Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/zSgHxaItxH-6DHOEd32ynnWAt0k.roa
File:                     zSgHxaItxH-6DHOEd32ynnWAt0k.roa (raw, json)
Hash identifier:          89DXmW+lPGttEEG90EJjoRV3gHA3qrnpoaqqGb4mxPg=
Subject key identifier:   CD:28:07:C5:A2:2D:C4:7F:BA:0C:73:84:77:7D:B2:9E:75:80:B7:49
Certificate issuer:       /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial:       087D
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/zSgHxaItxH-6DHOEd32ynnWAt0k.roa
Signing time:             Tue 01 Dec 2020 09:27:09 +0000
ROA not before:           Tue 01 Dec 2020 09:27:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     134823
IP address blocks:        2403:9340::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
        Validity
            Not Before: Dec  1 09:27:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CD2807C5A22DC47FBA0C7384777DB29E7580B749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:56:57:41:61:3b:46:c1:88:fe:06:72:93:7d:
                    25:a2:79:1d:ca:a0:e4:bc:1e:d2:aa:90:44:fd:41:
                    dd:06:45:eb:e9:89:c7:4a:d2:b6:73:28:20:16:32:
                    92:f2:e0:84:25:93:e0:1a:74:66:6a:c8:ba:9b:fa:
                    f3:83:c7:1d:1b:5b:70:e2:2b:b5:8a:f1:b4:f0:17:
                    a2:12:b0:d7:92:db:ac:21:c4:d9:3b:af:98:47:7a:
                    c1:53:03:59:ae:f8:b8:24:59:7f:d2:0b:0d:f5:1e:
                    1e:8a:1f:b8:c2:db:b1:21:ad:3f:94:93:15:68:2a:
                    3d:fe:a3:5d:aa:54:6f:f2:b9:c4:8d:c8:6f:7a:e9:
                    37:02:63:7a:38:14:1d:7f:f2:2f:5e:a0:fb:a9:a3:
                    c8:58:3c:e3:b4:ac:8f:51:71:61:d3:16:57:ef:74:
                    dd:34:fe:66:55:bd:31:7c:48:ae:78:08:37:fd:c5:
                    3c:74:62:24:4f:2f:72:f6:b3:1c:04:f8:72:cc:b8:
                    ef:d7:f0:91:a8:0a:fa:d6:6a:4b:96:b9:30:1b:b3:
                    83:bc:73:b1:fc:ad:b0:c7:11:8b:99:8c:c2:f6:13:
                    a0:19:1a:23:f8:b7:ce:c1:44:cc:d4:75:18:3b:8c:
                    d4:20:8c:b5:f3:56:c3:d9:31:cc:22:c5:cb:5d:85:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:28:07:C5:A2:2D:C4:7F:BA:0C:73:84:77:7D:B2:9E:75:80:B7:49
            X509v3 Authority Key Identifier:
                keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/zSgHxaItxH-6DHOEd32ynnWAt0k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:46:b8:50:37:6a:94:e9:ed:d5:f5:61:72:5e:b9:66:9c:6e:
         c8:64:41:0a:7f:92:17:9c:9e:ff:6c:8a:9c:9c:bc:92:15:7f:
         df:f5:1b:82:04:0b:fa:94:38:06:ad:7a:de:3d:7a:df:8f:23:
         1e:5a:aa:c2:c8:ed:f3:2d:73:0d:cc:26:3e:a4:18:b8:da:7b:
         dd:5b:dd:e3:62:30:4e:45:16:57:7b:40:cb:2c:ae:7d:f2:89:
         21:3b:45:99:76:e1:29:82:64:c8:88:70:e3:9f:3b:e3:d0:55:
         22:0f:bb:83:37:e8:a2:6b:8c:c1:72:b9:40:0f:ac:34:7f:fe:
         ff:b7:3e:a6:d8:30:f1:1c:b2:d4:7b:8f:af:6a:e2:d0:21:f8:
         07:af:f1:e5:8d:b6:7f:d4:78:3e:d0:ad:c7:7e:c0:37:49:2f:
         c9:16:a1:a3:83:db:f2:02:8a:75:b4:c1:cc:b6:99:b1:a2:09:
         fc:5a:42:fb:fc:4b:52:e1:44:ae:75:bd:ec:af:51:f9:f6:c6:
         63:46:0e:eb:42:79:0a:83:ad:b1:4e:fe:cf:28:92:91:a8:5e:
         5f:d0:e8:c7:f6:77:78:3a:d5:3b:3f:00:b8:ed:a2:95:d5:b1:
         1a:46:7c:71:08:bc:a4:e4:26:55:6e:f6:96:a1:81:29:29:a8:
         08:ef:cc:de
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzg1
NzEzRTM1OUZDQjlDQUIxMkYyMERCM0ZGMTkwRkNBODFFMzIzRTAeFw0yMDEyMDEw
OTI3MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENEMjgwN0M1QTIyREM0
N0ZCQTBDNzM4NDc3N0RCMjlFNzU4MEI3NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoVldBYTtGwYj+BnKTfSWieR3KoOS8HtKqkET9Qd0GRevpicdK
0rZzKCAWMpLy4IQlk+AadGZqyLqb+vODxx0bW3DiK7WK8bTwF6ISsNeS26whxNk7
r5hHesFTA1mu+LgkWX/SCw31Hh6KH7jC27EhrT+UkxVoKj3+o12qVG/yucSNyG96
6TcCY3o4FB1/8i9eoPupo8hYPOO0rI9RcWHTFlfvdN00/mZVvTF8SK54CDf9xTx0
YiRPL3L2sxwE+HLMuO/X8JGoCvrWakuWuTAbs4O8c7H8rbDHEYuZjML2E6AZGiP4
t87BRMzUdRg7jNQgjLXzVsPZMcwixctdhdHnAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUzSgHxaItxH+6DHOEd32ynnWAt0kwHwYDVR0jBBgwFoAUOFcT41n8ucqxLyDb
P/GQ/KgeMj4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEhSQ09M
VEQvT0ZjVDQxbjh1Y3F4THlEYlBfR1FfS2dlTWo0LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9PRmNUNDFuOHVjcXhMeURiUF9HUV9LZ2VNajQuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISFJDT0xURC96U2dIeGFJdHhILTZE
SE9FZDMyeW5uV0F0MGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAOTQDANBgkqhkiG9w0BAQsFAAOCAQEAQ0a4UDdqlOnt1fVhcl65ZpxuyGRB
Cn+SF5ye/2yKnJy8khV/3/UbggQL+pQ4Bq163j16348jHlqqwsjt8y1zDcwmPqQY
uNp73Vvd42IwTkUWV3tAyyyuffKJITtFmXbhKYJkyIhw458749BVIg+7gzfoomuM
wXK5QA+sNH/+/7c+ptgw8Ryy1HuPr2ri0CH4B6/x5Y22f9R4PtCtx37AN0kvyRah
o4Pb8gKKdbTBzLaZsaIJ/FpC+/xLUuFErnW97K9R+fbGY0YO60J5CoOtsU7+zyiS
kaheX9Dox/Z3eDrVOz8AuO2ildWxGkZ8cQi8pOQmVW72lqGBKSmoCO/M3g==
-----END CERTIFICATE-----