Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/jK865T63uwHZOblIZ7T1EP5neZs.roa
File:                     jK865T63uwHZOblIZ7T1EP5neZs.roa (raw, json)
Hash identifier:          MHK2MMIhRk7TGsy+fIfAjmvAWDJUlu+onU5HeAQBeIg=
Subject key identifier:   8C:AF:3A:E5:3E:B7:BB:01:D9:39:B9:48:67:B4:F5:10:FE:67:79:9B
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0958
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jK865T63uwHZOblIZ7T1EP5neZs.roa
Signing time:             Thu 21 Jan 2021 10:04:08 +0000
ROA not before:           Thu 21 Jan 2021 10:04:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        119.15.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Jan 21 10:04:08 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8CAF3AE53EB7BB01D939B94867B4F510FE67799B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3d:95:11:1c:25:92:bd:8f:c3:34:16:f5:da:
                    b7:29:9b:c5:2e:41:24:37:06:82:02:7c:5d:fe:2d:
                    61:7a:e8:d3:49:f2:f9:63:8d:98:aa:42:60:f3:4e:
                    b2:b4:3a:b8:a7:68:5a:da:15:40:9e:37:cd:6b:ef:
                    80:75:86:80:a3:6f:29:de:b0:55:63:d9:e4:24:0c:
                    96:42:68:90:45:74:70:ae:ae:b1:e3:ee:7a:f6:a2:
                    73:58:87:eb:cd:53:20:72:04:b6:61:7e:1f:d4:22:
                    4f:2e:cb:7f:79:d0:6a:92:c3:f8:53:76:57:40:73:
                    89:08:13:34:17:17:3d:c2:c6:d2:79:e3:15:e9:b9:
                    ea:0a:a1:c5:05:58:95:59:c5:16:ba:af:7b:e9:54:
                    17:38:57:b9:20:a0:ce:bc:53:78:b4:c4:99:49:38:
                    d8:30:d1:f8:27:09:f6:23:af:f6:cf:5c:50:50:bd:
                    62:07:00:a3:55:db:42:d0:bc:c7:0c:75:18:58:93:
                    fe:97:2a:13:02:2e:09:d0:8f:05:e8:a5:ef:f3:0c:
                    a8:78:ff:4d:01:ff:97:aa:e8:c6:ce:6d:1b:0b:4a:
                    4b:17:d4:7d:47:1c:44:fd:b6:7c:7a:62:ff:8d:54:
                    74:95:dd:c7:14:50:b4:70:3b:50:5a:ce:1a:4f:e6:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AF:3A:E5:3E:B7:BB:01:D9:39:B9:48:67:B4:F5:10:FE:67:79:9B
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jK865T63uwHZOblIZ7T1EP5neZs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:4b:00:c2:f1:dd:b8:7e:2a:ac:c3:27:44:b7:97:55:8b:
         15:78:84:ef:09:c6:14:c2:10:d5:fb:f3:22:e9:fa:3f:d4:a1:
         c1:5d:c9:3c:02:b1:95:3e:22:67:58:c9:a1:3f:70:86:e1:21:
         60:9e:8f:26:94:9b:a2:e2:c9:3d:c4:7c:b6:0c:f7:7e:c9:65:
         de:67:79:7b:b2:9d:65:21:1a:ec:29:15:b3:22:fa:e9:6a:4a:
         62:77:ab:5e:eb:44:1b:dc:71:3f:c5:7c:ff:92:a0:2b:83:d8:
         3d:98:db:b7:a3:15:07:41:99:ba:28:ff:83:18:f8:93:ab:22:
         f2:92:c4:7f:22:46:25:86:6e:05:65:af:6c:64:71:fc:cd:bc:
         5b:9e:29:c9:b1:0e:de:a9:4c:d2:e7:7d:7d:7d:bb:fc:4d:f3:
         a2:3f:1d:fe:3e:d6:1d:1e:2a:77:31:be:0e:42:bc:aa:ef:c4:
         50:07:e8:47:37:e7:98:04:5a:0c:c3:3a:bd:6a:86:c2:1d:ab:
         8e:c4:ad:16:cf:d8:c4:53:de:49:ee:63:25:11:54:52:d5:68:
         5c:9d:58:e8:e7:b1:64:bb:8b:b4:cd:3b:c4:40:43:4a:01:6e:
         6e:5f:56:38:fb:37:8a:02:0c:1c:64:d9:b5:3d:ba:96:4a:6e:
         95:96:27:47
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTAxMjEx
MDA0MDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhDQUYzQUU1M0VCN0JC
MDFEOTM5Qjk0ODY3QjRGNTEwRkU2Nzc5OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxPZURHCWSvY/DNBb12rcpm8UuQSQ3BoICfF3+LWF66NNJ8vlj
jZiqQmDzTrK0OrinaFraFUCeN81r74B1hoCjbynesFVj2eQkDJZCaJBFdHCurrHj
7nr2onNYh+vNUyByBLZhfh/UIk8uy3950GqSw/hTdldAc4kIEzQXFz3CxtJ54xXp
ueoKocUFWJVZxRa6r3vpVBc4V7kgoM68U3i0xJlJONgw0fgnCfYjr/bPXFBQvWIH
AKNV20LQvMcMdRhYk/6XKhMCLgnQjwXope/zDKh4/00B/5eq6MbObRsLSksX1H1H
HET9tnx6Yv+NVHSV3ccUULRwO1BazhpP5lRvAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUjK865T63uwHZOblIZ7T1EP5neZswHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvaks4NjVUNjN1d0haT2JsSVo3VDFF
UDVuZVpzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXcP4DAN
BgkqhkiG9w0BAQsFAAOCAQEAA6hLAMLx3bh+KqzDJ0S3l1WLFXiE7wnGFMIQ1fvz
Iun6P9ShwV3JPAKxlT4iZ1jJoT9whuEhYJ6PJpSbouLJPcR8tgz3fsll3md5e7Kd
ZSEa7CkVsyL66WpKYnerXutEG9xxP8V8/5KgK4PYPZjbt6MVB0GZuij/gxj4k6si
8pLEfyJGJYZuBWWvbGRx/M28W54pybEO3qlM0ud9fX27/E3zoj8d/j7WHR4qdzG+
DkK8qu/EUAfoRzfnmARaDMM6vWqGwh2rjsStFs/YxFPeSe5jJRFUUtVoXJ1Y6Oex
ZLuLtM07xEBDSgFubl9WOPs3igIMHGTZtT26lkpulZYnRw==
-----END CERTIFICATE-----