Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/q1nLhe95WV88DPqBEiMneRazHR8.roa
File:                     q1nLhe95WV88DPqBEiMneRazHR8.roa (raw, json)
Hash identifier:          yuzs0osRgtr2pxmqB0XV7f1J7VdN8O0LJqyZOVdpjRE=
Subject key identifier:   AB:59:CB:85:EF:79:59:5F:3C:0C:FA:81:12:23:27:79:16:B3:1D:1F
Certificate issuer:       /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial:       0760
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/q1nLhe95WV88DPqBEiMneRazHR8.roa
Signing time:             Tue 29 Sep 2020 09:58:06 +0000
ROA not before:           Tue 29 Sep 2020 09:58:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     20473
IP address blocks:        103.122.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
        Validity
            Not Before: Sep 29 09:58:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AB59CB85EF79595F3C0CFA811223277916B31D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:c9:56:4e:7a:7c:2a:65:27:f2:9e:cb:ff:
                    45:12:c0:a5:e4:ca:05:7c:d9:fb:43:29:d5:09:88:
                    12:0e:5a:6e:32:49:db:d2:43:6d:af:94:4b:67:88:
                    08:e6:9a:28:2f:87:17:df:43:68:be:c5:da:79:9f:
                    eb:39:9b:36:e4:77:f0:de:f4:90:85:ea:27:c0:45:
                    26:6a:02:e7:2d:37:31:b0:31:8e:68:54:6a:59:71:
                    34:23:11:ef:2d:43:5b:90:ab:c2:59:30:c7:63:c3:
                    23:c5:f5:4d:2b:c2:f5:2e:67:40:66:89:62:52:11:
                    4c:e2:a4:7a:d3:2c:9f:18:0c:27:5a:1a:9d:6d:01:
                    b6:28:c1:d8:bb:02:4e:dc:cd:0f:72:c5:ef:19:25:
                    f0:2a:35:9e:41:fe:a5:70:44:52:03:3d:f9:c6:d4:
                    71:48:8b:b8:6c:64:5a:d0:ca:5f:f3:31:ac:43:6b:
                    fe:66:76:c1:ed:15:fc:e9:00:2c:b7:18:06:1d:2c:
                    df:73:6c:bf:d6:72:1d:5a:77:7b:6f:63:c2:bd:16:
                    f6:5b:42:5a:a7:32:84:bb:d7:f4:d3:67:22:ce:5a:
                    a4:09:2d:f6:63:a3:aa:35:2b:52:27:3a:34:a5:17:
                    d6:71:a6:7d:e4:76:ae:a2:0b:31:35:84:7c:bb:da:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:59:CB:85:EF:79:59:5F:3C:0C:FA:81:12:23:27:79:16:B3:1D:1F
            X509v3 Authority Key Identifier:
                keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/q1nLhe95WV88DPqBEiMneRazHR8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:99:20:fa:dd:31:08:6e:3a:79:13:30:3b:29:9b:5a:01:7a:
         38:c0:b5:53:e0:32:44:26:13:3f:12:17:ff:ea:19:c6:15:87:
         cc:49:d5:c7:3c:07:ac:49:69:d2:cd:7f:3d:9b:b0:57:9c:b3:
         ae:08:69:8b:bd:cb:1a:1b:22:5c:83:3e:49:96:9b:6a:8b:4f:
         1c:8f:df:89:a8:f7:42:84:d5:a7:34:2e:22:6c:59:cc:f3:5d:
         a5:81:a0:e8:16:a9:6a:e3:df:e2:03:18:c2:8d:4b:70:b4:e9:
         e0:6f:24:7b:ab:25:7a:9c:28:c7:25:e1:f4:f4:68:fc:07:0a:
         da:24:6e:76:50:da:93:e4:33:ef:be:b9:a2:73:ba:bb:a3:df:
         51:c2:0b:9a:cd:e1:37:d4:3a:52:3b:a0:24:dc:08:72:4c:f2:
         d4:76:5e:e0:b5:fa:67:b0:58:1f:bf:9e:6c:e8:ea:e7:0c:84:
         0b:4c:6f:61:29:25:57:f0:2e:0a:49:cf:7a:d4:03:d3:b4:74:
         c5:9b:3d:ec:6a:e7:ae:c8:21:72:e7:6b:0b:12:0d:00:60:41:
         12:99:8f:db:0c:0d:07:c6:45:25:e2:ae:93:96:82:0e:b2:11:
         e9:29:e0:e0:80:9f:ee:02:b4:33:19:ab:5c:75:bf:7f:3a:03:
         a9:cb:37:05
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzg1
NzEzRTM1OUZDQjlDQUIxMkYyMERCM0ZGMTkwRkNBODFFMzIzRTAeFw0yMDA5Mjkw
OTU4MDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFCNTlDQjg1RUY3OTU5
NUYzQzBDRkE4MTEyMjMyNzc5MTZCMzFEMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGcslWTnp8KmUn8p7L/0USwKXkygV82ftDKdUJiBIOWm4ySdvS
Q22vlEtniAjmmigvhxffQ2i+xdp5n+s5mzbkd/De9JCF6ifARSZqAuctNzGwMY5o
VGpZcTQjEe8tQ1uQq8JZMMdjwyPF9U0rwvUuZ0BmiWJSEUzipHrTLJ8YDCdaGp1t
AbYowdi7Ak7czQ9yxe8ZJfAqNZ5B/qVwRFIDPfnG1HFIi7hsZFrQyl/zMaxDa/5m
dsHtFfzpACy3GAYdLN9zbL/Wch1ad3tvY8K9FvZbQlqnMoS71/TTZyLOWqQJLfZj
o6o1K1InOjSlF9Zxpn3kdq6iCzE1hHy72hzpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUq1nLhe95WV88DPqBEiMneRazHR8wHwYDVR0jBBgwFoAUOFcT41n8ucqxLyDb
P/GQ/KgeMj4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEhSQ09M
VEQvT0ZjVDQxbjh1Y3F4THlEYlBfR1FfS2dlTWo0LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9PRmNUNDFuOHVjcXhMeURiUF9HUV9LZ2VNajQuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISFJDT0xURC9xMW5MaGU5NVdWODhE
UHFCRWlNbmVSYXpIUjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ3q8MA0GCSqGSIb3DQEBCwUAA4IBAQA3mSD63TEIbjp5EzA7KZtaAXo4wLVT
4DJEJhM/Ehf/6hnGFYfMSdXHPAesSWnSzX89m7BXnLOuCGmLvcsaGyJcgz5Jlptq
i08cj9+JqPdChNWnNC4ibFnM812lgaDoFqlq49/iAxjCjUtwtOngbyR7qyV6nCjH
JeH09Gj8BwraJG52UNqT5DPvvrmic7q7o99RwguazeE31DpSO6Ak3AhyTPLUdl7g
tfpnsFgfv55s6OrnDIQLTG9hKSVX8C4KSc961APTtHTFmz3saueuyCFy52sLEg0A
YEESmY/bDA0HxkUl4q6TloIOshHpKeDggJ/uArQzGatcdb9/OgOpyzcF
-----END CERTIFICATE-----