Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/OPQVgbvXet2wfPPLOCKx62NRtiM.roa
File:                     OPQVgbvXet2wfPPLOCKx62NRtiM.roa (raw, json)
Hash identifier:          3wRjTxXFSZJSaTqLSvjxF/UmEEuzT0HrDnXe2Ej0lWw=
Subject key identifier:   38:F4:15:81:BB:D7:7A:DD:B0:7C:F3:CB:38:22:B1:EB:63:51:B6:23
Certificate issuer:       /CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99
Certificate serial:       23
Authority key identifier: 57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/OPQVgbvXet2wfPPLOCKx62NRtiM.roa
Signing time:             Fri 08 Apr 2022 12:58:49 +0000
ROA not before:           Fri 08 Apr 2022 12:58:49 +0000
ROA not after:            Tue 21 Feb 2023 08:34:33 +0000
asID:                     63893
IP address blocks:        2400:5060::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99
        Validity
            Not Before: Apr  8 12:58:49 2022 GMT
            Not After : Feb 21 08:34:33 2023 GMT
        Subject: CN=38F41581BBD77ADDB07CF3CB3822B1EB6351B623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:c9:9a:b4:f1:8b:04:6b:bf:64:69:da:cb:
                    89:2d:88:07:fe:6c:42:da:c8:fc:34:6b:62:40:20:
                    b4:b5:c1:83:03:62:06:0c:69:bf:76:e5:3e:c8:a8:
                    62:48:7b:79:ce:4d:fe:d8:8a:6f:19:c2:fa:92:f8:
                    56:a8:d8:b9:62:55:a9:81:14:30:20:11:61:5e:93:
                    ea:48:6a:5a:aa:a0:f2:02:6a:37:0f:fd:a6:23:83:
                    bc:78:ff:1e:66:0a:91:18:a4:96:ba:10:b5:1b:e7:
                    fd:f3:25:8b:88:5b:d0:1f:45:f5:2b:03:3e:9a:8a:
                    3a:43:0b:6c:93:67:46:09:10:de:a2:62:16:fb:eb:
                    ad:b0:ca:51:89:b9:0a:00:14:a3:67:4d:d9:06:a5:
                    51:e2:35:a8:41:1c:c7:17:39:65:a7:67:4c:a3:cb:
                    0d:46:b0:bc:67:8e:06:2c:49:b5:d0:07:0c:f9:f6:
                    79:b5:c9:58:7d:ef:14:44:52:21:34:82:6a:39:e3:
                    aa:cc:59:9d:7e:57:8f:08:be:82:56:c3:bf:fe:c5:
                    80:50:d8:06:5b:0e:bb:25:24:8f:e1:9c:d9:46:bc:
                    5f:e5:68:4d:28:e7:6e:8f:e6:12:9d:d9:dc:9e:39:
                    ee:cc:dd:d8:47:f2:25:ff:7f:65:5d:fa:d1:cf:91:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:15:81:BB:D7:7A:DD:B0:7C:F3:CB:38:22:B1:EB:63:51:B6:23
            X509v3 Authority Key Identifier:
                keyid:57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/OPQVgbvXet2wfPPLOCKx62NRtiM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5060::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:29:f9:dd:16:4b:b0:3f:c3:ba:83:4c:b8:28:67:da:03:aa:
         4e:5b:53:64:42:1d:29:1e:b7:14:d1:e2:18:16:25:b1:95:28:
         29:14:ab:b1:80:80:33:91:d7:67:fe:21:b9:23:91:33:b3:f2:
         1f:64:7c:61:97:9b:4a:34:4c:45:58:58:30:6d:85:52:9e:c1:
         eb:3b:11:d9:b0:51:82:33:d4:70:94:c8:05:21:9d:ed:ad:5d:
         2c:d7:1a:b5:15:31:e9:14:95:c1:f4:2b:08:8f:25:91:40:be:
         b6:62:67:f3:37:3a:e8:55:96:51:27:6d:1e:1e:5e:45:6a:eb:
         97:b6:39:cd:e3:0f:0f:1f:86:9e:e7:19:76:39:69:51:bf:da:
         dd:56:ad:0a:c8:59:b9:6a:6c:d7:51:ed:18:cc:c5:32:4a:c5:
         49:32:69:39:1c:ad:05:db:71:f5:ae:be:1b:6d:81:29:99:bd:
         70:dd:d8:48:cd:de:5e:b2:f8:b4:cb:d0:f7:dd:4d:e8:29:ac:
         88:85:8f:3f:3c:e0:6c:f5:2b:6c:58:f0:f0:e4:f9:d2:71:a3:
         21:24:50:3d:23:4c:99:97:51:05:b4:b0:dd:89:29:5c:57:71:
         55:10:b5:3b:1e:30:87:41:c4:42:6d:f0:5e:ea:a0:b0:09:c6:
         13:75:db:11
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1Nzgx
ODNBMEZFNURBNEEwRjNDMDU0NkZCNkVDMjZDQkQxMjMyRjk5MB4XDTIyMDQwODEy
NTg0OVoXDTIzMDIyMTA4MzQzM1owMzExMC8GA1UEAxMoMzhGNDE1ODFCQkQ3N0FE
REIwN0NGM0NCMzgyMkIxRUI2MzUxQjYyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANRMyZq08YsEa79kadrLiS2IB/5sQtrI/DRrYkAgtLXBgwNiBgxp
v3blPsioYkh7ec5N/tiKbxnC+pL4VqjYuWJVqYEUMCARYV6T6khqWqqg8gJqNw/9
piODvHj/HmYKkRiklroQtRvn/fMli4hb0B9F9SsDPpqKOkMLbJNnRgkQ3qJiFvvr
rbDKUYm5CgAUo2dN2QalUeI1qEEcxxc5ZadnTKPLDUawvGeOBixJtdAHDPn2ebXJ
WH3vFERSITSCajnjqsxZnX5Xjwi+glbDv/7FgFDYBlsOuyUkj+Gc2Ua8X+VoTSjn
bo/mEp3Z3J457szd2EfyJf9/ZV360c+ROiMCAwEAAaOCAfcwggHzMB0GA1UdDgQW
BBQ49BWBu9d63bB888s4IrHrY1G2IzAfBgNVHSMEGDAWgBRXgYOg/l2koPPAVG+2
7CbL0SMvmTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQ1AxMTM4
NDcwL1Y0R0RvUDVkcEtEendGUnZ0dXdteTlFakw1ay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvVjRHRG9QNWRwS0R6d0ZSdnR1d215OUVqTDVrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEzODQ3MC9PUFFWZ2J2WGV0
MndmUFBMT0NLeDYyTlJ0aU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUAJABQYDANBgkqhkiG9w0BAQsFAAOCAQEAhin53RZLsD/DuoNMuChn2gOq
TltTZEIdKR63FNHiGBYlsZUoKRSrsYCAM5HXZ/4huSORM7PyH2R8YZebSjRMRVhY
MG2FUp7B6zsR2bBRgjPUcJTIBSGd7a1dLNcatRUx6RSVwfQrCI8lkUC+tmJn8zc6
6FWWUSdtHh5eRWrrl7Y5zeMPDx+GnucZdjlpUb/a3VatCshZuWps11HtGMzFMkrF
STJpORytBdtx9a6+G22BKZm9cN3YSM3eXrL4tMvQ991N6CmsiIWPPzzgbPUrbFjw
8OT50nGjISRQPSNMmZdRBbSw3YkpXFdxVRC1Ox4wh0HEQm3wXuqgsAnGE3XbEQ==
-----END CERTIFICATE-----