8GY=
Subject key identifier:   DD:A6:9D:DA:B4:C5:BD:8F:A3:BF:08:A4:63:3B:38:6B:52:22:1C:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1261
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3aad2rTFvY-jvwikYzs4a1IiHIs.roa
Signing time:             Wed 29 Sep 2021 02:54:30 +0000
ROA not before:           Wed 29 Sep 2021 02:54:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        122.100.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4705 (0x1261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DDA69DDAB4C5BD8FA3BF08A4633B386B52221C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:93:2c:21:c8:cc:de:7e:7d:72:50:9a:d5:
                    f5:5b:3e:5f:9d:ed:19:aa:d5:8a:d6:b5:26:09:ce:
                    6d:91:a5:32:2f:9f:2b:e4:37:0c:99:b1:3a:94:1b:
                    f5:7e:9e:26:57:68:1d:83:a4:65:ee:f9:67:28:6d:
                    68:8e:23:59:04:37:71:3b:1f:b5:92:21:5e:23:96:
                    7e:e7:0d:45:27:1a:a2:b0:95:ce:e3:82:ea:4e:0b:
                    de:94:10:09:dc:1e:68:73:a7:cd:c5:2e:50:36:ef:
                    92:2a:30:d3:bb:4e:77:9c:65:91:39:cd:1e:f2:e0:
                    dd:b8:07:cf:a4:2e:4f:b8:2b:f9:0c:bf:62:05:a8:
                    12:86:63:d9:09:75:1b:13:1a:0a:9c:58:a3:04:6d:
                    91:3c:d5:ba:85:cc:7c:7f:eb:d6:79:d5:3a:22:07:
                    63:58:78:f9:b6:d2:8c:95:70:67:cf:cd:1e:27:30:
                    d8:4b:40:ad:1f:61:0c:57:19:8e:5e:bb:90:6f:0e:
                    03:4f:e1:ba:85:80:1e:8c:7a:89:fc:8e:bd:1a:e0:
                    65:16:f3:64:4a:84:1b:08:fb:62:00:73:a6:e2:d8:
                    ab:a3:16:c6:5f:48:aa:4b:c9:4d:d4:44:6f:29:d5:
                    a8:59:81:5e:88:58:ba:55:72:4d:fd:01:1f:ce:ef:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:9D:DA:B4:C5:BD:8F:A3:BF:08:A4:63:3B:38:6B:52:22:1C:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3aad2rTFvY-jvwikYzs4a1IiHIs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:4f:7d:d0:a4:07:90:c5:93:93:cc:94:0c:d8:f4:64:a0:
         ad:d5:c8:41:a5:1e:e1:78:70:83:0b:c1:a0:97:ab:91:bf:0a:
         57:1c:7f:87:d4:7e:ab:8e:51:4c:bd:de:c3:e2:00:2e:76:63:
         80:8f:36:87:c0:a3:4d:5c:3b:38:a4:17:07:36:cf:22:22:2d:
         4f:e1:9d:a5:0b:fa:36:e2:9c:a7:23:81:f9:e3:8e:72:82:cd:
         cf:96:bb:c9:8f:bf:0e:c5:45:74:91:6c:26:1a:be:35:9c:d9:
         1a:cc:13:26:dc:0e:75:83:e6:72:ae:77:de:c6:3c:35:69:de:
         99:13:e4:50:1c:fe:64:84:73:a8:94:5a:94:45:a8:6c:e8:ad:
         2e:36:93:21:91:a8:53:11:08:9a:04:8b:13:c8:c0:a7:4f:98:
         f6:b2:3a:27:f3:68:4b:12:d3:bd:33:77:88:6c:80:0c:c0:2d:
         da:f1:a7:ff:26:86:9f:69:d5:dd:25:6e:b8:72:a3:cf:a9:5e:
         72:24:13:fd:54:8d:72:1d:da:31:e0:21:66:b3:bb:cd:e4:73:
         16:15:3f:4d:e0:a2:e8:7a:8a:a0:50:8d:72:73:7a:d1:b1:87:
         3a:9b:52:61:34:92:66:5c:3d:90:28:d3:27:c5:1f:0d:40:11:
         54:65:bb:27
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MzBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEREQTY5RERBQjRDNUJE
OEZBM0JGMDhBNDYzM0IzODZCNTIyMjFDOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiz5MsIcjM3n59clCa1fVbPl+d7Rmq1YrWtSYJzm2RpTIvnyvk
NwyZsTqUG/V+niZXaB2DpGXu+WcobWiOI1kEN3E7H7WSIV4jln7nDUUnGqKwlc7j
gupOC96UEAncHmhzp83FLlA275IqMNO7TnecZZE5zR7y4N24B8+kLk+4K/kMv2IF
qBKGY9kJdRsTGgqcWKMEbZE81bqFzHx/69Z51ToiB2NYePm20oyVcGfPzR4nMNhL
QK0fYQxXGY5eu5BvDgNP4bqFgB6Meon8jr0a4GUW82RKhBsI+2IAc6bi2KujFsZf
SKpLyU3URG8p1ahZgV6IWLpVck39AR/O7789AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3aad2rTFvY+jvwikYzs4a1IiHIswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzNhYWQyclRGdlktanZ3aWtZ
enM0YTFJaUhJcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB6
ZF8wDQYJKoZIhvcNAQELBQADggEBACr4T33QpAeQxZOTzJQM2PRkoK3VyEGlHuF4
cIMLwaCXq5G/Clccf4fUfquOUUy93sPiAC52Y4CPNofAo01cOzikFwc2zyIiLU/h
naUL+jbinKcjgfnjjnKCzc+Wu8mPvw7FRXSRbCYavjWc2RrMEybcDnWD5nKud97G
PDVp3pkT5FAc/mSEc6iUWpRFqGzorS42kyGRqFMRCJoEixPIwKdPmPayOifzaEsS
070zd4hsgAzALdrxp/8mhp9p1d0lbrhyo8+pXnIkE/1UjXId2jHgIWazu83kcxYV
P03gouh6iqBQjXJzetGxhzqbUmE0kmZcPZAo0yfFHw1AEVRluyc=
-----END CERTIFICATE-----