Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ytTEqqZl-Ot-c15rggMxZrY2Mgs.roa
File:                     ytTEqqZl-Ot-c15rggMxZrY2Mgs.roa (raw, json)
Hash identifier:          /ZWTcl/aRmgaADEyeFU2JTlYEZfWc6xicG3k+U4a5Fg=
Subject key identifier:   CA:D4:C4:AA:A6:65:F8:EB:7E:73:5E:6B:82:03:31:66:B6:36:32:0B
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       08E2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ytTEqqZl-Ot-c15rggMxZrY2Mgs.roa
Signing time:             Tue 29 Sep 2020 10:01:12 +0000
ROA not before:           Tue 29 Sep 2020 10:01:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        222.156.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CAD4C4AAA665F8EB7E735E6B82033166B636320B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:b6:46:bb:bd:0a:93:81:c3:5d:63:00:39:
                    46:35:00:c0:71:66:d0:26:7f:e6:8d:b5:e4:4b:fe:
                    33:05:29:69:08:cd:68:83:cf:a7:e1:fb:41:30:fe:
                    98:01:57:37:92:64:1a:12:74:56:1b:64:e5:e8:21:
                    90:bb:f8:c5:ad:e5:ba:d5:06:8d:c8:f1:d5:9c:a6:
                    26:62:7d:c4:c0:6d:8e:0a:e3:a7:77:09:d1:30:ef:
                    db:93:77:95:28:a2:a6:84:7d:e2:a7:f3:4d:ec:ae:
                    0c:87:57:b7:18:f0:b4:99:aa:78:94:29:85:78:70:
                    52:b3:da:b9:87:40:c5:a0:5b:e5:03:fa:38:27:b3:
                    a5:f7:5f:86:23:cc:6b:bb:0f:c6:09:18:2f:e8:4a:
                    51:83:82:6d:81:f8:7f:34:4e:3f:9e:1c:6d:c3:bc:
                    c8:81:86:17:bf:5b:2f:e8:cc:a0:03:65:35:93:67:
                    f7:39:99:48:67:48:9b:99:6a:61:76:f1:79:02:8e:
                    cf:b1:6c:d3:bd:94:3a:06:9c:95:b1:95:a3:6e:c8:
                    57:78:72:c5:2b:57:26:46:aa:02:f6:41:25:4a:ec:
                    6b:9e:08:5a:b1:f2:d7:06:01:86:a8:60:23:86:3a:
                    b5:00:b8:c0:e1:9a:bf:04:19:61:de:5a:c6:bf:f2:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D4:C4:AA:A6:65:F8:EB:7E:73:5E:6B:82:03:31:66:B6:36:32:0B
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ytTEqqZl-Ot-c15rggMxZrY2Mgs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:6c:ab:74:cf:e3:f4:b6:55:41:13:e1:a4:40:0f:ba:b3:
         ba:a5:98:da:e5:67:88:0b:79:22:87:ec:83:c1:fe:08:82:a3:
         6f:d7:1a:f6:02:03:ca:33:29:1a:91:5e:8e:6d:32:c9:2c:e4:
         f1:6e:ef:ee:dd:91:54:55:4f:42:20:f9:30:d0:ef:eb:3d:ea:
         a5:56:77:4c:75:cf:1c:22:81:96:52:b1:54:11:d9:bf:7b:92:
         42:b8:90:fe:de:5b:ec:be:85:8a:93:de:a1:f4:01:33:65:5f:
         8e:cf:58:60:83:59:e1:83:c6:2c:56:23:1b:fd:86:76:63:e6:
         ab:ab:3b:96:1f:c1:0a:d0:b8:d9:04:a5:db:48:8c:8e:f1:6d:
         0a:79:99:50:74:1e:c9:14:a6:02:8f:af:10:c2:45:f1:16:ec:
         3d:12:8a:4f:f5:59:72:46:66:24:f5:65:38:46:3e:eb:06:b3:
         f6:f7:27:91:78:5b:74:68:72:51:50:d6:cf:cc:67:50:4a:99:
         83:43:b3:a9:f1:7b:f1:9e:93:06:95:30:b1:d9:ef:ea:52:f0:
         35:e3:68:e2:88:1d:62:65:21:5b:97:f5:bf:e4:a1:db:a3:a2:
         1f:78:26:a5:09:99:75:78:27:15:60:40:ae:c9:62:65:98:40:
         01:73:16:ff
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxMTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENBRDRDNEFBQTY2NUY4
RUI3RTczNUU2QjgyMDMzMTY2QjYzNjMyMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9DLZGu70Kk4HDXWMAOUY1AMBxZtAmf+aNteRL/jMFKWkIzWiD
z6fh+0Ew/pgBVzeSZBoSdFYbZOXoIZC7+MWt5brVBo3I8dWcpiZifcTAbY4K46d3
CdEw79uTd5UooqaEfeKn803srgyHV7cY8LSZqniUKYV4cFKz2rmHQMWgW+UD+jgn
s6X3X4YjzGu7D8YJGC/oSlGDgm2B+H80Tj+eHG3DvMiBhhe/Wy/ozKADZTWTZ/c5
mUhnSJuZamF28XkCjs+xbNO9lDoGnJWxlaNuyFd4csUrVyZGqgL2QSVK7GueCFqx
8tcGAYaoYCOGOrUAuMDhmr8EGWHeWsa/8lbTAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUytTEqqZl+Ot+c15rggMxZrY2MgswHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wveXRURXFxWmwtT3QtYzE1cmdnTXha
clkyTWdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN6cMA0G
CSqGSIb3DQEBCwUAA4IBAQA+mGyrdM/j9LZVQRPhpEAPurO6pZja5WeIC3kih+yD
wf4IgqNv1xr2AgPKMykakV6ObTLJLOTxbu/u3ZFUVU9CIPkw0O/rPeqlVndMdc8c
IoGWUrFUEdm/e5JCuJD+3lvsvoWKk96h9AEzZV+Oz1hgg1nhg8YsViMb/YZ2Y+ar
qzuWH8EK0LjZBKXbSIyO8W0KeZlQdB7JFKYCj68QwkXxFuw9EopP9VlyRmYk9WU4
Rj7rBrP29yeReFt0aHJRUNbPzGdQSpmDQ7Op8XvxnpMGlTCx2e/qUvA142jiiB1i
ZSFbl/W/5KHbo6IfeCalCZl1eCcVYECuyWJlmEABcxb/
-----END CERTIFICATE-----