Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/LLNM-ZZElOJqPhkBEp0daMFmYIE.roa
File:                     LLNM-ZZElOJqPhkBEp0daMFmYIE.roa (raw, json)
Hash identifier:          zHAs2gsJsxvcmptMP0eNiC/kOiCGEQKXdQ7sqjsXBPg=
Subject key identifier:   2C:B3:4C:F9:96:44:94:E2:6A:3E:19:01:12:9D:1D:68:C1:66:60:81
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0908
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LLNM-ZZElOJqPhkBEp0daMFmYIE.roa
Signing time:             Tue 24 Nov 2020 03:20:16 +0000
ROA not before:           Tue 24 Nov 2020 03:20:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        111.67.48.0/22 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 24 03:20:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2CB34CF9964494E26A3E1901129D1D68C1666081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:7c:78:c9:b9:c2:ab:d6:6d:3e:bc:0a:a4:
                    9a:69:66:66:46:59:63:c0:95:06:4a:ad:65:ae:08:
                    d0:61:4a:ac:77:ef:1f:6a:0f:cb:d9:22:64:a6:5d:
                    a5:6f:43:88:9c:87:89:25:f4:9c:44:b1:d4:df:f7:
                    c9:b0:ad:ff:18:d9:c9:c1:c8:40:fa:fa:54:e5:8e:
                    e9:98:fb:a4:60:be:b5:b0:8b:fd:4c:15:b5:0a:62:
                    ec:d0:04:34:43:2d:e9:98:93:db:0d:b5:f0:54:31:
                    00:39:fa:16:2e:19:67:be:80:8c:3e:80:1b:23:3a:
                    3c:8f:f8:1e:96:b1:6b:73:81:49:ab:9f:1a:a0:75:
                    07:bf:18:93:04:52:71:9b:6e:aa:68:80:ae:d2:58:
                    59:0c:8a:7d:58:fb:5d:51:68:19:4a:11:cf:20:79:
                    44:3b:d0:0c:d6:d7:a3:19:48:54:6a:5f:ac:5b:23:
                    09:79:27:41:52:41:70:23:29:f2:08:5f:50:e4:a1:
                    54:4b:c3:23:16:04:8d:32:8f:e1:a9:2e:1a:ff:75:
                    dc:80:44:9d:16:ef:fd:2c:22:3f:da:4c:db:af:ec:
                    93:c4:f9:cb:d1:0f:e7:ea:31:7c:c1:c0:8b:44:70:
                    67:91:21:71:e6:bd:bb:31:bb:ba:ee:8f:52:3a:27:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:4C:F9:96:44:94:E2:6A:3E:19:01:12:9D:1D:68:C1:66:60:81
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LLNM-ZZElOJqPhkBEp0daMFmYIE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:db:dd:43:c3:1f:c8:cd:1d:91:9f:ab:65:97:4a:9c:f4:
         7c:09:f7:33:ca:9d:dd:12:f5:38:00:5c:03:25:04:a1:89:21:
         12:e6:b2:40:5d:39:5f:e2:98:2c:82:02:3e:38:1c:c2:6c:e0:
         26:f8:40:39:a7:d3:24:d0:f1:94:cb:89:45:f9:10:15:bd:77:
         0e:7e:5b:f5:36:10:2b:76:bc:7e:c0:5f:23:44:ba:49:ed:e0:
         b7:00:9e:ba:5e:e7:91:f5:54:cd:80:75:2f:37:3c:b4:aa:8b:
         5a:79:53:7c:e8:a3:15:0f:99:08:fe:2a:e0:3d:ae:b5:ab:70:
         56:5c:be:b5:34:8a:fb:2b:7c:ed:f4:dc:f6:ce:b4:7c:0d:67:
         2f:01:e0:19:81:5a:eb:6b:d7:1c:90:df:86:90:12:ba:e7:47:
         69:67:08:d3:22:2a:4a:45:0b:3c:ef:8f:e5:97:8b:5c:1a:29:
         53:b5:e5:9c:4e:dd:5a:80:41:89:9e:d4:9f:fd:97:a4:de:22:
         b9:fd:ce:a8:37:79:70:7a:5a:a4:2f:0a:e9:6b:5c:20:f5:02:
         eb:29:48:4b:0e:3a:d5:8a:c1:cd:1f:99:29:de:f6:cb:13:21:
         ae:18:ca:7b:c1:cb:11:d2:8a:59:1f:51:ae:20:b0:d0:66:7a:
         82:22:18:23
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMDExMjQw
MzIwMTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJDQjM0Q0Y5OTY0NDk0
RTI2QTNFMTkwMTEyOUQxRDY4QzE2NjYwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIJHx4ybnCq9ZtPrwKpJppZmZGWWPAlQZKrWWuCNBhSqx37x9q
D8vZImSmXaVvQ4ich4kl9JxEsdTf98mwrf8Y2cnByED6+lTljumY+6RgvrWwi/1M
FbUKYuzQBDRDLemYk9sNtfBUMQA5+hYuGWe+gIw+gBsjOjyP+B6WsWtzgUmrnxqg
dQe/GJMEUnGbbqpogK7SWFkMin1Y+11RaBlKEc8geUQ70AzW16MZSFRqX6xbIwl5
J0FSQXAjKfIIX1DkoVRLwyMWBI0yj+GpLhr/ddyARJ0W7/0sIj/aTNuv7JPE+cvR
D+fqMXzBwItEcGeRIXHmvbsxu7ruj1I6J2gNAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQULLNM+ZZElOJqPhkBEp0daMFmYIEwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTExOTS1aWkVsT0pxUGhrQkVwMGRh
TUZtWUlFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm9DMDAN
BgkqhkiG9w0BAQsFAAOCAQEAcm/b3UPDH8jNHZGfq2WXSpz0fAn3M8qd3RL1OABc
AyUEoYkhEuayQF05X+KYLIICPjgcwmzgJvhAOafTJNDxlMuJRfkQFb13Dn5b9TYQ
K3a8fsBfI0S6Se3gtwCeul7nkfVUzYB1Lzc8tKqLWnlTfOijFQ+ZCP4q4D2utatw
Vly+tTSK+yt87fTc9s60fA1nLwHgGYFa62vXHJDfhpASuudHaWcI0yIqSkULPO+P
5ZeLXBopU7XlnE7dWoBBiZ7Un/2XpN4iuf3OqDd5cHpapC8K6WtcIPUC6ylISw46
1YrBzR+ZKd72yxMhrhjKe8HLEdKKWR9RriCw0GZ6giIYIw==
-----END CERTIFICATE-----