Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ftTO41saFd4K_JmZdOvfOdJAwvE.roa
File:                     ftTO41saFd4K_JmZdOvfOdJAwvE.roa (raw, json)
Hash identifier:          OQ4keJXskfO71fP5wdRrBKLjFxh3pNy8Y2PXlPwWcNo=
Subject key identifier:   7E:D4:CE:E3:5B:1A:15:DE:0A:FC:99:99:74:EB:DF:39:D2:40:C2:F1
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C60
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ftTO41saFd4K_JmZdOvfOdJAwvE.roa
Signing time:             Wed 29 Sep 2021 02:51:12 +0000
ROA not before:           Wed 29 Sep 2021 02:51:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17421
IP address blocks:        111.70.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7ED4CEE35B1A15DE0AFC999974EBDF39D240C2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:43:db:cf:7e:1a:02:0a:88:ae:5f:87:ee:
                    17:4a:80:ab:d7:44:f1:c0:4e:5f:1f:fe:f0:fc:ef:
                    c4:4c:8b:27:ee:5d:c8:b2:4e:29:f2:b2:45:44:a2:
                    4a:ba:85:57:4b:38:29:17:c3:52:1f:47:85:eb:ee:
                    83:2e:b2:b5:8a:ab:7e:47:ec:59:df:fe:8c:17:5c:
                    d6:16:7a:9c:9b:ce:cc:88:70:f0:a7:d3:ee:a5:fb:
                    be:16:5c:c9:e4:4d:1a:cd:cc:8b:96:46:f4:d8:ba:
                    d3:dc:e9:a0:0b:bf:68:3a:25:d2:08:de:41:10:e5:
                    0e:59:b6:34:0b:00:90:54:fc:1d:bb:3c:48:2e:c6:
                    0f:3c:9c:96:04:dc:a8:49:ee:7a:96:81:85:46:6b:
                    30:51:77:1f:e9:b1:73:61:4a:e9:25:24:e7:e4:95:
                    80:0e:27:af:23:10:2c:d4:54:77:3e:19:36:f2:76:
                    11:ac:32:2f:19:c4:77:9c:15:3b:51:11:7d:3e:fd:
                    24:b0:b1:e6:a4:ed:7f:2b:fb:cd:b1:29:3c:75:97:
                    82:90:8f:42:4f:58:1d:20:72:32:1d:22:72:59:b9:
                    30:1f:f9:b3:46:d4:99:c0:5f:21:6d:73:6c:87:36:
                    61:63:c2:21:43:a8:af:91:42:18:ac:b3:ec:47:6a:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D4:CE:E3:5B:1A:15:DE:0A:FC:99:99:74:EB:DF:39:D2:40:C2:F1
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ftTO41saFd4K_JmZdOvfOdJAwvE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.70.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:02:a7:55:2a:4d:82:62:e6:c8:6c:5f:7a:66:0b:fe:36:
         e7:3c:e8:76:a7:42:6d:6a:3a:e5:60:e8:95:dc:32:8f:0c:3e:
         c4:80:37:42:8b:11:38:c0:0c:91:34:89:b5:51:4d:89:d2:70:
         18:e9:b0:1c:6c:88:45:c8:95:d7:50:46:e4:70:e1:25:0b:cd:
         91:ea:b1:cb:35:a7:a0:22:69:b3:74:03:c1:71:91:55:3d:c4:
         79:16:7e:43:2b:8b:43:9e:11:e5:05:4c:dd:15:67:fd:60:f6:
         49:d2:b7:6e:d9:54:d1:e1:36:b4:3d:1b:7b:b4:41:91:61:e2:
         4d:f5:58:45:96:6b:40:07:fc:f1:7a:82:3d:85:f0:8d:c8:e6:
         d9:3b:20:45:35:4f:f2:03:80:52:25:cd:be:50:a0:4c:b5:e4:
         4a:f8:b7:20:1b:3f:6b:41:ea:97:6b:7f:27:f5:e5:7e:5e:16:
         cc:ca:1a:69:85:70:96:ff:5c:fc:bd:95:47:97:4e:b9:85:e3:
         55:d3:2b:8c:3c:30:e6:6e:52:b7:cc:c4:82:a5:47:9f:9f:61:
         da:6d:2c:96:dc:6d:ae:e7:3c:06:a4:b8:64:e4:28:ec:b1:38:
         66:42:e4:de:60:53:0a:2f:6a:c9:ac:d5:1e:bd:7a:8e:32:2e:
         9b:cd:f2:ab
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUxMTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdFRDRDRUUzNUIxQTE1
REUwQUZDOTk5OTc0RUJERjM5RDI0MEMyRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn4kPbz34aAgqIrl+H7hdKgKvXRPHATl8f/vD878RMiyfuXciy
TinyskVEokq6hVdLOCkXw1IfR4Xr7oMusrWKq35H7Fnf/owXXNYWepybzsyIcPCn
0+6l+74WXMnkTRrNzIuWRvTYutPc6aALv2g6JdII3kEQ5Q5ZtjQLAJBU/B27PEgu
xg88nJYE3KhJ7nqWgYVGazBRdx/psXNhSuklJOfklYAOJ68jECzUVHc+GTbydhGs
Mi8ZxHecFTtREX0+/SSwseak7X8r+82xKTx1l4KQj0JPWB0gcjIdInJZuTAf+bNG
1JnAXyFtc2yHNmFjwiFDqK+RQhiss+xHahnhAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUftTO41saFd4K/JmZdOvfOdJAwvEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9mdFRPNDFzYUZkNEtfSm1aZE92
Zk9kSkF3dkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBb0Yw
DQYJKoZIhvcNAQELBQADggEBAJgMAqdVKk2CYubIbF96Zgv+Nuc86HanQm1qOuVg
6JXcMo8MPsSAN0KLETjADJE0ibVRTYnScBjpsBxsiEXIlddQRuRw4SULzZHqscs1
p6AiabN0A8FxkVU9xHkWfkMri0OeEeUFTN0VZ/1g9knSt27ZVNHhNrQ9G3u0QZFh
4k31WEWWa0AH/PF6gj2F8I3I5tk7IEU1T/IDgFIlzb5QoEy15Er4tyAbP2tB6pdr
fyf15X5eFszKGmmFcJb/XPy9lUeXTrmF41XTK4w8MOZuUrfMxIKlR5+fYdptLJbc
ba7nPAakuGTkKOyxOGZC5N5gUwovasms1R69eo4yLpvN8qs=
-----END CERTIFICATE-----