Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/EiLFfj37fmfDZgtcpoHJuNnAZE4.roa
File:                     EiLFfj37fmfDZgtcpoHJuNnAZE4.roa (raw, json)
Hash identifier:          /rX06m2CnnLR696BxbHEAY38TrPGx6RJfG9hyKx9otc=
Subject key identifier:   12:22:C5:7E:3D:FB:7E:67:C3:66:0B:5C:A6:81:C9:B8:D9:C0:64:4E
Certificate issuer:       /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Certificate serial:       0885
Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/EiLFfj37fmfDZgtcpoHJuNnAZE4.roa
Signing time:             Mon 25 Jan 2021 01:55:15 +0000
ROA not before:           Mon 25 Jan 2021 01:55:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        103.197.174.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
        Validity
            Not Before: Jan 25 01:55:15 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1222C57E3DFB7E67C3660B5CA681C9B8D9C0644E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:d9:c5:a6:0e:85:6f:c1:dd:1e:01:6b:2d:
                    6f:b4:c2:86:7c:00:b8:1c:d0:26:8b:16:94:16:40:
                    47:a8:ba:8f:5d:04:f9:5c:6e:c3:e6:64:60:20:e3:
                    82:44:bb:22:d4:49:74:5a:92:bc:39:81:a8:45:7e:
                    a7:e8:a1:1e:b2:40:aa:0c:64:03:26:c1:30:3d:e9:
                    75:56:40:6e:3f:42:a9:84:ad:46:ef:04:8e:aa:82:
                    8a:c4:67:cf:ef:d8:a7:be:6a:ff:67:63:38:f3:d4:
                    55:3d:06:30:8c:0e:2a:32:6e:91:cc:c4:4a:94:43:
                    14:99:ff:b2:83:76:60:17:98:cd:9e:67:92:7d:0c:
                    a7:81:73:66:45:d2:d0:a7:c9:39:22:35:f9:dc:2a:
                    2e:c9:31:3f:be:62:c0:7a:91:c5:9b:26:16:da:33:
                    7e:96:87:dc:79:32:25:c3:c0:0c:04:ec:bd:04:8a:
                    62:b9:44:03:ca:7c:41:47:77:e6:21:65:94:8c:2d:
                    12:e6:14:76:ed:b8:7b:27:7b:ea:7b:cc:40:52:ed:
                    1f:ce:cc:dc:82:5c:f5:cf:61:c8:7d:49:4c:21:fa:
                    09:cd:5d:ed:96:65:ae:89:30:31:b0:e9:7c:4f:54:
                    21:4b:36:0b:6f:e1:3a:8b:d6:35:2c:84:c3:56:6e:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:22:C5:7E:3D:FB:7E:67:C3:66:0B:5C:A6:81:C9:B8:D9:C0:64:4E
            X509v3 Authority Key Identifier:
                keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/EiLFfj37fmfDZgtcpoHJuNnAZE4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:6f:4a:d1:57:59:2f:9c:d8:5d:28:4b:bf:c4:72:32:f0:b2:
         06:f2:7f:11:02:d0:39:f7:16:79:68:09:7a:00:ef:d0:76:98:
         77:81:ae:0c:e2:15:3e:1e:96:fe:3f:a5:ee:90:3d:b9:4b:10:
         4b:9c:43:3f:ef:76:f9:d1:cf:0c:b1:60:0f:c6:6b:ea:72:1c:
         a2:72:eb:f3:d1:96:03:e8:ad:99:dc:e0:29:63:ca:57:7e:31:
         12:b7:c4:91:9c:b5:83:e3:37:44:a5:ce:5b:ac:a2:cc:6c:87:
         c2:5d:55:9c:a0:f9:35:49:be:61:7c:ab:2a:b0:7c:9b:6e:63:
         5d:dd:e9:71:13:7d:95:5d:fe:85:f9:cc:e1:ff:1a:66:df:d6:
         c8:27:72:ba:63:de:e5:70:81:3e:66:42:30:c0:ac:96:31:b9:
         5d:30:62:eb:14:d0:6f:96:d1:6b:7c:70:55:9d:c4:ab:ce:ff:
         8e:c0:04:6f:46:be:3f:4b:f3:a2:3a:cd:8c:a0:e3:f0:67:a3:
         f5:30:c6:77:d6:d1:0a:91:d1:98:8e:2b:75:52:30:bc:a2:68:
         50:7a:e2:82:e0:de:aa:ba:9d:fd:5d:ff:e0:44:46:88:5e:01:
         3f:fb:82:a0:cc:ce:37:1b:23:1c:9b:a4:ff:66:8a:00:55:c1:
         66:ff:b5:3a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0
QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yMTAxMjUw
MTU1MTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEyMjJDNTdFM0RGQjdF
NjdDMzY2MEI1Q0E2ODFDOUI4RDlDMDY0NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXBtnFpg6Fb8HdHgFrLW+0woZ8ALgc0CaLFpQWQEeouo9dBPlc
bsPmZGAg44JEuyLUSXRakrw5gahFfqfooR6yQKoMZAMmwTA96XVWQG4/QqmErUbv
BI6qgorEZ8/v2Ke+av9nYzjz1FU9BjCMDioybpHMxEqUQxSZ/7KDdmAXmM2eZ5J9
DKeBc2ZF0tCnyTkiNfncKi7JMT++YsB6kcWbJhbaM36Wh9x5MiXDwAwE7L0EimK5
RAPKfEFHd+YhZZSMLRLmFHbtuHsne+p7zEBS7R/OzNyCXPXPYch9SUwh+gnNXe2W
Za6JMDGw6XxPVCFLNgtv4TqL1jUshMNWbtCxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUEiLFfj37fmfDZgtcpoHJuNnAZE4wHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs
hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB
WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvRWlMRmZqMzdmbWZEWmd0
Y3BvSEp1Tm5BWkU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWfFrjANBgkqhkiG9w0BAQsFAAOCAQEAlm9K0VdZL5zYXShLv8RyMvCyBvJ/EQLQ
OfcWeWgJegDv0HaYd4GuDOIVPh6W/j+l7pA9uUsQS5xDP+92+dHPDLFgD8Zr6nIc
onLr89GWA+itmdzgKWPKV34xErfEkZy1g+M3RKXOW6yizGyHwl1VnKD5NUm+YXyr
KrB8m25jXd3pcRN9lV3+hfnM4f8aZt/WyCdyumPe5XCBPmZCMMCsljG5XTBi6xTQ
b5bRa3xwVZ3Eq87/jsAEb0a+P0vzojrNjKDj8Gej9TDGd9bRCpHRmI4rdVIwvKJo
UHriguDeqrqd/V3/4ERGiF4BP/uCoMzONxsjHJuk/2aKAFXBZv+1Og==
-----END CERTIFICATE-----