Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/_EZC8hwIhAhqrtB6-Dwezi5attY.roa
File:                     _EZC8hwIhAhqrtB6-Dwezi5attY.roa (raw, json)
Hash identifier:          jX29zbmS9ipAffCpdl5K1SUFkSd1M1djgTdrYhUqSnY=
Subject key identifier:   FC:46:42:F2:1C:08:84:08:6A:AE:D0:7A:F8:3C:1E:CE:2E:5A:B6:D6
Certificate issuer:       /CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378
Certificate serial:       0953
Authority key identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/_EZC8hwIhAhqrtB6-Dwezi5attY.roa
Signing time:             Wed 29 Sep 2021 02:42:24 +0000
ROA not before:           Wed 29 Sep 2021 02:42:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     206819
IP address blocks:        103.100.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378
        Validity
            Not Before: Sep 29 02:42:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FC4642F21C0884086AAED07AF83C1ECE2E5AB6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:42:e3:75:5f:31:db:06:a0:43:34:5c:6d:67:
                    55:72:9a:ad:c9:a5:79:54:fc:d2:f7:a1:7a:fa:ec:
                    f1:5e:74:94:61:ae:4a:f3:01:ff:8d:09:30:4f:7e:
                    69:67:27:17:00:80:8d:66:43:0b:e4:4c:50:d1:37:
                    9d:fd:e8:bc:e3:02:08:c0:d2:b4:91:fa:63:14:d6:
                    dc:89:c0:49:df:92:6e:72:52:cf:58:7d:a0:72:25:
                    43:23:09:a6:b2:fb:10:50:0d:e7:59:b3:07:8e:67:
                    2b:a4:3b:85:5b:61:82:47:eb:d0:aa:b9:da:a2:f8:
                    38:0f:26:57:9b:47:ee:21:8a:99:07:c7:f6:cb:00:
                    6d:77:ab:bc:18:42:9e:bc:76:0d:16:75:57:21:0c:
                    fa:7d:1b:fc:ce:63:5e:79:dd:fb:98:bf:5e:4c:9e:
                    75:d0:e5:ed:d7:41:06:04:0b:a0:84:20:59:86:e4:
                    6a:2b:8d:5b:c8:01:8c:9b:7c:42:b0:9a:77:dd:21:
                    a1:ad:af:cc:3d:08:66:88:84:cd:bf:d4:33:b7:76:
                    01:39:61:61:d2:60:eb:f1:4d:7d:c2:63:b0:d5:9e:
                    ed:bb:c9:30:6a:15:62:2e:e5:77:e6:10:e8:6f:ec:
                    78:59:a8:23:5c:db:d8:97:20:04:62:ca:ae:83:54:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:46:42:F2:1C:08:84:08:6A:AE:D0:7A:F8:3C:1E:CE:2E:5A:B6:D6
            X509v3 Authority Key Identifier:
                keyid:80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/_EZC8hwIhAhqrtB6-Dwezi5attY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:0b:13:9f:96:8d:76:e2:aa:b2:04:d8:05:73:66:9d:42:
         01:f9:df:68:6f:c6:81:48:a6:05:1c:8c:a5:cb:a6:11:ba:a7:
         b8:15:81:76:66:b9:5d:99:d5:44:0d:5b:dc:37:05:2a:c2:61:
         ad:37:f5:48:6f:f4:bb:b6:9d:8f:9c:bd:0c:2d:a3:0b:a0:08:
         7a:b0:4e:c6:e6:57:e8:4b:84:2a:3a:4c:bc:c4:6a:38:7e:34:
         9b:29:7a:83:00:94:49:02:bc:0f:1a:9d:ab:79:f6:fa:0f:c6:
         cc:b0:4a:e0:a1:e0:b9:68:61:28:dc:92:09:b0:69:54:2f:6e:
         f6:6f:ce:6f:b5:44:ff:c3:f8:f5:fc:17:2e:28:a4:38:45:fc:
         03:ce:f8:ee:e9:4c:d6:3b:b7:57:d6:d5:6b:cb:58:48:b5:57:
         9e:a0:3a:e9:79:82:a8:3e:3d:fe:d6:94:f7:6f:88:7e:8d:34:
         b5:cd:0f:1b:d4:10:e9:97:09:d0:0e:76:28:94:57:63:5b:88:
         17:3c:67:3d:1e:5c:fb:61:8c:95:47:9f:c8:cd:82:68:77:13:
         fa:b9:cc:fe:27:7e:b6:c6:b4:f5:35:66:ef:cf:9a:e5:83:82:
         cb:ac:08:52:8a:02:56:b9:5b:e9:3f:de:17:98:84:ee:04:35:
         52:96:b1:48
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODAy
QkE2MTIzRUExMjNGNDM5REE5MUNBM0RFNUE1QUUwQUE0MTM3ODAeFw0yMTA5Mjkw
MjQyMjRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZDNDY0MkYyMUMwODg0
MDg2QUFFRDA3QUY4M0MxRUNFMkU1QUI2RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvQuN1XzHbBqBDNFxtZ1Vymq3JpXlU/NL3oXr67PFedJRhrkrz
Af+NCTBPfmlnJxcAgI1mQwvkTFDRN5396LzjAgjA0rSR+mMU1tyJwEnfkm5yUs9Y
faByJUMjCaay+xBQDedZsweOZyukO4VbYYJH69Cqudqi+DgPJlebR+4hipkHx/bL
AG13q7wYQp68dg0WdVchDPp9G/zOY1553fuYv15MnnXQ5e3XQQYEC6CEIFmG5Gor
jVvIAYybfEKwmnfdIaGtr8w9CGaIhM2/1DO3dgE5YWHSYOvxTX3CY7DVnu27yTBq
FWIu5XfmEOhv7HhZqCNc29iXIARiyq6DVICJAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU/EZC8hwIhAhqrtB6+Dwezi5attYwHwYDVR0jBBgwFoAUgCumEj6hI/Q52pHK
PeWlrgqkE3gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU5TT05O
RVQvZ0N1bUVqNmhJX1E1MnBIS1BlV2xyZ3FrRTNnLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nQ3VtRWo2aElfUTUycEhLUGVXbHJncWtFM2cuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BTlNPTk5FVC9fRVpDOGh3SWhBaHFy
dEI2LUR3ZXppNWF0dFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ2R8MA0GCSqGSIb3DQEBCwUAA4IBAQBlnQsTn5aNduKqsgTYBXNmnUIB+d9o
b8aBSKYFHIyly6YRuqe4FYF2ZrldmdVEDVvcNwUqwmGtN/VIb/S7tp2PnL0MLaML
oAh6sE7G5lfoS4QqOky8xGo4fjSbKXqDAJRJArwPGp2refb6D8bMsErgoeC5aGEo
3JIJsGlUL272b85vtUT/w/j1/BcuKKQ4RfwDzvju6UzWO7dX1tVry1hItVeeoDrp
eYKoPj3+1pT3b4h+jTS1zQ8b1BDplwnQDnYolFdjW4gXPGc9Hlz7YYyVR5/IzYJo
dxP6ucz+J362xrT1NWbvz5rlg4LLrAhSigJWuVvpP94XmITuBDVSlrFI
-----END CERTIFICATE-----