Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/YLhW_qXev1fusOudbqrO0DeHWMY.roa
File:                     YLhW_qXev1fusOudbqrO0DeHWMY.roa (raw, json)
Hash identifier:          F75Dr3fpH3daXKxVYs4VoGhvgzzrns+Yk274VJ1DMdI=
Subject key identifier:   60:B8:56:FE:A5:DE:BF:57:EE:B0:EB:9D:6E:AA:CE:D0:37:87:58:C6
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0B75
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/YLhW_qXev1fusOudbqrO0DeHWMY.roa
Signing time:             Wed 29 Sep 2021 02:37:50 +0000
ROA not before:           Wed 29 Sep 2021 02:37:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     138145
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 29 02:37:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=60B856FEA5DEBF57EEB0EB9D6EAACED0378758C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:dd:10:01:ea:a5:cd:97:23:06:c2:39:74:
                    c3:9e:bd:50:bb:71:29:b8:64:3e:92:76:3b:8e:96:
                    14:f5:96:b8:39:82:78:ed:85:65:9a:55:5a:76:d3:
                    d6:1b:ef:88:92:22:a5:80:0e:7b:e7:87:ce:d9:70:
                    02:8a:79:0d:57:b3:d3:8a:57:c3:44:c0:3a:35:f5:
                    e9:61:83:8a:1b:b0:6c:64:36:04:07:56:1e:5d:63:
                    43:fa:a9:c6:4c:6c:74:ad:82:f4:66:cd:c9:8c:59:
                    f5:a3:d8:82:38:38:2e:f5:77:b2:f9:4c:08:a7:a3:
                    e0:a2:d9:e1:e2:47:df:76:8e:bd:35:f8:cc:ac:30:
                    f4:94:b0:25:3d:4c:5d:58:0e:a7:84:49:e9:3d:b7:
                    53:74:a5:6e:bd:35:2b:4b:8f:90:98:b1:d9:3f:56:
                    97:40:d1:43:54:7e:d3:36:69:c7:68:4b:88:24:ce:
                    96:0f:4d:94:7a:a5:10:45:39:f7:6f:aa:d8:8f:88:
                    5c:7b:f1:d5:17:15:c4:7f:93:a1:67:81:93:ea:c9:
                    f8:ed:57:e3:a0:fd:76:4b:e8:cc:e6:cb:55:9c:fd:
                    3c:f9:78:e7:c6:18:db:a3:ec:b9:5b:09:bc:4e:87:
                    96:9f:2b:c8:76:33:79:b8:b0:d1:be:5c:f5:6a:45:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B8:56:FE:A5:DE:BF:57:EE:B0:EB:9D:6E:AA:CE:D0:37:87:58:C6
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/YLhW_qXev1fusOudbqrO0DeHWMY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:27:ec:96:b9:1c:b6:b2:d0:bb:ed:c0:81:62:f7:47:8a:
         46:35:0d:76:a8:d8:23:8d:98:96:73:a1:43:f1:66:76:9c:ad:
         b4:70:25:64:fc:3d:ea:9b:7e:f6:57:09:56:da:4a:59:ca:03:
         2b:c5:7d:11:80:eb:c9:ef:02:c4:22:ca:3f:13:59:4e:7b:c8:
         82:10:b1:d4:2f:07:1b:7b:17:26:d2:a2:cc:30:d6:f0:06:f9:
         40:91:7b:ea:ee:64:69:87:83:0b:44:ab:15:b2:5e:b7:78:35:
         2d:0b:b9:a3:64:83:d6:c8:20:f5:d4:92:66:99:30:fa:ef:4d:
         26:8b:fe:52:a0:2b:a7:03:43:1f:bf:84:6e:43:19:b2:41:bf:
         e1:73:9b:9f:73:42:ae:cf:12:ef:1c:37:63:0c:78:35:7d:71:
         e6:7a:77:5d:bb:4d:11:8f:6e:5d:a5:42:a9:ee:7d:7d:55:21:
         05:d8:15:e8:a2:54:00:d4:bf:1c:2a:ea:4a:74:df:0c:7d:e9:
         e8:cf:da:9a:ec:27:58:63:40:ab:ff:ad:d4:8c:67:1f:3e:8f:
         f5:ec:ee:11:2b:3d:98:4a:03:52:24:58:d6:25:86:d5:00:df:
         4b:e8:40:81:4a:fe:19:d7:6c:68:da:41:80:69:41:2b:28:4c:
         22:8b:84:d0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMTA5Mjkw
MjM3NTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDYwQjg1NkZFQTVERUJG
NTdFRUIwRUI5RDZFQUFDRUQwMzc4NzU4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUDt0QAeqlzZcjBsI5dMOevVC7cSm4ZD6SdjuOlhT1lrg5gnjt
hWWaVVp209Yb74iSIqWADnvnh87ZcAKKeQ1Xs9OKV8NEwDo19elhg4obsGxkNgQH
Vh5dY0P6qcZMbHStgvRmzcmMWfWj2II4OC71d7L5TAino+Ci2eHiR992jr01+Mys
MPSUsCU9TF1YDqeESek9t1N0pW69NStLj5CYsdk/VpdA0UNUftM2acdoS4gkzpYP
TZR6pRBFOfdvqtiPiFx78dUXFcR/k6FngZPqyfjtV+Og/XZL6Mzmy1Wc/Tz5eOfG
GNuj7LlbCbxOh5afK8h2M3m4sNG+XPVqRagXAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUYLhW/qXev1fusOudbqrO0DeHWMYwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9ZTGhXX3FYZXYxZnVz
T3VkYnFyTzBEZUhXTVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQCPHSfslrkctrLQu+3AgWL3R4pGNQ12
qNgjjZiWc6FD8WZ2nK20cCVk/D3qm372VwlW2kpZygMrxX0RgOvJ7wLEIso/E1lO
e8iCELHULwcbexcm0qLMMNbwBvlAkXvq7mRph4MLRKsVsl63eDUtC7mjZIPWyCD1
1JJmmTD6700mi/5SoCunA0Mfv4RuQxmyQb/hc5ufc0KuzxLvHDdjDHg1fXHmendd
u00Rj25dpUKp7n19VSEF2BXoolQA1L8cKupKdN8Mfenoz9qa7CdYY0Cr/63UjGcf
Po/17O4RKz2YSgNSJFjWJYbVAN9L6ECBSv4Z12xo2kGAaUErKEwii4TQ
-----END CERTIFICATE-----