Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/6Cd5E4Aq3CAXPMA6JBfw3bN9tm0.roa
File:                     6Cd5E4Aq3CAXPMA6JBfw3bN9tm0.roa (raw, json)
Hash identifier:          wbTAljTS9OGt06LH/uMUFIQ1+sn23JzKAfgnY/Ljmz0=
Subject key identifier:   E8:27:79:13:80:2A:DC:20:17:3C:C0:3A:24:17:F0:DD:B3:7D:B6:6D
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       09D4
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/6Cd5E4Aq3CAXPMA6JBfw3bN9tm0.roa
Signing time:             Wed 29 Sep 2021 02:52:02 +0000
ROA not before:           Wed 29 Sep 2021 02:52:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18429
IP address blocks:        27.147.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 29 02:52:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E8277913802ADC20173CC03A2417F0DDB37DB66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:b4:48:47:80:14:6c:c5:26:98:0c:a1:c3:
                    08:8d:06:66:79:ac:e7:82:50:83:bc:2d:e2:7f:43:
                    34:77:2a:c2:c9:25:a9:c4:f8:10:a0:8c:51:9a:5c:
                    f7:11:51:1c:41:b7:97:e2:7b:c6:e1:13:42:eb:43:
                    c3:7f:46:7f:36:a9:a6:7b:bc:12:75:f0:ba:9e:bf:
                    41:6f:e8:6e:9d:5e:7c:1a:6f:15:31:39:c2:39:07:
                    e3:fa:f0:1b:ea:9f:e7:b7:cc:c6:14:1c:23:3c:81:
                    6d:de:55:74:0c:36:f0:d0:ef:58:71:62:a0:f5:d0:
                    18:b0:3c:5d:0d:5c:c0:77:f5:6f:f6:40:3b:bd:5c:
                    7f:cc:95:99:2c:80:39:5c:ee:53:41:d3:2f:bc:3f:
                    9a:b9:d9:0c:d9:fa:9e:4d:bf:c9:22:03:5d:1c:c9:
                    49:f6:4f:1b:58:92:bd:e0:2e:e2:e7:d6:a5:0b:5e:
                    42:e1:04:37:ae:20:0d:81:5a:a5:03:48:ed:77:2a:
                    a0:d5:40:8b:3a:15:6d:a3:09:02:aa:06:c1:e5:d2:
                    59:ae:a6:30:c3:71:75:2d:86:01:90:b9:0c:2a:f7:
                    fb:df:a6:7f:19:00:58:95:c2:cb:e9:cf:05:6d:e9:
                    77:08:64:f1:c1:3f:c7:6a:87:c0:40:60:12:b8:f4:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:79:13:80:2A:DC:20:17:3C:C0:3A:24:17:F0:DD:B3:7D:B6:6D
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/6Cd5E4Aq3CAXPMA6JBfw3bN9tm0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:38:97:ad:ae:b3:58:b3:15:d5:8e:9d:6f:47:1f:03:ee:
         9a:4f:5f:72:d5:43:34:21:fb:15:50:ea:d0:fa:fa:71:c9:fa:
         c5:25:4c:f4:0f:a2:05:44:38:02:6b:57:a3:14:ce:9e:63:90:
         33:ff:50:4a:79:b3:14:1c:b8:9c:cd:d1:f2:a9:3f:32:ff:87:
         e7:ab:64:19:bc:a0:26:14:c2:df:9d:b4:da:0a:cf:36:c9:66:
         f3:32:fa:74:30:61:57:25:98:ce:6a:15:5d:96:54:5d:96:3b:
         7a:6c:0b:f5:b4:d9:50:80:cd:ad:c4:23:e0:b4:a7:86:69:99:
         2d:22:07:92:d4:25:14:f1:42:01:b0:b4:6e:5e:bc:d8:d5:9a:
         69:23:1e:7f:4f:04:0d:7a:32:a1:ba:0b:b8:fc:f7:52:7c:f9:
         47:58:98:e6:35:9b:6b:8d:81:a2:74:ae:c8:7c:00:bd:79:81:
         08:27:e8:ff:ee:7b:47:33:5b:6e:85:d2:60:61:69:35:df:db:
         b1:8d:e1:a2:24:cc:db:82:c0:2a:19:62:ad:5a:37:f4:67:96:
         32:8c:e9:1c:1f:bd:ab:d4:27:f1:0e:23:c8:66:71:ce:51:30:
         e4:14:ca:5e:a2:0f:b9:68:4d:04:ac:36:0e:bf:c4:18:b8:8c:
         c2:5c:ff:0e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMTA5Mjkw
MjUyMDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU4Mjc3OTEzODAyQURD
MjAxNzNDQzAzQTI0MTdGMEREQjM3REI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCIbRIR4AUbMUmmAyhwwiNBmZ5rOeCUIO8LeJ/QzR3KsLJJanE
+BCgjFGaXPcRURxBt5fie8bhE0LrQ8N/Rn82qaZ7vBJ18Lqev0Fv6G6dXnwabxUx
OcI5B+P68Bvqn+e3zMYUHCM8gW3eVXQMNvDQ71hxYqD10BiwPF0NXMB39W/2QDu9
XH/MlZksgDlc7lNB0y+8P5q52QzZ+p5Nv8kiA10cyUn2TxtYkr3gLuLn1qULXkLh
BDeuIA2BWqUDSO13KqDVQIs6FW2jCQKqBsHl0lmupjDDcXUthgGQuQwq9/vfpn8Z
AFiVwsvpzwVt6XcIZPHBP8dqh8BAYBK49GBRAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU6Cd5E4Aq3CAXPMA6JBfw3bN9tm0wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC82Q2Q1RTRBcTNDQVhQTUE2SkJm
dzNiTjl0bTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M+
MA0GCSqGSIb3DQEBCwUAA4IBAQBHLjiXra6zWLMV1Y6db0cfA+6aT19y1UM0IfsV
UOrQ+vpxyfrFJUz0D6IFRDgCa1ejFM6eY5Az/1BKebMUHLiczdHyqT8y/4fnq2QZ
vKAmFMLfnbTaCs82yWbzMvp0MGFXJZjOahVdllRdljt6bAv1tNlQgM2txCPgtKeG
aZktIgeS1CUU8UIBsLRuXrzY1ZppIx5/TwQNejKhugu4/PdSfPlHWJjmNZtrjYGi
dK7IfAC9eYEIJ+j/7ntHM1tuhdJgYWk139uxjeGiJMzbgsAqGWKtWjf0Z5YyjOkc
H72r1CfxDiPIZnHOUTDkFMpeog+5aE0ErDYOv8QYuIzCXP8O
-----END CERTIFICATE-----