Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/qsqCLZbB9kTLO3dks-8CGn1S2-A.roa
File:                     qsqCLZbB9kTLO3dks-8CGn1S2-A.roa (raw, json)
Hash identifier:          XI2uK6QzdmCmGCm8AIaLExxqyY3Fa0VpxeS9YtWIpks=
Subject key identifier:   AA:CA:82:2D:96:C1:F6:44:CB:3B:77:64:B3:EF:02:1A:7D:52:DB:E0
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0AE4
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qsqCLZbB9kTLO3dks-8CGn1S2-A.roa
Signing time:             Thu 16 Dec 2021 06:33:20 +0000
ROA not before:           Thu 16 Dec 2021 06:33:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        113.61.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:33:20 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AACA822D96C1F644CB3B7764B3EF021A7D52DBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:a0:87:27:dd:e0:6e:8b:55:96:b9:35:7f:
                    43:c1:11:31:7a:7d:71:be:f0:29:12:d3:d6:07:86:
                    34:86:02:be:cf:de:6d:5a:20:04:72:2a:45:d2:1e:
                    c1:6a:ea:33:76:6d:2a:c0:cb:d0:da:b0:06:92:b5:
                    27:5f:76:df:bb:4f:69:e8:52:49:cc:6b:5f:ce:16:
                    1b:6f:e4:4b:31:75:c3:d3:5a:cc:30:fc:da:d9:43:
                    d1:2a:c6:08:90:b5:af:b9:52:f6:d7:c2:a9:af:59:
                    2c:52:d4:98:9a:3e:04:e3:e8:71:2b:09:e2:0d:52:
                    0c:1c:d3:d8:95:2e:0e:14:2b:c9:c3:99:2e:0e:24:
                    37:70:e9:94:90:98:87:a7:8e:d4:61:08:e3:3d:c3:
                    2f:af:f2:82:78:99:8e:9c:03:a3:61:fd:2f:af:66:
                    e0:88:d8:40:ae:e0:41:c1:f5:0a:82:b2:f1:0a:aa:
                    9e:c5:0b:9d:0f:e4:d2:bb:9c:a9:9f:24:9d:04:84:
                    0a:1e:20:b6:ad:5b:6a:d3:b3:f4:b9:59:a7:fb:7a:
                    8c:f5:36:73:54:7f:be:6b:2f:7e:bf:5e:07:4d:68:
                    3d:d4:ff:f1:c5:e6:e4:d2:55:2b:3b:3d:34:e2:19:
                    8c:20:a1:57:e8:2f:6c:7f:ce:9b:a1:14:0c:40:94:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CA:82:2D:96:C1:F6:44:CB:3B:77:64:B3:EF:02:1A:7D:52:DB:E0
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qsqCLZbB9kTLO3dks-8CGn1S2-A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:41:62:91:cb:8c:b3:76:4b:13:f0:ed:bd:ad:a3:e0:a0:ac:
         21:bf:9b:63:88:ed:d4:a9:6c:08:d3:c5:87:b6:67:59:d8:7a:
         bb:0a:3f:61:3b:45:da:3a:aa:19:67:dd:11:4a:b9:4a:c7:ac:
         cf:d5:c8:01:c2:89:a7:93:41:3b:46:43:46:83:a6:0f:90:4b:
         64:92:50:9a:50:43:4f:97:9b:96:cf:07:09:3c:f1:da:5b:db:
         1e:fc:3f:fe:99:9a:53:dc:8d:b4:ed:b4:4b:5f:e3:86:9b:4f:
         1d:90:ab:b5:2e:88:6d:f0:d9:80:4c:6f:94:15:af:5c:84:6b:
         0d:fb:73:d1:0d:c0:0c:e5:e5:7a:00:95:c9:a8:e7:e6:ae:df:
         ce:f8:82:75:83:25:40:21:a5:13:3e:a7:ed:e8:da:19:eb:4a:
         9e:d8:98:d7:b1:3d:40:6e:71:af:39:bd:b3:eb:3c:a0:91:cb:
         c0:11:39:d8:db:ac:aa:a1:43:03:3c:f9:d6:13:ce:49:6f:12:
         45:bb:73:9e:a9:9b:9a:7b:67:00:4b:28:4e:e3:7f:48:61:c8:
         17:65:6d:c5:e8:8f:b3:ac:cc:b0:72:6b:d6:50:a5:68:7e:ba:
         6e:d9:81:4e:d4:46:cc:a6:10:66:46:52:51:fe:8e:9c:80:4a:
         07:93:ce:a7
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjMzMjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEFBQ0E4MjJEOTZDMUY2
NDRDQjNCNzc2NEIzRUYwMjFBN0Q1MkRCRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIDaCHJ93gbotVlrk1f0PBETF6fXG+8CkS09YHhjSGAr7P3m1a
IARyKkXSHsFq6jN2bSrAy9DasAaStSdfdt+7T2noUknMa1/OFhtv5EsxdcPTWsww
/NrZQ9EqxgiQta+5UvbXwqmvWSxS1JiaPgTj6HErCeINUgwc09iVLg4UK8nDmS4O
JDdw6ZSQmIenjtRhCOM9wy+v8oJ4mY6cA6Nh/S+vZuCI2ECu4EHB9QqCsvEKqp7F
C50P5NK7nKmfJJ0EhAoeILatW2rTs/S5Waf7eoz1NnNUf75rL36/XgdNaD3U//HF
5uTSVSs7PTTiGYwgoVfoL2x/zpuhFAxAlGohAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUqsqCLZbB9kTLO3dks+8CGn1S2+AwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvcXNxQ0xaYkI5a1RMTzNka3MtOENH
bjFTMi1BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXE9oDAN
BgkqhkiG9w0BAQsFAAOCAQEAMEFikcuMs3ZLE/Dtva2j4KCsIb+bY4jt1KlsCNPF
h7ZnWdh6uwo/YTtF2jqqGWfdEUq5Ssesz9XIAcKJp5NBO0ZDRoOmD5BLZJJQmlBD
T5ebls8HCTzx2lvbHvw//pmaU9yNtO20S1/jhptPHZCrtS6IbfDZgExvlBWvXIRr
Dftz0Q3ADOXlegCVyajn5q7fzviCdYMlQCGlEz6n7ejaGetKntiY17E9QG5xrzm9
s+s8oJHLwBE52NusqqFDAzz51hPOSW8SRbtznqmbmntnAEsoTuN/SGHIF2VtxeiP
s6zMsHJr1lClaH66btmBTtRGzKYQZkZSUf6OnIBKB5POpw==
-----END CERTIFICATE-----