Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pFv0xVFYGXjkK7fiFgnENUbTr8E.roa
File:                     pFv0xVFYGXjkK7fiFgnENUbTr8E.roa (raw, json)
Hash identifier:          BGELO+bwF9u2myRwUcWLHtCeNQn3JKVtkQUToQCGIVY=
Subject key identifier:   A4:5B:F4:C5:51:58:19:78:E4:2B:B7:E2:16:09:C4:35:46:D3:AF:C1
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0888
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pFv0xVFYGXjkK7fiFgnENUbTr8E.roa
Signing time:             Tue 29 Sep 2020 09:58:51 +0000
ROA not before:           Tue 29 Sep 2020 09:58:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131661
IP address blocks:        210.62.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A45BF4C551581978E42BB7E21609C43546D3AFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:0b:f0:eb:c2:c1:41:b1:bd:e1:ae:33:df:
                    a4:a0:68:9f:d4:b6:f9:b2:40:d5:34:f7:fe:9e:da:
                    43:8f:5d:6a:e1:26:d7:8d:99:13:d9:0d:13:f6:52:
                    c6:c2:17:db:eb:dd:c9:24:56:36:fc:e7:48:11:58:
                    50:0c:e0:e2:8a:01:f4:06:4a:db:6e:41:8a:bb:44:
                    5c:87:93:c3:27:2a:13:18:2d:bd:12:b7:09:ef:91:
                    47:6c:71:d9:8b:6b:43:f4:23:27:e4:69:b6:7b:4c:
                    29:31:cb:45:81:de:3c:04:3a:39:bc:95:4c:10:c2:
                    98:16:e7:e7:95:05:32:e5:94:b2:69:94:0d:71:af:
                    b1:89:42:56:29:bf:23:88:29:e9:d1:9c:e4:22:3c:
                    8d:fb:5d:04:43:b5:ac:cb:4e:d3:5c:01:2b:23:2b:
                    e4:24:fa:1c:f7:9c:fa:92:a7:79:00:45:cd:9c:a8:
                    5e:7b:8a:8a:93:4d:71:71:b2:88:81:43:b6:66:7f:
                    6d:96:87:eb:d7:4a:d8:6a:fa:2b:8b:55:b8:1c:98:
                    23:42:60:c0:86:d3:57:e2:51:c4:64:a5:c7:48:0a:
                    ac:6a:cc:81:82:e0:fd:ea:fb:94:aa:b6:ac:dd:a7:
                    4e:3f:41:55:fb:c8:d5:36:e2:62:73:42:e9:0d:35:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5B:F4:C5:51:58:19:78:E4:2B:B7:E2:16:09:C4:35:46:D3:AF:C1
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pFv0xVFYGXjkK7fiFgnENUbTr8E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:81:49:f1:73:ad:9e:f1:91:4f:f9:64:ed:e9:92:69:ae:14:
         47:4d:06:65:d8:87:04:fb:95:13:41:59:62:e0:ef:9a:7f:58:
         ad:4b:37:f9:7b:62:cf:11:21:75:ee:02:9c:b5:2d:56:14:43:
         16:28:50:37:7a:76:fc:e7:25:a9:78:42:5d:bf:11:ab:19:e5:
         c6:99:e1:ae:d9:c3:83:9d:81:02:b7:80:99:ff:62:5d:9e:79:
         93:d3:64:ce:4d:d5:ff:f5:c1:e9:3d:66:44:1d:27:c0:80:47:
         72:87:83:da:2b:8f:09:2d:43:9a:c7:f0:5b:53:3c:fb:49:07:
         f2:17:73:59:8d:1f:29:cd:06:2e:d9:d7:c0:5d:7d:5d:c8:43:
         78:f5:aa:34:63:04:6f:5b:a0:a0:78:6d:eb:96:b9:5d:ee:0e:
         bb:c6:eb:14:ae:f8:6e:86:35:07:e0:8b:4c:f4:b0:5b:3c:41:
         b6:ad:5e:ba:54:11:a9:c0:77:d6:01:c4:34:c7:1b:a3:6f:45:
         aa:51:cd:71:61:c2:a9:85:48:27:07:44:ed:cd:93:b8:37:bd:
         2a:38:c2:e7:d6:cf:94:03:c6:d2:52:35:5a:01:75:9f:35:48:
         3d:88:12:31:43:9a:93:40:4c:9e:e2:77:e7:0d:85:8f:c3:23:
         18:c8:f2:ad
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4NTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE0NUJGNEM1NTE1ODE5
NzhFNDJCQjdFMjE2MDlDNDM1NDZEM0FGQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAUgvw68LBQbG94a4z36SgaJ/UtvmyQNU09/6e2kOPXWrhJteN
mRPZDRP2UsbCF9vr3ckkVjb850gRWFAM4OKKAfQGSttuQYq7RFyHk8MnKhMYLb0S
twnvkUdscdmLa0P0IyfkabZ7TCkxy0WB3jwEOjm8lUwQwpgW5+eVBTLllLJplA1x
r7GJQlYpvyOIKenRnOQiPI37XQRDtazLTtNcASsjK+Qk+hz3nPqSp3kARc2cqF57
ioqTTXFxsoiBQ7Zmf22Wh+vXSthq+iuLVbgcmCNCYMCG01fiUcRkpcdICqxqzIGC
4P3q+5Sqtqzdp04/QVX7yNU24mJzQukNNaohAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpFv0xVFYGXjkK7fiFgnENUbTr8EwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wRnYweFZGWUdYamtLN2ZpRmdu
RU5VYlRyOEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j76
MA0GCSqGSIb3DQEBCwUAA4IBAQAZgUnxc62e8ZFP+WTt6ZJprhRHTQZl2IcE+5UT
QVli4O+af1itSzf5e2LPESF17gKctS1WFEMWKFA3enb85yWpeEJdvxGrGeXGmeGu
2cODnYECt4CZ/2JdnnmT02TOTdX/9cHpPWZEHSfAgEdyh4PaK48JLUOax/BbUzz7
SQfyF3NZjR8pzQYu2dfAXX1dyEN49ao0YwRvW6CgeG3rlrld7g67xusUrvhuhjUH
4ItM9LBbPEG2rV66VBGpwHfWAcQ0xxujb0WqUc1xYcKphUgnB0TtzZO4N70qOMLn
1s+UA8bSUjVaAXWfNUg9iBIxQ5qTQEye4nfnDYWPwyMYyPKt
-----END CERTIFICATE-----