Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-JFcPV17N3iwWX215GA20am5wSY.roa
File:                     -JFcPV17N3iwWX215GA20am5wSY.roa (raw, json)
Hash identifier:          0oNJua+sNdH6Bk+0oUBKjbbqxsH9KwMo2Nh7o545TT8=
Subject key identifier:   F8:91:5C:3D:5D:7B:37:78:B0:59:7D:B5:E4:60:36:D1:A9:B9:C1:26
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0BF0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-JFcPV17N3iwWX215GA20am5wSY.roa
Signing time:             Wed 29 Sep 2021 02:50:41 +0000
ROA not before:           Wed 29 Sep 2021 02:50:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     20940
IP address blocks:        2001:b034:700:600::/56 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3056 (0xbf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:50:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F8915C3D5D7B3778B0597DB5E46036D1A9B9C126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3e:9d:34:b9:c8:a8:b4:3c:71:fd:8f:dc:e6:
                    d4:0d:e3:bc:7e:d4:39:e9:34:07:4a:50:ca:0d:14:
                    07:c4:92:38:b5:0d:24:d9:5d:8d:c1:fc:ed:e5:06:
                    11:a7:4f:66:64:86:9e:d3:10:e8:a3:5e:da:25:21:
                    ac:34:62:b2:3e:d0:91:28:13:78:81:a9:b6:86:d3:
                    ea:d9:02:76:56:3e:1c:eb:1e:13:7e:c5:ca:1d:24:
                    dd:fc:7a:4c:54:80:4d:e4:98:e5:b9:65:df:09:4d:
                    8c:71:d8:7d:a4:cc:41:96:38:ee:e7:7e:b7:ec:3b:
                    68:e8:2b:83:9b:9c:35:d8:50:04:a0:eb:22:58:a4:
                    bc:66:ad:f1:5d:8d:50:45:cb:2a:90:1c:40:91:61:
                    bd:87:1b:61:9c:03:24:55:ad:cc:21:50:f6:60:a2:
                    26:ff:99:88:65:31:ae:dc:28:f6:4c:ef:89:60:67:
                    18:07:1b:ca:d0:b8:87:59:d7:10:28:9e:e1:24:14:
                    9b:1e:21:da:93:ee:6a:be:43:e2:53:cd:f5:b6:4b:
                    5f:39:25:89:40:af:77:d6:d3:bf:69:8f:8f:ff:64:
                    e0:43:6b:4c:d6:0e:bb:cf:5c:35:ae:61:11:6d:65:
                    cd:6d:c1:9b:46:42:90:60:23:7d:34:2d:36:f0:ae:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:91:5C:3D:5D:7B:37:78:B0:59:7D:B5:E4:60:36:D1:A9:B9:C1:26
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-JFcPV17N3iwWX215GA20am5wSY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b034:700:600::/56

    Signature Algorithm: sha256WithRSAEncryption
         90:94:a6:b9:d7:5f:f2:ee:30:8b:ba:b4:b3:7c:46:28:97:54:
         2b:3c:ac:82:5d:62:30:a6:d6:65:de:f1:d9:f3:cf:81:b0:af:
         f7:ef:79:ff:08:cd:b6:8e:2a:9f:0b:1a:a6:d6:e5:6b:2f:8d:
         b3:bd:f3:5e:ce:2f:10:b3:f8:35:af:dd:8a:fe:75:07:13:9d:
         aa:c9:b5:d2:41:c3:94:ee:5b:e5:c2:4c:ef:de:19:45:1a:99:
         3b:03:93:ec:be:46:00:8a:20:c9:4a:df:3e:84:ed:41:86:93:
         e3:f0:3e:72:4b:b8:f0:fb:ef:ae:e3:63:5b:86:ae:5a:5b:16:
         75:5d:d9:b0:ce:74:01:3a:1d:ac:49:e7:47:31:ab:73:85:1d:
         05:da:27:77:00:d5:3d:1b:c5:e2:4d:94:cd:cb:7a:65:58:14:
         b3:8d:22:6e:03:16:01:c0:51:10:79:5f:73:87:66:8a:89:19:
         25:bb:8a:59:b2:51:ce:dc:33:72:a3:61:26:5a:0a:a5:50:b8:
         15:74:75:ee:a7:0a:d7:d5:cd:af:e5:62:6c:ad:4c:83:fe:7a:
         90:e2:56:d0:2e:56:99:a9:5b:1c:11:18:db:16:01:37:25:a5:
         94:66:cf:2a:e4:47:19:0e:d1:49:d6:f1:f6:54:97:a4:26:dc:
         9f:54:c2:47
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUwNDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEY4OTE1QzNENUQ3QjM3
NzhCMDU5N0RCNUU0NjAzNkQxQTlCOUMxMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvPp00uciotDxx/Y/c5tQN47x+1DnpNAdKUMoNFAfEkji1DSTZ
XY3B/O3lBhGnT2Zkhp7TEOijXtolIaw0YrI+0JEoE3iBqbaG0+rZAnZWPhzrHhN+
xcodJN38ekxUgE3kmOW5Zd8JTYxx2H2kzEGWOO7nfrfsO2joK4ObnDXYUASg6yJY
pLxmrfFdjVBFyyqQHECRYb2HG2GcAyRVrcwhUPZgoib/mYhlMa7cKPZM74lgZxgH
G8rQuIdZ1xAonuEkFJseIdqT7mq+Q+JTzfW2S185JYlAr3fW079pj4//ZOBDa0zW
DrvPXDWuYRFtZc1twZtGQpBgI300LTbwrvq5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU+JFcPV17N3iwWX215GA20am5wSYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8tSkZjUFYxN04zaXdXWDIxNUdB
MjBhbTV3U1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAGw
NAcABjANBgkqhkiG9w0BAQsFAAOCAQEAkJSmuddf8u4wi7q0s3xGKJdUKzysgl1i
MKbWZd7x2fPPgbCv9+95/wjNto4qnwsaptblay+Ns73zXs4vELP4Na/div51BxOd
qsm10kHDlO5b5cJM794ZRRqZOwOT7L5GAIogyUrfPoTtQYaT4/A+cku48PvvruNj
W4auWlsWdV3ZsM50ATodrEnnRzGrc4UdBdondwDVPRvF4k2Uzct6ZVgUs40ibgMW
AcBREHlfc4dmiokZJbuKWbJRztwzcqNhJloKpVC4FXR17qcK19XNr+VibK1Mg/56
kOJW0C5WmalbHBEY2xYBNyWllGbPKuRHGQ7RSdbx9lSXpCbcn1TCRw==
-----END CERTIFICATE-----