Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/iDqcauQOuvtk93powZf4OoxUzBA.roa
File:                     iDqcauQOuvtk93powZf4OoxUzBA.roa (raw, json)
Hash identifier:          22FkPUpEJJos8r/aBDWSirOXLkXkibxHATBUosQmQ0Y=
Subject key identifier:   88:3A:9C:6A:E4:0E:BA:FB:64:F7:7A:68:C1:97:F8:3A:8C:54:CC:10
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0BED
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iDqcauQOuvtk93powZf4OoxUzBA.roa
Signing time:             Wed 29 Sep 2021 02:50:40 +0000
ROA not before:           Wed 29 Sep 2021 02:50:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     3462
IP address blocks:        2001:b000::/21 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:50:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=883A9C6AE40EBAFB64F77A68C197F83A8C54CC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bc:88:b0:c8:4b:31:20:19:77:62:40:4a:09:
                    9c:72:2c:61:5d:06:3a:14:fe:2d:8e:ef:16:8f:c5:
                    ce:bd:8c:c5:10:dc:d1:6e:9e:5e:b2:b2:05:86:8b:
                    c8:2b:f6:e0:47:9e:6a:9c:e2:5f:42:4f:ce:3c:c4:
                    90:0f:dc:c4:57:1b:7e:b5:56:14:f1:c2:64:7e:d7:
                    0b:21:4e:cb:fc:b8:88:83:3d:07:37:e0:15:fa:cf:
                    0b:8b:89:b4:2e:31:48:1c:67:a3:1b:90:7a:d5:af:
                    52:9c:46:5a:d2:ca:f2:22:e2:ce:67:1c:69:78:cb:
                    22:27:c3:24:bd:53:39:81:97:3a:53:1d:9e:9d:63:
                    9b:0c:c7:36:a7:b9:46:2a:e8:85:ba:df:b9:c5:73:
                    fe:23:ea:38:80:35:17:6c:18:c7:0e:ea:30:6a:a5:
                    eb:30:53:d5:c0:ff:cd:6f:c6:e1:17:98:34:f0:ef:
                    4d:11:74:3a:81:49:4c:8d:65:87:e9:6f:8a:b3:2d:
                    19:35:50:b0:4d:27:91:af:e1:4d:f6:e4:a1:2f:85:
                    31:c5:10:6f:27:b2:94:cc:05:d1:78:af:6d:b1:17:
                    01:9d:6b:c8:ee:ce:50:37:02:8c:ef:50:78:7c:40:
                    66:af:a0:ee:f0:15:5e:45:c0:cf:56:d2:34:d2:8b:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:9C:6A:E4:0E:BA:FB:64:F7:7A:68:C1:97:F8:3A:8C:54:CC:10
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/iDqcauQOuvtk93powZf4OoxUzBA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000::/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:0f:02:3a:eb:be:7b:85:ed:63:2c:66:30:b2:09:9a:dc:0d:
         ef:89:e0:0f:32:b8:d8:1b:55:87:40:bb:25:50:74:cd:95:36:
         44:9c:40:12:a9:39:9c:0b:7e:48:b3:50:b7:92:d9:d4:4a:a4:
         0c:e0:6e:79:66:57:fc:8e:4a:af:2e:ff:e1:8a:70:87:00:70:
         54:84:4a:d2:88:60:52:b8:5b:7f:e9:6c:75:c8:e0:93:a2:a9:
         71:b1:fd:0a:c9:8c:38:0a:a0:a1:a8:c2:fa:14:aa:15:00:55:
         a0:fb:2f:58:99:c6:07:c8:fe:b1:7e:bd:f6:b0:57:74:5c:45:
         42:5a:d3:c9:70:31:bd:80:17:a1:4a:b6:1f:b0:54:5a:cd:44:
         43:ea:dd:43:2d:0a:89:ff:13:bc:41:ab:55:ef:f7:65:e3:94:
         77:34:82:f4:48:ac:8c:c0:3e:8b:81:79:a9:d1:fa:61:9f:56:
         28:5c:4a:92:6b:98:7a:24:f4:05:fd:d5:46:43:91:bb:e2:7a:
         7b:2e:90:e5:9a:02:00:bb:36:3d:5e:81:27:06:6b:bb:c8:85:
         d9:20:5b:90:b0:d6:b5:21:0e:27:b7:cd:25:5f:7a:43:39:76:
         a8:93:6a:6a:c7:8a:d1:71:9a:79:b9:19:75:c4:24:44:02:2e:
         29:3f:46:dc
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUwNDBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDg4M0E5QzZBRTQwRUJB
RkI2NEY3N0E2OEMxOTdGODNBOEM1NENDMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxvIiwyEsxIBl3YkBKCZxyLGFdBjoU/i2O7xaPxc69jMUQ3NFu
nl6ysgWGi8gr9uBHnmqc4l9CT848xJAP3MRXG361VhTxwmR+1wshTsv8uIiDPQc3
4BX6zwuLibQuMUgcZ6MbkHrVr1KcRlrSyvIi4s5nHGl4yyInwyS9UzmBlzpTHZ6d
Y5sMxzanuUYq6IW637nFc/4j6jiANRdsGMcO6jBqpeswU9XA/81vxuEXmDTw700R
dDqBSUyNZYfpb4qzLRk1ULBNJ5Gv4U325KEvhTHFEG8nspTMBdF4r22xFwGda8ju
zlA3AozvUHh8QGavoO7wFV5FwM9W0jTSi+GHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUiDqcauQOuvtk93powZf4OoxUzBAwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9pRHFjYXVRT3V2dGs5M3Bvd1pm
NE9veFV6QkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQDIAGw
MA0GCSqGSIb3DQEBCwUAA4IBAQC9DwI66757he1jLGYwsgma3A3vieAPMrjYG1WH
QLslUHTNlTZEnEASqTmcC35Is1C3ktnUSqQM4G55Zlf8jkqvLv/hinCHAHBUhErS
iGBSuFt/6Wx1yOCToqlxsf0KyYw4CqChqML6FKoVAFWg+y9YmcYHyP6xfr32sFd0
XEVCWtPJcDG9gBehSrYfsFRazURD6t1DLQqJ/xO8QatV7/dl45R3NIL0SKyMwD6L
gXmp0fphn1YoXEqSa5h6JPQF/dVGQ5G74np7LpDlmgIAuzY9XoEnBmu7yIXZIFuQ
sNa1IQ4nt80lX3pDOXaok2pqx4rRcZp5uRl1xCREAi4pP0bc
-----END CERTIFICATE-----