Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/M-SkrQdQdj9cCyYe0XKxuWLbK9o.roa
File:                     M-SkrQdQdj9cCyYe0XKxuWLbK9o.roa (raw, json)
Hash identifier:          3ydVxNyy2kfPnJZaraG/+0XCKjrjo9o7XYULefnJ6Qk=
Subject key identifier:   33:E4:A4:AD:07:50:76:3F:5C:0B:26:1E:D1:72:B1:B9:62:DB:2B:DA
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B0A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/M-SkrQdQdj9cCyYe0XKxuWLbK9o.roa
Signing time:             Thu 16 Dec 2021 06:43:10 +0000
ROA not before:           Thu 16 Dec 2021 06:43:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        182.155.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2826 (0xb0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:43:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=33E4A4AD0750763F5C0B261ED172B1B962DB2BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:00:36:7b:a2:8d:13:fd:0c:27:58:6b:08:
                    d1:9d:e8:83:0c:3f:90:ed:16:83:7a:71:00:2b:37:
                    20:4f:92:4e:39:03:75:e7:64:66:b8:ab:6a:5e:63:
                    2a:1c:30:67:f2:93:47:10:cc:14:3f:1f:21:ba:38:
                    db:f6:03:3c:b0:13:7c:b2:e8:76:ce:9e:cc:08:07:
                    be:af:7e:d1:f0:8b:c6:15:f5:9e:2f:cc:3c:67:01:
                    39:95:0a:25:11:46:a3:c9:d9:51:5c:45:3a:13:e8:
                    7d:ce:13:d5:02:0b:ad:1b:84:62:8b:82:af:c1:25:
                    17:88:f6:f8:dc:f9:8b:6b:c3:2a:6e:eb:20:f3:eb:
                    4c:c5:04:95:9c:e3:ce:53:26:4a:30:76:ac:6c:4e:
                    29:d2:39:98:67:ff:47:00:70:ef:7c:2d:60:8c:2a:
                    9d:bc:87:a2:3d:40:09:14:6b:07:ba:ad:d6:8f:20:
                    c0:11:5c:f2:aa:a6:1a:85:ca:52:80:58:0f:70:80:
                    99:c3:82:b2:f2:66:9b:ea:12:25:0f:be:2a:d5:42:
                    0e:77:c6:83:30:11:c6:49:e2:ae:3b:06:5b:d4:3e:
                    c7:84:a6:8d:c0:39:8c:2f:b0:cc:13:db:58:66:8d:
                    b4:71:93:8d:9c:70:34:63:7a:c1:06:6e:cb:f6:87:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:A4:AD:07:50:76:3F:5C:0B:26:1E:D1:72:B1:B9:62:DB:2B:DA
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/M-SkrQdQdj9cCyYe0XKxuWLbK9o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:83:54:99:b7:05:0c:59:76:ae:45:21:e3:03:f7:99:b9:
         0f:df:98:55:38:5a:e7:3c:7b:41:f5:01:52:d0:e3:bf:d8:a2:
         3a:35:51:d9:02:92:69:f5:9c:72:d8:3d:89:69:3a:45:c5:47:
         a8:5f:6f:40:7c:0f:d9:7f:ca:fc:21:7a:fa:04:32:b2:a3:d8:
         09:af:16:81:50:23:d5:8d:ea:75:59:4a:2c:9b:df:a9:25:00:
         a2:b9:d0:6c:fb:14:78:e7:75:5b:5f:f4:8c:ae:fa:3c:e9:c9:
         75:79:9a:ac:89:06:80:8a:32:37:b8:b3:07:78:ff:80:83:11:
         e4:e5:71:83:d9:d9:3f:af:e3:ae:f2:d4:c9:68:f6:e0:57:d8:
         ab:85:44:c3:59:96:60:e7:ca:1b:ef:0c:e9:58:36:2a:5c:57:
         32:42:30:db:69:5f:41:28:3b:73:49:d6:7b:21:82:be:7b:1c:
         aa:c1:e4:5f:97:c5:8d:d6:16:75:5a:36:77:7e:14:10:bf:fe:
         64:09:cd:75:5b:64:96:a2:46:82:b9:20:2a:bc:0d:7a:23:3a:
         4b:56:00:a0:19:33:df:19:b4:2e:46:e3:77:22:ab:80:b3:69:
         be:2f:f5:43:ea:fc:fc:d4:f7:19:3c:b9:4e:dd:04:ae:7c:ed:
         ad:37:57:44
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjQzMTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDMzRTRBNEFEMDc1MDc2
M0Y1QzBCMjYxRUQxNzJCMUI5NjJEQjJCREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGIAA2e6KNE/0MJ1hrCNGd6IMMP5DtFoN6cQArNyBPkk45A3Xn
ZGa4q2peYyocMGfyk0cQzBQ/HyG6ONv2AzywE3yy6HbOnswIB76vftHwi8YV9Z4v
zDxnATmVCiURRqPJ2VFcRToT6H3OE9UCC60bhGKLgq/BJReI9vjc+Ytrwypu6yDz
60zFBJWc485TJkowdqxsTinSOZhn/0cAcO98LWCMKp28h6I9QAkUawe6rdaPIMAR
XPKqphqFylKAWA9wgJnDgrLyZpvqEiUPvirVQg53xoMwEcZJ4q47BlvUPseEpo3A
OYwvsMwT21hmjbRxk42ccDRjesEGbsv2hw1nAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUM+SkrQdQdj9cCyYe0XKxuWLbK9owHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTS1Ta3JRZFFkajljQ3lZZTBYS3h1
V0xiSzlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabIDAN
BgkqhkiG9w0BAQsFAAOCAQEACP+DVJm3BQxZdq5FIeMD95m5D9+YVTha5zx7QfUB
UtDjv9iiOjVR2QKSafWcctg9iWk6RcVHqF9vQHwP2X/K/CF6+gQysqPYCa8WgVAj
1Y3qdVlKLJvfqSUAornQbPsUeOd1W1/0jK76POnJdXmarIkGgIoyN7izB3j/gIMR
5OVxg9nZP6/jrvLUyWj24FfYq4VEw1mWYOfKG+8M6Vg2KlxXMkIw22lfQSg7c0nW
eyGCvnscqsHkX5fFjdYWdVo2d34UEL/+ZAnNdVtklqJGgrkgKrwNeiM6S1YAoBkz
3xm0LkbjdyKrgLNpvi/1Q+r8/NT3GTy5Tt0ErnztrTdXRA==
-----END CERTIFICATE-----