Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/M3HywIhS96plcSR8P7OTzrO45cQ.roa
File:                     M3HywIhS96plcSR8P7OTzrO45cQ.roa (raw, json)
Hash identifier:          TL9lnGyXtwTjOAQbYMJ3kMcHS4LbV7we8ZaFLkZ5oCE=
Subject key identifier:   33:71:F2:C0:88:52:F7:AA:65:71:24:7C:3F:B3:93:CE:B3:B8:E5:C4
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       14
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/M3HywIhS96plcSR8P7OTzrO45cQ.roa
Signing time:             Mon 23 Aug 2021 16:17:19 +0000
ROA not before:           Mon 23 Aug 2021 16:17:19 +0000
ROA not after:            Thu 21 Jul 2022 02:43:53 +0000
asID:                     20473
IP address blocks:        103.169.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug 23 16:17:19 2021 GMT
            Not After : Jul 21 02:43:53 2022 GMT
        Subject: CN=3371F2C08852F7AA6571247C3FB393CEB3B8E5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:96:1c:6d:32:20:71:a2:d3:2e:22:6a:67:09:
                    f6:dc:68:0b:05:b0:cc:0c:73:16:1e:29:f6:fd:0d:
                    8b:42:04:d1:24:d8:4a:7b:1f:15:ab:2d:c5:4c:02:
                    6f:77:75:07:1f:d3:b5:2f:94:66:06:b0:dd:a8:c3:
                    89:8c:96:b0:02:a7:c0:98:29:f2:c0:1d:28:f8:65:
                    0d:07:7a:86:53:b2:d3:3b:06:7f:d0:13:77:c5:b4:
                    90:60:58:d7:63:82:0c:74:bb:f8:37:c3:56:b0:92:
                    a2:37:f9:1d:fb:1f:2e:27:ad:b1:06:23:55:ed:1a:
                    f5:c3:4e:c7:66:ac:33:f2:bd:e9:0f:71:77:ab:c3:
                    e3:4b:37:90:8c:3b:29:94:c8:e5:1f:90:a1:67:87:
                    b9:fd:b3:29:bb:5f:a8:8f:5f:f6:16:48:ab:72:9f:
                    81:98:4f:ae:df:37:be:ea:27:6f:2d:a0:d8:cb:e9:
                    5b:34:1f:88:52:92:f5:80:28:bf:06:9a:06:21:f3:
                    4b:5e:1d:66:28:55:11:ba:b0:72:95:ec:16:23:5c:
                    c5:15:0c:dc:27:44:02:c6:72:7f:70:bf:32:56:38:
                    93:1d:bb:25:61:e0:d0:b8:fa:ed:a9:a7:6f:59:a6:
                    3c:d0:6c:12:6e:7f:0a:a1:52:5f:c7:f2:29:d3:e3:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:F2:C0:88:52:F7:AA:65:71:24:7C:3F:B3:93:CE:B3:B8:E5:C4
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/M3HywIhS96plcSR8P7OTzrO45cQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:13:35:8d:a2:aa:17:96:c2:47:ae:a0:d1:90:8c:28:47:
         c0:fa:9e:82:62:ae:8a:75:6f:b7:51:ac:07:29:d3:19:a7:29:
         e4:87:51:b2:99:83:77:a2:d6:81:31:7b:1d:cd:0d:04:2d:f6:
         c9:8c:c1:7e:bc:83:d6:45:29:0c:1b:2a:a6:ec:9b:d5:cb:2f:
         0b:66:fd:34:34:65:d4:a1:6f:fc:e9:be:ea:be:63:87:b8:0d:
         c0:13:9d:d6:74:b0:9f:27:5b:f7:27:58:e3:f0:97:0b:ab:eb:
         91:00:aa:ea:db:c9:75:18:fe:27:ec:72:43:35:a8:e8:f2:e4:
         d2:db:e8:aa:e4:59:7d:9d:7e:80:1a:0e:88:14:46:7a:21:9d:
         b9:83:96:e2:b6:e0:02:85:91:42:13:3d:11:ff:3c:56:f7:7d:
         2c:ca:7d:1c:c6:d0:22:af:e6:35:16:d5:63:1b:c6:48:b3:d9:
         72:ba:2e:64:3f:2c:46:14:42:f6:3f:cc:c5:4f:ed:3f:98:9c:
         dc:23:61:55:e2:e9:2b:17:ef:21:f3:8f:bc:32:79:bc:17:cd:
         de:7d:ee:4d:26:f9:05:3c:74:f0:1d:da:17:bd:38:b8:16:c3:
         3c:a6:f2:7d:b7:54:a6:38:bf:d2:fe:9d:d8:d7:97:1c:a1:81:
         6d:ea:31:3e
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMERD
RjA1MEM0Q0VBRTUwMjFBQThEMzExOTUzRjAyRDYxMjFGRDhEMB4XDTIxMDgyMzE2
MTcxOVoXDTIyMDcyMTAyNDM1M1owMzExMC8GA1UEAxMoMzM3MUYyQzA4ODUyRjdB
QTY1NzEyNDdDM0ZCMzkzQ0VCM0I4RTVDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANuWHG0yIHGi0y4iamcJ9txoCwWwzAxzFh4p9v0Ni0IE0STYSnsf
FastxUwCb3d1Bx/TtS+UZgaw3ajDiYyWsAKnwJgp8sAdKPhlDQd6hlOy0zsGf9AT
d8W0kGBY12OCDHS7+DfDVrCSojf5HfsfLietsQYjVe0a9cNOx2asM/K96Q9xd6vD
40s3kIw7KZTI5R+QoWeHuf2zKbtfqI9f9hZIq3KfgZhPrt83vuonby2g2MvpWzQf
iFKS9YAovwaaBiHzS14dZihVEbqwcpXsFiNcxRUM3CdEAsZyf3C/MlY4kx27JWHg
0Lj67amnb1mmPNBsEm5/CqFSX8fyKdPjgX8CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQzcfLAiFL3qmVxJHw/s5POs7jlxDAfBgNVHSMEGDAWgBQA3PBQxM6uUCGqjTEZ
U/AtYSH9jTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IQVBQWU1P
TkVZL0FOendVTVRPcmxBaHFvMHhHVlB3TFdFaF9ZMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQU56d1VNVE9ybEFocW8weEdWUHdMV0VoX1kwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFQUFlNT05FWS9NM0h5d0loUzk2
cGxjU1I4UDdPVHpyTzQ1Y1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ6nUMA0GCSqGSIb3DQEBCwUAA4IBAQB9EBM1jaKqF5bCR66g0ZCMKEfA
+p6CYq6KdW+3UawHKdMZpynkh1GymYN3otaBMXsdzQ0ELfbJjMF+vIPWRSkMGyqm
7JvVyy8LZv00NGXUoW/86b7qvmOHuA3AE53WdLCfJ1v3J1jj8JcLq+uRAKrq28l1
GP4n7HJDNajo8uTS2+iq5Fl9nX6AGg6IFEZ6IZ25g5bituAChZFCEz0R/zxW930s
yn0cxtAir+Y1FtVjG8ZIs9lyui5kPyxGFEL2P8zFT+0/mJzcI2FV4ukrF+8h84+8
Mnm8F83efe5NJvkFPHTwHdoXvTi4FsM8pvJ9t1SmOL/S/p3Y15ccoYFt6jE+
-----END CERTIFICATE-----