Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/VRIOeOfZqHRcaKNroQF4HZrZkt0.roa
File:                     VRIOeOfZqHRcaKNroQF4HZrZkt0.roa (raw, json)
Hash identifier:          cuhxk/98uewTPO2XMZxr2kz46q/3AMgrs5UHoGIZ6M0=
Subject key identifier:   55:12:0E:78:E7:D9:A8:74:5C:68:A3:6B:A1:01:78:1D:9A:D9:92:DD
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0CAB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/VRIOeOfZqHRcaKNroQF4HZrZkt0.roa
Signing time:             Sun 07 Feb 2021 11:54:36 +0000
ROA not before:           Sun 07 Feb 2021 11:54:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24154
IP address blocks:        210.63.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3243 (0xcab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:54:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=55120E78E7D9A8745C68A36BA101781D9AD992DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:63:97:c5:1f:63:7e:a9:ab:93:e6:8b:af:
                    6b:7d:75:7a:ef:be:e2:2d:d9:27:e4:20:0b:8b:c5:
                    7f:0a:5b:c5:79:45:70:18:27:ec:1d:63:b2:e2:41:
                    d3:ac:2c:14:72:94:c2:46:fb:58:4e:a6:5a:c8:60:
                    a6:e7:68:32:aa:02:cf:9b:9a:84:d3:c1:be:b8:58:
                    8b:59:68:cc:c7:c3:ed:38:7f:82:47:f2:24:d4:39:
                    0a:e5:2b:1c:d0:85:cd:ad:d2:4c:86:ea:b9:75:fd:
                    c7:78:1b:25:8e:04:59:d0:27:af:d8:45:1a:f3:7f:
                    6c:3b:60:8b:d9:d6:37:07:aa:28:a8:7e:14:e6:d7:
                    8c:1e:6c:04:f3:ba:ef:39:54:27:97:63:16:ec:c0:
                    f5:9c:94:13:8b:19:18:e7:79:90:3e:6b:62:dd:6e:
                    a6:2f:e3:19:2e:87:ce:a2:05:a6:25:11:51:8f:66:
                    4f:23:66:da:3e:67:f6:cc:cb:d4:18:4d:a2:a2:54:
                    dc:b7:d8:9e:26:6e:1c:73:95:3b:44:f4:39:b9:97:
                    08:34:45:12:07:28:f9:d5:1b:bc:c2:82:e8:54:3b:
                    84:2e:34:9f:f5:c1:59:09:7e:cb:47:0d:f6:a6:f4:
                    60:0d:43:6d:90:b5:76:2c:91:7c:30:c6:52:54:05:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:0E:78:E7:D9:A8:74:5C:68:A3:6B:A1:01:78:1D:9A:D9:92:DD
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/VRIOeOfZqHRcaKNroQF4HZrZkt0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:29:ed:51:cd:bf:88:1f:ec:bc:58:38:ea:fd:ff:6c:b6:35:
         15:24:0d:05:ff:63:05:53:fc:fd:04:2b:f3:96:6f:30:48:40:
         04:23:8e:9d:4f:f2:37:3b:40:e0:87:c0:c0:f1:92:2e:ec:fb:
         2e:16:59:a4:c0:d8:d6:38:cb:6b:24:be:1f:27:a7:cd:05:27:
         88:28:24:44:e8:e1:05:60:7f:22:b3:61:71:2f:b9:1b:e5:b1:
         5f:c9:3a:24:be:49:c4:1c:b6:37:78:09:89:2a:b5:48:28:fe:
         1d:4f:10:95:84:44:d8:95:04:e0:fc:c0:34:1c:3e:33:ee:54:
         52:36:50:1d:c3:7d:07:54:b1:5e:7a:27:d6:3b:6a:f5:c1:83:
         3d:e3:d3:8d:16:c5:4b:3e:6d:38:e6:36:6e:8d:c0:4b:bd:36:
         fd:22:77:97:55:41:d5:d1:c8:73:68:2c:8a:7d:77:23:92:48:
         c1:81:c3:be:07:8c:41:ad:6c:5d:ec:4c:db:24:2a:b6:5f:4e:
         5a:a6:70:61:c7:d0:29:6b:77:74:f2:a2:4c:85:6e:92:dd:63:
         45:c2:4a:fb:ef:69:30:27:10:81:c9:bd:13:bd:39:6c:7d:cf:
         c3:08:46:24:ad:9c:a2:a4:c3:f5:7a:d6:75:c8:1b:af:4c:84:
         72:c3:7c:f9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTU0MzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU1MTIwRTc4RTdEOUE4
NzQ1QzY4QTM2QkExMDE3ODFEOUFEOTkyREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5SGOXxR9jfqmrk+aLr2t9dXrvvuIt2SfkIAuLxX8KW8V5RXAY
J+wdY7LiQdOsLBRylMJG+1hOplrIYKbnaDKqAs+bmoTTwb64WItZaMzHw+04f4JH
8iTUOQrlKxzQhc2t0kyG6rl1/cd4GyWOBFnQJ6/YRRrzf2w7YIvZ1jcHqiiofhTm
14webATzuu85VCeXYxbswPWclBOLGRjneZA+a2LdbqYv4xkuh86iBaYlEVGPZk8j
Zto+Z/bMy9QYTaKiVNy32J4mbhxzlTtE9Dm5lwg0RRIHKPnVG7zCguhUO4QuNJ/1
wVkJfstHDfam9GANQ22QtXYskXwwxlJUBbtHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUVRIOeOfZqHRcaKNroQF4HZrZkt0wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvVlJJT2VPZlpxSFJjYUtOcm9RRjRI
WnJaa3QwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdI/wDAN
BgkqhkiG9w0BAQsFAAOCAQEAQyntUc2/iB/svFg46v3/bLY1FSQNBf9jBVP8/QQr
85ZvMEhABCOOnU/yNztA4IfAwPGSLuz7LhZZpMDY1jjLayS+HyenzQUniCgkROjh
BWB/IrNhcS+5G+WxX8k6JL5JxBy2N3gJiSq1SCj+HU8QlYRE2JUE4PzANBw+M+5U
UjZQHcN9B1SxXnon1jtq9cGDPePTjRbFSz5tOOY2bo3AS702/SJ3l1VB1dHIc2gs
in13I5JIwYHDvgeMQa1sXexM2yQqtl9OWqZwYcfQKWt3dPKiTIVukt1jRcJK++9p
MCcQgcm9E705bH3PwwhGJK2coqTD9XrWdcgbr0yEcsN8+Q==
-----END CERTIFICATE-----