Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xKpUioGj2sfkdL3IFSY9FwAgB9I.roa
File:                     xKpUioGj2sfkdL3IFSY9FwAgB9I.roa (raw, json)
Hash identifier:          jnORo95+skTAdFU4e5Ro7UJvGCt9AUy0jiqrJDo5/Dw=
Subject key identifier:   C4:AA:54:8A:81:A3:DA:C7:E4:74:BD:C8:15:26:3D:17:00:20:07:D2
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       09A7
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xKpUioGj2sfkdL3IFSY9FwAgB9I.roa
Signing time:             Sun 07 Feb 2021 13:15:35 +0000
ROA not before:           Sun 07 Feb 2021 13:15:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        203.222.0.0/19 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Feb  7 13:15:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C4AA548A81A3DAC7E474BDC815263D17002007D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:b3:93:74:a2:03:d6:ec:16:16:85:36:40:
                    88:b7:29:b5:35:fa:c1:a4:70:af:c0:b6:26:51:78:
                    25:9c:3e:6e:75:b9:48:cf:6d:fc:98:d1:8a:d4:ae:
                    f7:13:9f:b2:be:d3:0c:fd:3d:65:b4:3e:62:e6:13:
                    55:e7:c9:02:d7:f8:7c:ff:65:c6:15:b0:2b:aa:77:
                    db:9a:07:df:fe:c7:d7:60:4a:df:30:fc:bb:0b:6d:
                    a4:21:0c:51:78:b9:42:34:b2:e0:d6:a4:22:80:47:
                    6a:da:66:27:90:f0:f4:62:6d:c5:45:b7:18:05:b1:
                    a2:af:32:ba:f5:a4:58:1b:33:c6:de:ed:65:68:fb:
                    61:af:5a:21:67:19:d4:6d:92:81:8c:25:e7:27:82:
                    c9:48:c0:f3:e0:60:04:70:42:dc:74:85:38:1a:71:
                    3e:4a:a5:56:a2:35:b9:e4:f5:50:1d:f3:e8:3d:b0:
                    01:84:51:9c:91:3d:b6:4e:bb:a7:ae:da:6b:57:51:
                    8d:71:46:9a:1b:d8:f2:8a:db:de:b5:ff:ea:28:ad:
                    90:03:95:29:38:5c:94:0b:f4:94:b0:d9:37:ff:86:
                    ca:ac:db:b1:3e:2d:88:48:a7:6f:1b:f5:e6:f8:25:
                    32:cd:85:a4:f6:21:88:53:6e:a9:aa:fc:73:94:a4:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AA:54:8A:81:A3:DA:C7:E4:74:BD:C8:15:26:3D:17:00:20:07:D2
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xKpUioGj2sfkdL3IFSY9FwAgB9I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:45:cf:a1:68:a0:62:9b:b0:c1:3a:9a:13:22:04:ac:d8:47:
         54:12:39:bd:31:25:41:4e:bb:fa:48:20:a7:a0:4d:15:9f:ae:
         be:f8:84:cb:4d:83:17:1d:ff:fa:47:65:da:12:ef:65:d8:d1:
         f1:77:d2:bb:c4:fa:6e:03:85:ba:8f:5d:bd:d7:2d:b3:95:d0:
         37:c4:7e:8f:55:cc:23:9a:f2:be:8b:10:25:50:26:81:e2:1d:
         fc:9d:40:42:1b:e6:b4:36:2e:f6:1d:31:23:e9:4f:5a:3f:ad:
         fc:6d:40:e4:b7:a9:b4:33:4e:ac:2a:b3:fd:66:79:0f:a0:87:
         2f:68:df:59:a6:c0:c8:d9:d5:06:a7:bb:f6:89:0b:09:26:b9:
         4e:6b:8d:06:50:19:8a:a7:63:43:9f:f4:4a:ae:16:73:bc:4e:
         44:16:28:4f:67:3a:03:5a:eb:7b:1e:e5:29:0f:ec:81:c6:f3:
         c9:20:a6:6f:61:e7:1f:9b:2d:ab:14:b5:df:f5:bd:d9:d3:fb:
         6b:4f:d4:92:a7:d8:86:f0:ac:1b:20:0d:6f:03:73:e7:a6:7d:
         75:9f:94:e3:91:3c:0c:fe:cc:db:03:df:dd:2f:d2:26:16:63:
         0f:a4:b7:29:a7:78:a8:95:0b:fc:d0:8b:7d:59:be:99:7b:33:
         cb:1b:64:62
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCacwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTAyMDcx
MzE1MzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM0QUE1NDhBODFBM0RB
QzdFNDc0QkRDODE1MjYzRDE3MDAyMDA3RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8krOTdKID1uwWFoU2QIi3KbU1+sGkcK/AtiZReCWcPm51uUjP
bfyY0YrUrvcTn7K+0wz9PWW0PmLmE1XnyQLX+Hz/ZcYVsCuqd9uaB9/+x9dgSt8w
/LsLbaQhDFF4uUI0suDWpCKAR2raZieQ8PRibcVFtxgFsaKvMrr1pFgbM8be7WVo
+2GvWiFnGdRtkoGMJecngslIwPPgYARwQtx0hTgacT5KpVaiNbnk9VAd8+g9sAGE
UZyRPbZOu6eu2mtXUY1xRpob2PKK2961/+oorZADlSk4XJQL9JSw2Tf/hsqs27E+
LYhIp28b9eb4JTLNhaT2IYhTbqmq/HOUpGh7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUxKpUioGj2sfkdL3IFSY9FwAgB9IwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgveEtwVWlvR2oyc2ZrZEwzSUZTWTlG
d0FnQjlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcveADAN
BgkqhkiG9w0BAQsFAAOCAQEAc0XPoWigYpuwwTqaEyIErNhHVBI5vTElQU67+kgg
p6BNFZ+uvviEy02DFx3/+kdl2hLvZdjR8XfSu8T6bgOFuo9dvdcts5XQN8R+j1XM
I5ryvosQJVAmgeId/J1AQhvmtDYu9h0xI+lPWj+t/G1A5LeptDNOrCqz/WZ5D6CH
L2jfWabAyNnVBqe79okLCSa5TmuNBlAZiqdjQ5/0Sq4Wc7xORBYoT2c6A1rrex7l
KQ/sgcbzySCmb2HnH5stqxS13/W92dP7a0/UkqfYhvCsGyANbwNz56Z9dZ+U45E8
DP7M2wPf3S/SJhZjD6S3Kad4qJUL/NCLfVm+mXszyxtkYg==
-----END CERTIFICATE-----