Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa
File:                     YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa (raw, json)
Hash identifier:          Rv/HnFiv0I9vMX+CH8Lymb/BwTn/sveu6ciDnf6dZwE=
Subject key identifier:   61:91:A3:5C:B1:70:FB:D3:B0:3D:3A:E7:F0:DC:F6:55:73:E1:3B:7F
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0938
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa
Signing time:             Tue 29 Sep 2020 10:01:36 +0000
ROA not before:           Tue 29 Sep 2020 10:01:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        203.79.248.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6191A35CB170FBD3B03D3AE7F0DCF65573E13B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:cf:94:7f:04:eb:a9:76:48:34:51:4f:e6:
                    cd:62:6b:ad:ea:e3:43:3f:d8:7d:b6:f5:28:ac:0d:
                    04:b2:9b:33:36:f0:31:2e:4f:1e:79:d7:4d:68:fd:
                    65:7d:92:24:6d:26:cb:04:7f:29:35:fe:09:ab:81:
                    13:18:9d:44:35:fa:44:4f:02:1b:1e:bb:d4:38:f0:
                    a0:37:dc:f9:6d:14:2b:b5:ea:5b:fa:5b:02:30:87:
                    37:17:40:1b:03:c0:be:5b:fb:28:10:4c:b9:a5:ec:
                    5c:cc:9f:8e:f3:c7:05:24:70:a3:5e:c4:8d:9c:c1:
                    df:0a:fb:e3:1c:06:f5:98:51:84:e3:cc:18:d2:62:
                    b3:93:92:b8:a0:4b:ed:e6:7b:6c:b4:53:36:cc:9e:
                    ab:88:87:fc:b9:0a:f6:97:b0:e5:b4:90:54:2f:85:
                    5e:02:60:f1:96:1e:ca:d2:d5:f6:4c:ae:cc:67:d2:
                    93:ba:da:85:f7:ea:65:82:69:c2:7c:d6:40:7c:1a:
                    09:fb:eb:93:dd:4b:70:6a:fa:a1:f7:d8:99:11:42:
                    4d:dd:bb:32:81:5c:41:20:b5:1f:2a:e0:3f:25:40:
                    a6:b1:8b:b8:7b:3d:22:62:14:d2:24:e9:03:7b:60:
                    e1:f5:6b:a6:3f:50:d4:e3:38:6d:01:04:2e:81:ca:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:91:A3:5C:B1:70:FB:D3:B0:3D:3A:E7:F0:DC:F6:55:73:E1:3B:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/YZGjXLFw-9OwPTrn8Nz2VXPhO38.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:39:d8:ce:10:43:18:55:bb:02:78:1b:05:4a:9a:c8:ff:
         07:a4:b3:5b:de:1c:37:30:a5:ea:e5:47:14:2a:ec:78:e6:05:
         b6:f5:88:bb:ec:24:c7:d1:d7:a4:91:5f:21:5a:08:74:bd:67:
         21:0c:6f:1c:c9:58:d1:94:f0:a5:db:c3:43:98:24:d8:db:82:
         14:6d:ad:1d:d0:a5:8d:54:98:72:ec:68:c9:43:49:7a:0e:8a:
         5f:3b:5e:63:f5:db:d8:34:21:87:05:d4:24:85:bc:36:cc:60:
         f6:fe:97:83:6d:e7:3e:97:19:0c:2c:a6:aa:be:59:fe:db:e0:
         63:5d:25:ed:aa:7d:49:cc:be:f4:7b:7d:1d:fa:52:5f:92:72:
         b1:3c:e7:2d:9f:50:14:ec:71:7d:8e:79:73:5e:5f:d4:87:b4:
         0a:6f:52:f1:d0:5d:70:a0:75:46:f5:cf:59:da:14:af:0b:0d:
         35:f7:5f:a2:d4:86:25:ce:70:cd:2a:89:05:66:f5:3d:ea:70:
         6b:a6:c3:6a:34:40:da:db:9f:0a:5f:66:2a:11:85:25:56:8d:
         1f:03:8b:e0:86:28:cf:37:2f:82:1a:6d:ba:fa:36:a5:d7:c5:
         7c:5e:1c:bc:fe:44:5c:2e:01:19:57:4a:89:c1:1d:b6:0d:11:
         a2:a7:59:ef
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxMzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYxOTFBMzVDQjE3MEZC
RDNCMDNEM0FFN0YwRENGNjU1NzNFMTNCN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDncM+UfwTrqXZINFFP5s1ia63q40M/2H229SisDQSymzM28DEu
Tx55101o/WV9kiRtJssEfyk1/gmrgRMYnUQ1+kRPAhseu9Q48KA33PltFCu16lv6
WwIwhzcXQBsDwL5b+ygQTLml7FzMn47zxwUkcKNexI2cwd8K++McBvWYUYTjzBjS
YrOTkrigS+3me2y0UzbMnquIh/y5CvaXsOW0kFQvhV4CYPGWHsrS1fZMrsxn0pO6
2oX36mWCacJ81kB8Ggn765PdS3Bq+qH32JkRQk3duzKBXEEgtR8q4D8lQKaxi7h7
PSJiFNIk6QN7YOH1a6Y/UNTjOG0BBC6BylzlAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUYZGjXLFw+9OwPTrn8Nz2VXPhO38wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvWVpHalhMRnctOU93UFRybjhOejJW
WFBoTzM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8tP+DAN
BgkqhkiG9w0BAQsFAAOCAQEAA3052M4QQxhVuwJ4GwVKmsj/B6SzW94cNzCl6uVH
FCrseOYFtvWIu+wkx9HXpJFfIVoIdL1nIQxvHMlY0ZTwpdvDQ5gk2NuCFG2tHdCl
jVSYcuxoyUNJeg6KXzteY/Xb2DQhhwXUJIW8Nsxg9v6Xg23nPpcZDCymqr5Z/tvg
Y10l7ap9Scy+9Ht9HfpSX5JysTznLZ9QFOxxfY55c15f1Ie0Cm9S8dBdcKB1RvXP
WdoUrwsNNfdfotSGJc5wzSqJBWb1Pepwa6bDajRA2tufCl9mKhGFJVaNHwOL4IYo
zzcvghptuvo2pdfFfF4cvP5EXC4BGVdKicEdtg0RoqdZ7w==
-----END CERTIFICATE-----