Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/8W7cfrLPB1bJfTl869IWTEeCkIY.roa
File:                     8W7cfrLPB1bJfTl869IWTEeCkIY.roa (raw, json)
Hash identifier:          eYAXhynOALtpDXjPrSIBH649mysTuHNdkiT2mCzseVw=
Subject key identifier:   F1:6E:DC:7E:B2:CF:07:56:C9:7D:39:7C:EB:D2:16:4C:47:82:90:86
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       0963
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/8W7cfrLPB1bJfTl869IWTEeCkIY.roa
Signing time:             Wed 29 Sep 2021 02:40:52 +0000
ROA not before:           Wed 29 Sep 2021 02:40:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17416
IP address blocks:        112.213.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Sep 29 02:40:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F16EDC7EB2CF0756C97D397CEBD2164C47829086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:cb:26:93:7c:b0:95:07:40:0c:7d:36:f0:
                    4d:3c:73:66:24:a0:3e:ee:0b:8b:b7:e6:20:2c:a7:
                    ec:b7:0a:ca:c2:bd:27:8f:2b:65:dc:f8:8b:47:cb:
                    80:3c:19:c1:2a:91:8d:51:e9:0f:d2:b8:a6:da:da:
                    2f:1d:fe:47:3e:89:e2:d9:08:1f:5e:92:a4:1a:1e:
                    03:dc:a0:00:17:bd:0b:a5:e6:92:a6:e9:0b:25:f1:
                    a7:d0:6e:e9:b2:2b:1d:32:47:2a:51:2f:89:58:09:
                    ef:ea:87:90:fd:4f:7a:79:5e:4c:69:c5:18:c4:e2:
                    1d:f9:2c:bc:17:2a:98:7c:a7:ef:ad:cd:03:9f:ff:
                    5d:10:2d:39:45:15:52:e6:db:a7:9c:59:1f:9c:62:
                    54:97:7b:f2:98:70:bb:26:fe:68:55:e8:7f:2b:7a:
                    09:dc:21:bd:6a:21:f5:9c:df:87:75:ca:a7:48:6b:
                    fd:f4:be:22:b2:e5:1b:80:43:b1:a5:8e:c2:d1:ac:
                    2e:7e:3e:6e:d3:31:67:af:b4:23:6a:d7:7d:40:e5:
                    32:3c:4e:dc:7a:0c:4a:e7:4e:d3:ac:69:e7:20:5a:
                    a2:30:e0:f6:62:b4:e3:f1:5f:e8:8c:7c:70:a3:c2:
                    a2:37:f7:27:99:85:21:25:7a:aa:9d:af:6f:92:a0:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:DC:7E:B2:CF:07:56:C9:7D:39:7C:EB:D2:16:4C:47:82:90:86
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/8W7cfrLPB1bJfTl869IWTEeCkIY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:72:f9:17:43:01:b9:7a:e9:ee:81:fe:da:43:ef:42:f9:3d:
         de:ec:3c:76:8b:00:fc:a6:f0:7b:5e:2d:12:3c:4b:ce:de:08:
         63:8b:dc:1c:23:9c:d5:72:57:ac:eb:c7:a7:5b:f3:55:5e:f2:
         78:9e:11:23:33:fe:96:0e:26:54:41:45:7f:7a:70:a7:43:92:
         b0:a5:e1:51:7e:f6:4a:3c:42:2b:9a:a5:10:0a:1f:d4:59:9e:
         52:50:e7:a6:f7:21:61:6c:99:94:93:41:19:f0:06:e7:40:0a:
         26:f2:3d:55:7c:38:24:69:db:4c:68:b5:4a:e1:64:02:36:cc:
         f7:ba:c3:c0:dd:fa:60:03:3b:2e:57:1a:69:3e:67:99:17:9c:
         c1:8e:3f:2c:6f:8e:03:42:4e:38:6d:bf:3e:65:af:e4:c5:dd:
         c6:21:13:62:b7:89:02:50:9e:fe:ad:c1:b7:9c:4a:58:f0:10:
         3b:1d:4e:17:e8:07:7b:7c:68:a7:ba:15:4b:66:a7:79:42:03:
         59:93:13:31:68:26:bc:38:18:4e:55:e8:24:e2:f2:18:f6:89:
         8c:8d:6d:3b:03:8f:8e:25:79:e2:82:c6:c4:a4:f9:1a:0b:c5:
         eb:77:7f:3b:70:4f:89:60:c9:c8:3f:ba:3c:b7:eb:8b:4b:55:
         3c:c6:fe:f9
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMTA5Mjkw
MjQwNTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYxNkVEQzdFQjJDRjA3
NTZDOTdEMzk3Q0VCRDIxNjRDNDc4MjkwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpsMsmk3ywlQdADH028E08c2YkoD7uC4u35iAsp+y3CsrCvSeP
K2Xc+ItHy4A8GcEqkY1R6Q/SuKba2i8d/kc+ieLZCB9ekqQaHgPcoAAXvQul5pKm
6Qsl8afQbumyKx0yRypRL4lYCe/qh5D9T3p5XkxpxRjE4h35LLwXKph8p++tzQOf
/10QLTlFFVLm26ecWR+cYlSXe/KYcLsm/mhV6H8regncIb1qIfWc34d1yqdIa/30
viKy5RuAQ7GljsLRrC5+Pm7TMWevtCNq131A5TI8Ttx6DErnTtOsaecgWqIw4PZi
tOPxX+iMfHCjwqI39yeZhSEleqqdr2+SoJKfAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU8W7cfrLPB1bJfTl869IWTEeCkIYwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU
gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv
WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy84VzdjZnJMUEIxYkpmVGw4NjlJ
V1RFZUNrSVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEcNUw
MA0GCSqGSIb3DQEBCwUAA4IBAQBxcvkXQwG5eunugf7aQ+9C+T3e7Dx2iwD8pvB7
Xi0SPEvO3ghji9wcI5zVcles68enW/NVXvJ4nhEjM/6WDiZUQUV/enCnQ5KwpeFR
fvZKPEIrmqUQCh/UWZ5SUOem9yFhbJmUk0EZ8AbnQAom8j1VfDgkadtMaLVK4WQC
Nsz3usPA3fpgAzsuVxppPmeZF5zBjj8sb44DQk44bb8+Za/kxd3GIRNit4kCUJ7+
rcG3nEpY8BA7HU4X6Ad7fGinuhVLZqd5QgNZkxMxaCa8OBhOVegk4vIY9omMjW07
A4+OJXnigsbEpPkaC8Xrd387cE+JYMnIP7o8t+uLS1U8xv75
-----END CERTIFICATE-----