Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/MKVQGWibw-CiJoKFyIxLgOgDzGc.roa
File:                     MKVQGWibw-CiJoKFyIxLgOgDzGc.roa (raw, json)
Hash identifier:          mV0po48DstVcD8F0lqlpgG0O3MRqgOQWdvtKu/VY+ZU=
Subject key identifier:   30:A5:50:19:68:9B:C3:E0:A2:26:82:85:C8:8C:4B:80:E8:03:CC:67
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       079C
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/MKVQGWibw-CiJoKFyIxLgOgDzGc.roa
Signing time:             Tue 29 Sep 2020 10:03:14 +0000
ROA not before:           Tue 29 Sep 2020 10:03:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        61.56.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 10:03:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=30A55019689BC3E0A2268285C88C4B80E803CC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:e8:69:44:19:10:da:ce:14:c7:8b:8f:98:
                    64:87:09:a3:41:4a:f7:25:65:26:f2:1b:bd:cd:bb:
                    75:bb:c4:09:74:7c:10:5b:ff:26:5b:9b:49:c4:f0:
                    0e:a6:1d:2f:42:c0:97:63:20:fc:42:dc:55:a3:b7:
                    88:35:63:a0:cb:9a:d0:ac:d3:46:c9:27:ec:13:a8:
                    0b:82:51:ce:8d:a7:9f:3f:fb:c5:ec:8d:b2:12:4d:
                    32:43:e9:16:ce:a3:7a:a2:7c:01:fa:17:22:f6:3b:
                    c7:8f:7f:86:85:8a:4f:c0:84:7b:4d:d2:25:ec:29:
                    e7:3c:97:10:cf:ce:7a:bf:ac:0a:5e:22:3c:ea:fe:
                    17:61:ea:1d:cc:fd:06:88:3e:f7:b2:1b:c7:1f:59:
                    bc:28:d1:31:e3:de:5f:7c:98:0e:de:dd:2b:18:5d:
                    87:02:f6:20:dc:aa:0e:67:96:34:0f:6c:2b:db:d0:
                    35:e8:45:8c:f8:9f:97:5f:1b:c5:d8:63:6f:0c:d6:
                    fd:50:5a:26:14:94:43:64:89:09:0f:73:ce:93:67:
                    92:97:6c:bc:33:cf:73:00:5c:bb:fa:a7:12:b2:f6:
                    5f:ef:5c:3a:7a:09:f2:42:e9:79:d1:1b:ed:b7:dc:
                    68:85:5a:a3:b3:4b:79:f5:6e:e4:42:f0:65:b3:1d:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:50:19:68:9B:C3:E0:A2:26:82:85:C8:8C:4B:80:E8:03:CC:67
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/MKVQGWibw-CiJoKFyIxLgOgDzGc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1b:ea:68:a7:df:ec:eb:24:47:21:a5:0c:30:74:7c:e0:39:
         1e:e2:8e:33:cd:d6:39:22:c0:ce:7b:d8:35:c5:26:4d:ba:3f:
         2a:2a:e3:c7:6a:df:d5:da:89:b9:25:ad:71:1c:26:fb:91:04:
         9d:bb:df:ba:28:ab:bc:9f:ef:92:69:d1:05:77:96:fd:35:5f:
         7a:5d:22:ca:11:41:2a:4d:30:9f:d1:c2:7e:97:31:83:b7:73:
         0f:47:67:15:69:27:77:e9:48:15:6d:0c:4e:9e:fb:a4:5b:19:
         a7:e7:eb:e0:b2:f3:1b:08:57:fb:9b:de:0e:f1:63:99:35:2d:
         62:f2:09:0a:b0:fc:8c:21:92:07:46:f4:0d:27:94:41:76:d7:
         d6:fc:00:71:c6:a1:fc:c9:ba:55:fe:49:3f:a6:f0:67:13:b9:
         ff:5f:72:1a:1d:94:c3:db:2a:a2:29:6e:00:b6:96:f3:7b:ea:
         6a:68:26:02:3e:9d:ea:60:fd:96:d0:f9:e9:9b:5d:08:62:e3:
         c5:00:8b:2a:af:e8:31:6f:f0:3e:fe:d7:21:0f:3a:6f:a7:92:
         37:bc:9b:3c:c1:80:01:57:94:cd:69:87:d8:e9:e1:71:fd:ce:
         7d:c7:12:85:9f:b1:b4:3e:a0:39:48:57:fa:f0:47:e6:40:92:
         3e:d0:21:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMDA5Mjkx
MDAzMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMwQTU1MDE5Njg5QkMz
RTBBMjI2ODI4NUM4OEM0QjgwRTgwM0NDNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOOuhpRBkQ2s4Ux4uPmGSHCaNBSvclZSbyG73Nu3W7xAl0fBBb
/yZbm0nE8A6mHS9CwJdjIPxC3FWjt4g1Y6DLmtCs00bJJ+wTqAuCUc6Np58/+8Xs
jbISTTJD6RbOo3qifAH6FyL2O8ePf4aFik/AhHtN0iXsKec8lxDPznq/rApeIjzq
/hdh6h3M/QaIPveyG8cfWbwo0THj3l98mA7e3SsYXYcC9iDcqg5nljQPbCvb0DXo
RYz4n5dfG8XYY28M1v1QWiYUlENkiQkPc86TZ5KXbLwzz3MAXLv6pxKy9l/vXDp6
CfJC6XnRG+233GiFWqOzS3n1buRC8GWzHcNHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMKVQGWibw+CiJoKFyIxLgOgDzGcwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL01LVlFHV2lidy1DaUpvS0Z5
SXhMZ09nRHpHYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
OFQwDQYJKoZIhvcNAQELBQADggEBAGMb6min3+zrJEchpQwwdHzgOR7ijjPN1jki
wM572DXFJk26Pyoq48dq39XaibklrXEcJvuRBJ2737ooq7yf75Jp0QV3lv01X3pd
IsoRQSpNMJ/Rwn6XMYO3cw9HZxVpJ3fpSBVtDE6e+6RbGafn6+Cy8xsIV/ub3g7x
Y5k1LWLyCQqw/IwhkgdG9A0nlEF219b8AHHGofzJulX+ST+m8GcTuf9fchodlMPb
KqIpbgC2lvN76mpoJgI+nepg/ZbQ+embXQhi48UAiyqv6DFv8D7+1yEPOm+nkje8
mzzBgAFXlM1ph9jp4XH9zn3HEoWfsbQ+oDlIV/rwR+ZAkj7QIUk=
-----END CERTIFICATE-----