Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WahRgV5EmXGVuyq6HCIjBSYKBQ4.roa
File:                     WahRgV5EmXGVuyq6HCIjBSYKBQ4.roa (raw, json)
Hash identifier:          /oB5cT0EuoBsUfKo8ON59DohUYh7rxVVfAR9ckx22k0=
Subject key identifier:   59:A8:51:81:5E:44:99:71:95:BB:2A:BA:1C:22:23:05:26:0A:05:0E
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0919
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WahRgV5EmXGVuyq6HCIjBSYKBQ4.roa
Signing time:             Sun 07 Feb 2021 11:55:59 +0000
ROA not before:           Sun 07 Feb 2021 11:55:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        113.21.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Feb  7 11:55:59 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=59A851815E44997195BB2ABA1C222305260A050E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:49:2e:c6:2b:06:83:bf:33:52:85:79:37:
                    bc:fb:e1:bd:fe:55:94:24:f0:81:aa:13:41:73:48:
                    67:57:95:77:75:99:8e:bc:78:51:4c:ec:ea:93:df:
                    44:39:a7:f5:ba:c5:30:89:b9:bd:0e:a1:c8:cf:49:
                    0b:08:34:ae:ce:19:1b:b1:0d:1b:c0:28:77:b7:9b:
                    70:77:6c:77:38:32:4d:91:74:ad:b6:75:02:24:cf:
                    2e:ae:9e:ac:13:81:2f:f6:fe:c6:c1:88:39:7b:5a:
                    76:13:e7:b9:9b:c6:c5:a4:f4:65:2a:52:22:86:af:
                    7f:47:d5:c2:4a:f7:2f:ee:bb:22:02:a5:71:1f:af:
                    9e:3f:75:2a:a3:fa:e8:64:ef:ed:5a:74:55:ba:4f:
                    c3:45:e5:7d:9c:db:ed:74:dd:f6:34:e0:c9:63:f8:
                    e3:02:4e:be:30:0f:15:17:b8:7c:a2:10:95:b0:be:
                    8e:39:61:15:b8:07:54:10:4f:98:76:ea:3f:b3:d8:
                    f0:bb:50:60:d0:89:b8:44:13:32:59:e6:13:f8:48:
                    20:68:0c:5f:ed:d5:e1:27:32:a9:d1:18:6c:83:92:
                    bd:44:f4:89:54:68:95:f8:e9:ee:a1:e0:3f:b3:0b:
                    dc:c0:12:dc:a5:5a:1d:99:7a:e7:ca:25:f9:75:02:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:51:81:5E:44:99:71:95:BB:2A:BA:1C:22:23:05:26:0A:05:0E
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WahRgV5EmXGVuyq6HCIjBSYKBQ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:06:cd:38:d6:06:cf:0f:17:0b:c1:60:29:48:76:ed:d8:73:
         ec:b4:db:07:68:a7:64:3e:fc:be:0d:39:29:43:20:f7:56:71:
         ee:12:0f:74:cf:c6:35:cd:dc:48:d1:49:2b:eb:65:db:55:2d:
         1e:e6:03:d3:6a:10:32:67:69:e4:db:71:b6:3d:ef:a4:4d:de:
         ff:b0:fc:64:77:7f:d4:46:6c:8a:09:3c:7f:e3:1d:2c:bb:ec:
         14:7d:81:b4:5a:ff:20:39:94:55:ac:97:97:7d:42:bc:46:9a:
         a2:54:68:f8:7f:48:be:bb:1c:59:a4:df:07:88:b3:45:20:f9:
         d7:49:fe:c5:c2:85:31:d1:5d:64:4c:65:5b:c9:0b:c3:76:4d:
         80:d9:bc:fe:79:3a:95:19:7f:76:22:75:ae:b3:95:b5:4e:e4:
         f7:73:20:14:f7:15:a3:92:ce:07:1f:80:a5:88:b7:87:cc:01:
         3d:e8:62:32:6b:80:59:cb:7f:ad:a7:98:50:ee:a8:56:38:2c:
         03:fb:25:cf:8f:3e:da:06:b5:8a:3b:af:28:05:eb:97:35:57:
         21:47:18:70:50:6f:bb:0c:f8:41:c8:77:dd:7c:7d:fb:0b:35:
         27:2d:71:21:2c:04:2b:dc:92:c5:d3:bc:66:5a:25:ff:ae:e4:
         0a:7a:e1:d7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMTAyMDcx
MTU1NTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU5QTg1MTgxNUU0NDk5
NzE5NUJCMkFCQTFDMjIyMzA1MjYwQTA1MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/rEkuxisGg78zUoV5N7z74b3+VZQk8IGqE0FzSGdXlXd1mY68
eFFM7OqT30Q5p/W6xTCJub0OocjPSQsINK7OGRuxDRvAKHe3m3B3bHc4Mk2RdK22
dQIkzy6unqwTgS/2/sbBiDl7WnYT57mbxsWk9GUqUiKGr39H1cJK9y/uuyICpXEf
r54/dSqj+uhk7+1adFW6T8NF5X2c2+103fY04Mlj+OMCTr4wDxUXuHyiEJWwvo45
YRW4B1QQT5h26j+z2PC7UGDQibhEEzJZ5hP4SCBoDF/t1eEnMqnRGGyDkr1E9IlU
aJX46e6h4D+zC9zAEtylWh2ZeufKJfl1AsYXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWahRgV5EmXGVuyq6HCIjBSYKBQ4wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1dhaFJnVjVFbVhHVnV5cTZI
Q0lqQlNZS0JRNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJx
FbwwDQYJKoZIhvcNAQELBQADggEBAHcGzTjWBs8PFwvBYClIdu3Yc+y02wdop2Q+
/L4NOSlDIPdWce4SD3TPxjXN3EjRSSvrZdtVLR7mA9NqEDJnaeTbcbY976RN3v+w
/GR3f9RGbIoJPH/jHSy77BR9gbRa/yA5lFWsl5d9QrxGmqJUaPh/SL67HFmk3weI
s0Ug+ddJ/sXChTHRXWRMZVvJC8N2TYDZvP55OpUZf3Yida6zlbVO5PdzIBT3FaOS
zgcfgKWIt4fMAT3oYjJrgFnLf62nmFDuqFY4LAP7Jc+PPtoGtYo7rygF65c1VyFH
GHBQb7sM+EHId918ffsLNSctcSEsBCvcksXTvGZaJf+u5Ap64dc=
-----END CERTIFICATE-----