Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YCvJIRGZpBp1QrGXNINY2mAmiwg.roa
File:                     YCvJIRGZpBp1QrGXNINY2mAmiwg.roa (raw, json)
Hash identifier:          ex6kpSsZdpcM+/IE3QS7h7M0JQpn9iIGKLkqN6UE81s=
Subject key identifier:   60:2B:C9:21:11:99:A4:1A:75:42:B1:97:34:83:58:DA:60:26:8B:08
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0791
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YCvJIRGZpBp1QrGXNINY2mAmiwg.roa
Signing time:             Tue 29 Sep 2020 10:03:12 +0000
ROA not before:           Tue 29 Sep 2020 10:03:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        61.247.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 10:03:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=602BC9211199A41A7542B197348358DA60268B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:47:6e:73:71:65:3e:c4:31:08:e0:7a:8c:
                    80:3f:5a:ca:69:1f:50:c6:6d:e4:0a:9d:8e:4f:e3:
                    96:7d:09:ba:d9:86:3a:72:ec:31:31:2c:a2:e2:ee:
                    15:2d:14:94:97:d0:bc:99:51:ee:1f:2d:66:b1:5b:
                    b1:eb:5d:6f:eb:97:72:da:75:74:78:9e:75:7b:02:
                    41:cc:93:af:67:1e:cc:c5:74:e7:c4:84:2e:bc:cf:
                    64:cb:b3:17:d1:79:69:fb:5c:7e:49:84:50:fa:5d:
                    2f:a4:fb:1d:ff:38:83:b6:a7:4d:2a:d0:87:53:8d:
                    11:8c:9f:90:54:ae:75:c9:1d:da:1e:02:a4:20:50:
                    86:a8:6e:37:74:16:57:5c:44:58:17:42:11:08:a3:
                    f7:53:d7:67:02:2b:9f:9c:3c:2b:dd:c0:93:cf:57:
                    d1:b9:7c:ea:ab:b2:18:6a:00:0f:bb:9d:78:de:97:
                    85:c8:b9:b0:88:9d:d1:2e:6f:af:54:1a:b4:a2:4a:
                    e7:9b:8b:70:8e:73:5e:1e:ef:b6:1a:49:0c:74:9f:
                    64:8f:a0:59:35:17:68:c3:9e:41:74:b0:29:50:d7:
                    76:21:92:2f:5f:f1:92:c8:08:4c:09:a0:00:52:b8:
                    cc:d9:9e:91:70:75:09:8c:0d:d5:f7:53:11:b4:5d:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2B:C9:21:11:99:A4:1A:75:42:B1:97:34:83:58:DA:60:26:8B:08
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YCvJIRGZpBp1QrGXNINY2mAmiwg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:1d:12:0c:60:21:cb:d2:eb:19:88:3a:68:59:d5:e8:49:
         ae:97:3e:50:fa:4c:99:8a:6c:8b:b3:0a:35:e4:82:23:d7:dc:
         88:29:60:6c:23:46:25:fb:19:ed:26:65:30:b3:3c:f5:88:f0:
         9e:28:66:e5:67:ec:5f:c2:49:77:c2:86:8f:f2:6c:83:f1:d3:
         37:77:4d:4a:3a:c5:2f:2c:16:57:96:44:24:2b:29:f9:ea:6b:
         ed:9f:5b:90:e6:c7:6c:01:f2:d0:a9:e0:80:87:d7:ed:f7:f6:
         ea:c1:87:a1:2d:4d:4d:2a:88:55:29:d3:ec:2b:75:56:e2:dd:
         da:da:18:88:4e:1e:06:b5:f7:57:e0:96:bb:54:ca:23:16:ea:
         98:27:ea:1c:83:51:0f:47:ab:ac:9c:7b:56:8a:bf:d7:ad:6f:
         f5:4f:43:7d:52:90:55:b4:fe:1b:7b:bf:80:96:42:9c:b5:49:
         9b:36:78:45:f1:a6:36:5e:08:d6:99:c7:6a:c7:83:9c:18:ab:
         88:82:56:68:f0:88:ea:56:56:58:d9:5a:3f:e8:eb:84:bd:91:
         1d:e5:42:fb:fa:f1:14:0e:8e:31:7e:33:2f:f7:7c:23:82:03:
         4e:08:73:45:d6:f9:db:13:77:9e:aa:bf:e6:15:51:1d:5c:4a:
         81:a2:cf:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMDA5Mjkx
MDAzMTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYwMkJDOTIxMTE5OUE0
MUE3NTQyQjE5NzM0ODM1OERBNjAyNjhCMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8skduc3FlPsQxCOB6jIA/WsppH1DGbeQKnY5P45Z9CbrZhjpy
7DExLKLi7hUtFJSX0LyZUe4fLWaxW7HrXW/rl3LadXR4nnV7AkHMk69nHszFdOfE
hC68z2TLsxfReWn7XH5JhFD6XS+k+x3/OIO2p00q0IdTjRGMn5BUrnXJHdoeAqQg
UIaobjd0FldcRFgXQhEIo/dT12cCK5+cPCvdwJPPV9G5fOqrshhqAA+7nXjel4XI
ubCIndEub69UGrSiSuebi3COc14e77YaSQx0n2SPoFk1F2jDnkF0sClQ13Yhki9f
8ZLICEwJoABSuMzZnpFwdQmMDdX3UxG0XY9DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYCvJIRGZpBp1QrGXNINY2mAmiwgwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1lDdkpJUkdacEJwMVFyR1hO
SU5ZMm1BbWl3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
96AwDQYJKoZIhvcNAQELBQADggEBAAymHRIMYCHL0usZiDpoWdXoSa6XPlD6TJmK
bIuzCjXkgiPX3IgpYGwjRiX7Ge0mZTCzPPWI8J4oZuVn7F/CSXfCho/ybIPx0zd3
TUo6xS8sFleWRCQrKfnqa+2fW5Dmx2wB8tCp4ICH1+339urBh6EtTU0qiFUp0+wr
dVbi3draGIhOHga191fglrtUyiMW6pgn6hyDUQ9Hq6yce1aKv9etb/VPQ31SkFW0
/ht7v4CWQpy1SZs2eEXxpjZeCNaZx2rHg5wYq4iCVmjwiOpWVljZWj/o64S9kR3l
Qvv68RQOjjF+My/3fCOCA04Ic0XW+dsTd56qv+YVUR1cSoGiz3M=
-----END CERTIFICATE-----