Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Ouhp3fFfXyXpFYBbH94NELw8O0A.roa
File:                     Ouhp3fFfXyXpFYBbH94NELw8O0A.roa (raw, json)
Hash identifier:          YBpmgTpgdxP857MeB5j4RnvDDk0D5hSBcJT7YDqFifw=
Subject key identifier:   3A:E8:69:DD:F1:5F:5F:25:E9:15:80:5B:1F:DE:0D:10:BC:3C:3B:40
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08D0
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Ouhp3fFfXyXpFYBbH94NELw8O0A.roa
Signing time:             Wed 18 Nov 2020 07:53:17 +0000
ROA not before:           Wed 18 Nov 2020 07:53:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        121.254.64.0/18 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 07:53:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3AE869DDF15F5F25E915805B1FDE0D10BC3C3B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:72:dd:5c:d6:32:fb:e0:ec:de:e6:e8:29:93:
                    0d:4c:c3:33:59:18:9f:19:26:6f:f4:6d:c4:67:ef:
                    c3:b0:20:af:b4:31:a7:90:ef:20:3c:7d:26:36:a3:
                    a2:94:10:6c:f9:f5:ea:16:0e:ff:af:75:fd:9b:ab:
                    37:b3:22:2f:0c:a0:ed:23:09:1a:d2:4a:0f:1d:bd:
                    73:6e:5f:7c:80:43:5c:0c:f0:15:89:cf:2d:e3:6e:
                    db:40:98:8f:b2:01:6c:da:ef:2a:1d:e8:e0:2a:26:
                    24:82:43:68:2d:6d:ad:57:2a:62:89:5a:cd:16:4e:
                    e5:8c:16:4d:a9:e7:05:2a:51:91:b7:69:8b:4e:42:
                    bd:0d:28:43:44:f8:93:26:1b:8e:95:46:ff:72:07:
                    7c:57:d6:40:d8:03:07:6f:ff:a7:5a:b2:9d:05:57:
                    8a:e1:fb:85:e1:45:0a:ce:f1:9a:45:b8:a0:e1:6a:
                    ac:6f:69:29:2b:fa:b6:57:b3:ca:ca:ac:aa:1b:a3:
                    9f:05:40:b9:4c:d0:0f:ad:2b:6f:3d:57:3d:9c:0f:
                    f4:31:f0:e9:b7:6c:0c:89:ba:10:69:9f:fc:00:d2:
                    9e:bc:01:76:9b:cf:48:c4:11:39:b8:6d:6a:39:57:
                    12:f1:82:88:ef:0a:fe:ba:d2:51:f6:36:3f:83:be:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:69:DD:F1:5F:5F:25:E9:15:80:5B:1F:DE:0D:10:BC:3C:3B:40
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Ouhp3fFfXyXpFYBbH94NELw8O0A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.254.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         34:93:67:1d:18:cc:61:f9:61:fe:48:e9:1f:dd:4a:1d:a3:56:
         0c:c5:9b:1f:3d:85:2a:9f:4f:f4:ea:b4:af:b0:6b:50:ae:d7:
         8f:ec:73:0a:c7:6f:7c:a9:e4:51:d8:27:89:4d:e0:be:d5:29:
         4a:e5:4b:99:ca:c2:ce:3c:98:81:39:1b:97:86:1c:e6:e7:21:
         f2:99:18:44:41:7e:bb:77:f3:9a:4f:db:43:04:2a:22:3d:ae:
         80:3c:6a:e3:2d:f8:3a:03:de:b1:e7:29:a2:19:11:1e:2e:0e:
         68:05:1e:85:67:db:f4:8e:97:80:79:5d:e0:9a:80:a2:8c:dc:
         a9:79:40:eb:b1:65:ad:0b:a7:a2:5c:ed:e7:8f:e2:a7:eb:39:
         95:5b:4a:47:1f:b8:41:e8:3c:f3:80:6d:c0:b8:06:86:ce:42:
         cc:b2:6c:8a:f6:ce:0a:21:08:68:81:14:34:3d:f9:2b:f9:65:
         c4:51:cc:47:de:53:c7:82:cd:05:95:d2:c3:ba:8c:98:bf:48:
         11:94:16:89:c9:1e:ed:0e:7c:d5:51:fc:b3:f7:25:47:e0:3c:
         18:27:d8:64:16:55:9c:55:29:b0:9c:a6:e5:fc:5c:a8:36:43:
         0b:76:c8:29:85:d5:a7:0e:ee:5e:59:34:3c:89:0c:b0:fa:68:
         69:d7:6f:ca
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMDExMTgw
NzUzMTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNBRTg2OURERjE1RjVG
MjVFOTE1ODA1QjFGREUwRDEwQkMzQzNCNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZct1c1jL74Oze5ugpkw1MwzNZGJ8ZJm/0bcRn78OwIK+0MaeQ
7yA8fSY2o6KUEGz59eoWDv+vdf2bqzezIi8MoO0jCRrSSg8dvXNuX3yAQ1wM8BWJ
zy3jbttAmI+yAWza7yod6OAqJiSCQ2gtba1XKmKJWs0WTuWMFk2p5wUqUZG3aYtO
Qr0NKENE+JMmG46VRv9yB3xX1kDYAwdv/6dasp0FV4rh+4XhRQrO8ZpFuKDhaqxv
aSkr+rZXs8rKrKobo58FQLlM0A+tK289Vz2cD/Qx8Om3bAyJuhBpn/wA0p68AXab
z0jEETm4bWo5VxLxgojvCv660lH2Nj+DvtcjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUOuhp3fFfXyXpFYBbH94NELw8O0AwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvT3VocDNmRmZYeVhwRllCYkg5NE5F
THc4TzBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnn+QDAN
BgkqhkiG9w0BAQsFAAOCAQEANJNnHRjMYflh/kjpH91KHaNWDMWbHz2FKp9P9Oq0
r7BrUK7Xj+xzCsdvfKnkUdgniU3gvtUpSuVLmcrCzjyYgTkbl4Yc5uch8pkYREF+
u3fzmk/bQwQqIj2ugDxq4y34OgPesecpohkRHi4OaAUehWfb9I6XgHld4JqAoozc
qXlA67FlrQunolzt54/ip+s5lVtKRx+4Qeg884BtwLgGhs5CzLJsivbOCiEIaIEU
ND35K/llxFHMR95Tx4LNBZXSw7qMmL9IEZQWicke7Q581VH8s/clR+A8GCfYZBZV
nFUpsJym5fxcqDZDC3bIKYXVpw7uXlk0PIkMsPpoaddvyg==
-----END CERTIFICATE-----