Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/O77KBFwfJM88mGFqP5bIY-y_pxU.roa
File:                     O77KBFwfJM88mGFqP5bIY-y_pxU.roa (raw, json)
Hash identifier:          //Oy4tTpk+BYk7n5hzBW6rZmPMl6jvUxIk4hLEQPiM0=
Subject key identifier:   3B:BE:CA:04:5C:1F:24:CF:3C:98:61:6A:3F:96:C8:63:EC:BF:A7:15
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       085F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/O77KBFwfJM88mGFqP5bIY-y_pxU.roa
Signing time:             Tue 29 Sep 2020 10:02:23 +0000
ROA not before:           Tue 29 Sep 2020 10:02:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     10085
IP address blocks:        203.163.208.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143 (0x85f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 10:02:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3BBECA045C1F24CF3C98616A3F96C863ECBFA715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:71:bb:63:d5:2f:87:fe:55:16:32:db:2e:
                    ff:2c:92:94:15:c1:89:e1:55:74:ca:43:bb:cc:df:
                    4f:70:fc:47:c5:95:6f:c7:bd:90:00:cd:4e:59:4b:
                    58:5a:f3:b9:c3:3a:95:db:61:78:2d:9c:ac:49:d2:
                    43:ba:a4:47:0f:96:cd:af:19:c2:b2:90:2c:d7:3e:
                    ff:c4:ea:da:f5:09:34:c5:49:f0:09:fc:5a:f3:4f:
                    a4:2d:d2:80:37:d6:46:89:84:bd:84:40:9a:4c:fe:
                    3f:e2:fc:ea:77:dd:2c:92:e1:8f:41:cf:95:b6:dd:
                    41:2c:c0:8f:7d:dc:c4:99:88:a8:e0:e3:ff:48:49:
                    18:88:e6:a6:9a:d4:a2:f4:38:38:49:c8:ef:a6:59:
                    e4:35:26:d6:69:2c:d2:69:c9:dc:97:e5:82:f0:fb:
                    53:fe:79:b9:07:4e:0c:4b:34:6e:6f:1a:32:3b:54:
                    8b:dd:e6:bb:60:43:a2:dc:3b:5f:fc:fd:8a:94:7b:
                    20:2e:d4:15:13:b5:b5:9d:96:82:a7:a2:31:67:b0:
                    b1:fa:41:85:00:11:ce:36:7a:26:c9:d2:13:55:1c:
                    36:45:6c:27:0a:e6:94:3e:42:58:d1:38:a3:cf:8d:
                    71:4f:02:3c:ab:9b:3c:fe:a2:11:c3:7d:c0:9b:48:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:CA:04:5C:1F:24:CF:3C:98:61:6A:3F:96:C8:63:EC:BF:A7:15
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/O77KBFwfJM88mGFqP5bIY-y_pxU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.163.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:57:03:91:68:8c:fd:2e:bf:46:06:94:b3:af:a9:3e:a2:
         b4:51:3b:a3:b4:a1:eb:b9:1b:15:60:29:5e:5e:6d:5b:91:98:
         d0:91:2b:a2:d6:fa:4c:f4:c1:b7:15:98:ec:6c:a0:89:18:45:
         4e:92:88:62:e9:16:02:a1:2e:dd:09:95:9e:f3:1c:f3:23:2a:
         b0:cc:5b:2a:17:2f:b1:d0:eb:ff:61:35:95:23:95:ac:9f:ab:
         77:f2:fc:55:c3:26:5e:49:71:2c:cf:dc:d8:04:9d:f1:80:42:
         54:d1:60:ab:b8:93:c1:c4:3c:94:34:04:8c:8c:a9:1b:40:b7:
         7e:c0:86:06:e8:32:1d:b2:5a:27:2b:94:e5:7b:10:92:8a:91:
         d0:15:bf:b6:c9:b0:30:c2:c2:90:22:0d:59:a2:bd:50:71:81:
         b0:bf:d2:21:26:76:f0:20:90:dd:c9:e3:06:f7:87:ee:fb:28:
         88:f5:3c:2a:ce:2f:86:31:cc:fc:e3:ae:49:46:42:39:3b:cb:
         e8:a3:d8:14:c9:f2:75:29:ec:4e:8a:a9:09:31:3e:e9:fb:25:
         83:df:72:60:61:4b:ed:7c:ca:70:9c:38:b7:9d:b7:4d:df:31:
         2d:43:00:a8:92:5b:b7:db:1f:7b:36:e2:92:16:a8:c9:0c:6f:
         15:89:6e:70
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNCQkVDQTA0NUMxRjI0
Q0YzQzk4NjE2QTNGOTZDODYzRUNCRkE3MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgj3G7Y9Uvh/5VFjLbLv8skpQVwYnhVXTKQ7vM309w/EfFlW/H
vZAAzU5ZS1ha87nDOpXbYXgtnKxJ0kO6pEcPls2vGcKykCzXPv/E6tr1CTTFSfAJ
/FrzT6Qt0oA31kaJhL2EQJpM/j/i/Op33SyS4Y9Bz5W23UEswI993MSZiKjg4/9I
SRiI5qaa1KL0ODhJyO+mWeQ1JtZpLNJpydyX5YLw+1P+ebkHTgxLNG5vGjI7VIvd
5rtgQ6LcO1/8/YqUeyAu1BUTtbWdloKnojFnsLH6QYUAEc42eibJ0hNVHDZFbCcK
5pQ+QljROKPPjXFPAjyrmzz+ohHDfcCbSL6nAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUO77KBFwfJM88mGFqP5bIY+y/pxUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9PNzdLQkZ3ZkpNODht
R0ZxUDViSVkteV9weFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCy6PQMA0GCSqGSIb3DQEBCwUAA4IBAQB0x1cDkWiM/S6/RgaUs6+pPqK0UTuj
tKHruRsVYCleXm1bkZjQkSui1vpM9MG3FZjsbKCJGEVOkohi6RYCoS7dCZWe8xzz
IyqwzFsqFy+x0Ov/YTWVI5Wsn6t38vxVwyZeSXEsz9zYBJ3xgEJU0WCruJPBxDyU
NASMjKkbQLd+wIYG6DIdslonK5TlexCSipHQFb+2ybAwwsKQIg1Zor1QcYGwv9Ih
JnbwIJDdyeMG94fu+yiI9Twqzi+GMcz8465JRkI5O8voo9gUyfJ1KexOiqkJMT7p
+yWD33JgYUvtfMpwnDi3nbdN3zEtQwCoklu32x97NuKSFqjJDG8ViW5w
-----END CERTIFICATE-----