Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wfTPAKruTuUA-721WTkX6AHM4-o.roa
File:                     wfTPAKruTuUA-721WTkX6AHM4-o.roa (raw, json)
Hash identifier:          nqoOn1PcGcxSdHqdzsFsu7Htk4C74Ts7t8Ht1MpCw9I=
Subject key identifier:   C1:F4:CF:00:AA:EE:4E:E5:00:FB:BD:B5:59:39:17:E8:01:CC:E3:EA
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0A87
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wfTPAKruTuUA-721WTkX6AHM4-o.roa
Signing time:             Sun 07 Feb 2021 11:38:09 +0000
ROA not before:           Sun 07 Feb 2021 11:38:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        202.39.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb  7 11:38:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C1F4CF00AAEE4EE500FBBDB5593917E801CCE3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:bf:13:cc:54:aa:4d:21:69:f3:5f:17:8f:
                    e9:21:18:e7:82:be:8b:6c:bc:23:cc:59:84:04:02:
                    bd:ba:56:90:b4:dd:a0:0b:85:b7:e9:ac:64:cc:a1:
                    da:55:90:82:13:9d:66:3c:16:c8:fb:d6:c0:59:c5:
                    48:1a:c2:5c:82:59:e4:c5:dd:bd:8e:2a:c2:76:3c:
                    d5:2b:b5:1c:16:a7:79:5f:c0:9f:7f:53:d3:ea:69:
                    ee:a1:ce:18:fc:7b:25:b8:f1:f1:d6:2f:a3:a1:19:
                    57:c7:6b:06:32:d3:f6:45:8a:4e:50:39:fb:14:1a:
                    13:a0:b0:9f:44:73:d8:e0:2c:ec:8c:af:47:1d:1d:
                    72:ce:bf:06:13:f7:84:db:82:c0:02:f0:77:26:b2:
                    de:a4:e4:28:d9:89:38:d7:41:0f:43:40:8e:a0:ac:
                    57:b6:ff:2e:f0:5a:bf:7e:9b:ce:c2:16:42:4b:ec:
                    2b:4f:6a:81:26:98:35:5b:d7:53:66:88:45:f7:e7:
                    7e:68:ba:36:fb:3e:2c:23:82:ef:2c:5c:27:16:cd:
                    37:6a:15:6d:c2:7a:51:fe:c4:e3:8b:95:6a:4c:97:
                    19:56:f2:84:c5:f7:c4:17:d1:ec:b7:a8:03:5c:02:
                    e0:67:1e:1f:76:8f:a2:92:2e:9c:7b:1b:f2:d7:f3:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F4:CF:00:AA:EE:4E:E5:00:FB:BD:B5:59:39:17:E8:01:CC:E3:EA
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wfTPAKruTuUA-721WTkX6AHM4-o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a4:a8:5f:94:37:55:fb:4c:ab:b9:e1:f6:2c:d9:65:59:0a:54:
         33:c0:ab:0b:53:80:f5:a9:0b:b8:c7:a9:63:2e:92:d4:45:42:
         63:be:98:90:71:d1:3b:d6:8b:ce:e5:98:d0:e2:d0:7a:67:d7:
         57:8d:66:4e:6b:8f:32:30:6b:b6:03:1f:e2:50:4b:ca:e8:e9:
         44:0c:c9:96:5a:20:45:83:bc:40:89:71:23:b1:b5:38:b5:4c:
         3e:2e:c5:cd:6c:d1:e3:b3:37:e8:ed:8d:92:dd:26:2c:a2:f9:
         cd:8a:1c:b1:fb:48:03:25:55:4d:f8:94:48:a7:f6:42:db:b6:
         f7:38:e0:31:e0:86:40:2a:01:db:2f:0d:94:14:0e:60:c2:8c:
         55:39:3f:7e:46:3b:61:67:20:bf:00:f8:df:13:12:19:64:73:
         c1:15:64:3b:f5:45:4a:88:6c:09:df:7f:46:ee:a5:b7:0c:4f:
         fd:bd:e1:23:dc:33:bc:93:f5:b7:21:2b:e4:dc:0b:45:13:6b:
         17:97:bc:6e:89:4a:06:91:60:2d:25:a8:72:0f:03:22:0d:61:
         a3:da:04:1e:2d:1e:60:f0:a0:e1:00:e8:4a:35:df:7e:d5:66:
         c9:21:bf:f2:eb:3b:0d:2c:94:47:42:66:49:11:c8:f0:44:00:
         2b:ef:32:3b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTAyMDcx
MTM4MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMxRjRDRjAwQUFFRTRF
RTUwMEZCQkRCNTU5MzkxN0U4MDFDQ0UzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuOb8TzFSqTSFp818Xj+khGOeCvotsvCPMWYQEAr26VpC03aAL
hbfprGTModpVkIITnWY8Fsj71sBZxUgawlyCWeTF3b2OKsJ2PNUrtRwWp3lfwJ9/
U9Pqae6hzhj8eyW48fHWL6OhGVfHawYy0/ZFik5QOfsUGhOgsJ9Ec9jgLOyMr0cd
HXLOvwYT94TbgsAC8Hcmst6k5CjZiTjXQQ9DQI6grFe2/y7wWr9+m87CFkJL7CtP
aoEmmDVb11NmiEX3535oujb7Piwjgu8sXCcWzTdqFW3CelH+xOOLlWpMlxlW8oTF
98QX0ey3qANcAuBnHh92j6KSLpx7G/LX8+IhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUwfTPAKruTuUA+721WTkX6AHM4+owHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC93ZlRQQUtydVR1VUEtNzIxV1Rr
WDZBSE00LW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyicA
MA0GCSqGSIb3DQEBCwUAA4IBAQCkqF+UN1X7TKu54fYs2WVZClQzwKsLU4D1qQu4
x6ljLpLURUJjvpiQcdE71ovO5ZjQ4tB6Z9dXjWZOa48yMGu2Ax/iUEvK6OlEDMmW
WiBFg7xAiXEjsbU4tUw+LsXNbNHjszfo7Y2S3SYsovnNihyx+0gDJVVN+JRIp/ZC
27b3OOAx4IZAKgHbLw2UFA5gwoxVOT9+RjthZyC/APjfExIZZHPBFWQ79UVKiGwJ
339G7qW3DE/9veEj3DO8k/W3ISvk3AtFE2sXl7xuiUoGkWAtJahyDwMiDWGj2gQe
LR5g8KDhAOhKNd9+1WbJIb/y6zsNLJRHQmZJEcjwRAAr7zI7
-----END CERTIFICATE-----