Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-Ve31zcQjrrLBYCoT8mYkvOQebU.roa
File:                     -Ve31zcQjrrLBYCoT8mYkvOQebU.roa (raw, json)
Hash identifier:          FKuTup3Ko0DO9lOiuCJDT3h6/GFuGyEf3rJm8b8Vp3w=
Subject key identifier:   F9:57:B7:D7:37:10:8E:BA:CB:05:80:A8:4F:C9:98:92:F3:90:79:B5
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       016D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-Ve31zcQjrrLBYCoT8mYkvOQebU.roa
Signing time:             Sat 20 Feb 2021 06:47:22 +0000
ROA not before:           Sat 20 Feb 2021 06:47:22 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     212057
IP address blocks:        2406:8dc0:2251::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Feb 20 06:47:22 2021 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=F957B7D737108EBACB0580A84FC99892F39079B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:8d:42:fd:1b:a7:c0:fb:b9:84:1e:f6:4b:
                    34:e7:69:e5:39:d9:a0:42:d6:06:66:4e:77:da:e6:
                    de:25:11:3d:e2:c5:84:86:cb:45:62:1e:0b:10:60:
                    b0:3b:09:3f:b9:84:01:c9:ee:c6:c0:6a:1a:22:ad:
                    34:2c:ab:b1:33:b8:df:b0:a0:15:d4:63:ea:e6:6e:
                    58:d6:a9:d6:40:ee:e1:36:e3:4a:89:ea:9a:bd:98:
                    fa:c4:d3:ac:df:04:8d:5e:b6:7a:90:25:cf:cc:44:
                    24:ff:7e:4c:0a:a5:a4:c0:7f:92:9d:e4:da:75:36:
                    cf:c5:e6:4e:13:60:9d:ff:57:62:84:c6:d5:22:40:
                    3f:9d:c0:94:f0:57:57:ca:ce:32:9f:b5:78:81:69:
                    28:1f:aa:3e:9e:80:3d:0f:e4:dc:29:d2:fe:e4:78:
                    f5:bf:63:6e:af:2f:ad:3c:e6:88:b8:0e:aa:b9:11:
                    25:30:88:98:07:57:15:44:6f:23:b2:fc:ad:18:36:
                    07:b8:df:c8:54:f8:71:59:13:c7:a2:54:9f:67:63:
                    53:02:26:4d:ac:a6:d7:bc:aa:22:98:31:9e:28:9d:
                    3c:ba:ee:71:d7:ef:e8:ba:83:0f:4e:b8:b5:d4:e2:
                    8f:d8:ff:5e:cf:fa:83:c6:44:d8:5b:4d:80:6a:ca:
                    93:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:57:B7:D7:37:10:8E:BA:CB:05:80:A8:4F:C9:98:92:F3:90:79:B5
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/-Ve31zcQjrrLBYCoT8mYkvOQebU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0:2251::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:91:62:2a:c8:59:70:91:97:49:80:c6:1f:2b:34:64:fa:
         99:37:ce:3d:7f:1a:ea:4a:a2:0e:22:fe:7e:52:75:9b:22:fe:
         19:35:0e:bd:dd:73:30:51:7b:72:e4:4a:97:5c:43:17:61:44:
         be:02:74:43:6d:cf:36:b6:d7:d2:f4:88:85:2e:b8:bf:86:32:
         3c:88:c4:50:05:8b:9e:9f:95:19:b6:47:76:c7:d8:66:a2:4a:
         34:06:b3:dc:7d:81:86:39:d8:3e:e4:e2:c5:db:a8:27:9d:8e:
         31:81:2e:9c:54:7d:ee:51:3b:33:5a:a8:60:85:22:c8:3a:55:
         88:8a:f2:8a:47:cc:be:7c:c1:10:1a:6b:5c:1c:44:af:91:ed:
         37:86:93:d9:62:76:81:4e:17:32:91:85:35:fb:18:75:ab:54:
         ad:fa:4c:14:e0:f1:65:81:f7:c7:d8:01:f0:03:aa:1f:8b:4e:
         01:e7:b3:e2:f8:39:79:6f:a7:ec:79:67:5f:8d:4a:f6:96:c6:
         7b:8d:42:ef:91:29:20:da:da:86:a2:fe:99:bc:47:f6:fd:fd:
         19:fc:00:7a:00:1d:e9:78:ee:30:bc:c0:f7:ac:a0:53:52:cb:
         5f:d4:02:e7:4f:e7:cf:70:65:84:fe:db:2b:3c:48:36:18:e0:
         9a:86:3e:8c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMTAyMjAw
NjQ3MjJaFw0yMTEwMDUwNDA0MzZaMDMxMTAvBgNVBAMTKEY5NTdCN0Q3MzcxMDhF
QkFDQjA1ODBBODRGQzk5ODkyRjM5MDc5QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBIo1C/RunwPu5hB72SzTnaeU52aBC1gZmTnfa5t4lET3ixYSG
y0ViHgsQYLA7CT+5hAHJ7sbAahoirTQsq7EzuN+woBXUY+rmbljWqdZA7uE240qJ
6pq9mPrE06zfBI1etnqQJc/MRCT/fkwKpaTAf5Kd5Np1Ns/F5k4TYJ3/V2KExtUi
QD+dwJTwV1fKzjKftXiBaSgfqj6egD0P5Nwp0v7kePW/Y26vL6085oi4Dqq5ESUw
iJgHVxVEbyOy/K0YNge438hU+HFZE8eiVJ9nY1MCJk2spte8qiKYMZ4onTy67nHX
7+i6gw9OuLXU4o/Y/17P+oPGRNhbTYBqypOdAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU+Ve31zcQjrrLBYCoT8mYkvOQebUwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvLVZlMzF6Y1FqcnJMQllD
b1Q4bVlrdk9RZWJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACQGjcAiUTANBgkqhkiG9w0BAQsFAAOCAQEAgOaRYirIWXCRl0mAxh8rNGT6mTfO
PX8a6kqiDiL+flJ1myL+GTUOvd1zMFF7cuRKl1xDF2FEvgJ0Q23PNrbX0vSIhS64
v4YyPIjEUAWLnp+VGbZHdsfYZqJKNAaz3H2BhjnYPuTixduoJ52OMYEunFR97lE7
M1qoYIUiyDpViIryikfMvnzBEBprXBxEr5HtN4aT2WJ2gU4XMpGFNfsYdatUrfpM
FODxZYH3x9gB8AOqH4tOAeez4vg5eW+n7HlnX41K9pbGe41C75EpINrahqL+mbxH
9v39GfwAegAd6XjuMLzA96ygU1LLX9QC50/nz3BlhP7bKzxINhjgmoY+jA==
-----END CERTIFICATE-----