Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa
File:                     GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa (raw, json)
Hash identifier:          LNtVl5bFX+xGXGV64sdEj8WB1H+qMj9Ae8fdGKBCgY0=
Subject key identifier:   18:90:63:E0:1B:1D:67:58:4D:3F:C5:D4:BD:F6:49:DF:6D:20:7E:E9
Certificate issuer:       /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Certificate serial:       0895
Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa
Signing time:             Sun 07 Feb 2021 13:15:46 +0000
ROA not before:           Sun 07 Feb 2021 13:15:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.197.172.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
        Validity
            Not Before: Feb  7 13:15:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=189063E01B1D67584D3FC5D4BDF649DF6D207EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:d9:cb:53:33:44:1a:e7:67:ba:ed:09:87:
                    7d:3c:c6:57:0a:2b:61:fd:7e:41:f6:99:58:63:5b:
                    f8:97:23:fe:6b:b0:fc:d1:d2:fe:2f:b1:8d:cd:75:
                    2f:b7:b6:4b:c5:d7:78:2f:ab:57:a7:8c:5a:32:19:
                    a7:51:a5:9c:1e:6e:f5:3d:c5:d5:9b:b9:39:ce:88:
                    99:af:27:be:a7:82:87:62:ae:00:56:03:24:66:1c:
                    70:d9:76:61:84:b7:3b:a9:7e:74:0d:e0:e5:0c:fc:
                    02:c6:f6:f4:43:cd:89:01:01:56:5d:79:d0:ef:92:
                    11:bc:25:62:0f:70:d1:f2:8d:53:56:05:c2:3e:20:
                    25:94:1f:0e:8e:03:74:d4:f4:8b:04:19:03:bc:1b:
                    83:88:6c:5f:bf:57:6e:0c:24:2a:71:6e:04:2c:5a:
                    a9:28:fc:6c:ca:e1:e7:63:c0:9d:9a:ef:57:d3:8a:
                    36:57:8e:d6:15:58:f1:c2:04:cc:e4:e0:1d:72:cc:
                    77:b6:48:1b:bf:40:7d:af:a8:0d:12:70:0e:08:bb:
                    19:41:12:b0:32:dc:b0:29:1c:17:6d:47:29:f7:5c:
                    ae:32:83:33:cf:04:05:58:49:9f:f6:f4:c1:1a:fd:
                    c7:03:ae:88:b0:10:83:5d:c7:da:02:f9:73:35:47:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:90:63:E0:1B:1D:67:58:4D:3F:C5:D4:BD:F6:49:DF:6D:20:7E:E9
            X509v3 Authority Key Identifier:
                keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/GJBj4BsdZ1hNP8XUvfZJ320gfuk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:b9:c8:f5:53:f3:b7:e1:4b:60:e8:e5:ca:0d:ef:d2:ac:
         f6:e5:bc:dd:02:f2:ba:ea:fc:d4:3f:d1:b5:15:55:bf:61:8c:
         d1:c5:4d:7f:0f:97:c2:6d:bd:2d:cc:ce:d5:25:da:05:ee:76:
         c6:80:c0:c3:11:60:86:f0:b2:ea:98:9d:44:e2:78:f3:33:5e:
         e4:67:ef:51:27:5b:76:3b:da:0a:b0:a4:14:08:8a:ed:16:5a:
         7a:61:21:be:23:c0:ab:3e:f1:cd:ba:1f:5c:b8:2f:2c:1a:7d:
         18:75:62:dd:48:20:03:98:82:18:ec:88:00:50:d5:53:89:8c:
         cb:47:37:98:2e:ce:d0:19:db:7e:bb:f3:f9:a1:3f:2a:bc:f4:
         38:24:aa:d4:29:1c:70:11:a2:83:00:6f:a6:c3:b9:5b:3d:3d:
         c8:be:27:46:b4:28:94:b6:22:4f:1f:a0:38:05:df:5d:cd:2a:
         bd:10:85:1a:72:40:3d:c3:fe:48:a8:3c:b5:5d:36:59:b4:27:
         b8:d1:be:03:44:2c:5f:1e:f9:ed:f2:c9:1b:2b:c6:ef:6e:80:
         c4:46:54:33:0b:2d:cb:62:0f:ba:c9:67:39:4e:6f:c8:95:11:
         96:ee:64:cd:17:be:ab:42:9f:01:18:dc:b6:6a:1b:b1:ff:cd:
         04:3a:78:4b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0
QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yMTAyMDcx
MzE1NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE4OTA2M0UwMUIxRDY3
NTg0RDNGQzVENEJERjY0OURGNkQyMDdFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4ddnLUzNEGudnuu0Jh308xlcKK2H9fkH2mVhjW/iXI/5rsPzR
0v4vsY3NdS+3tkvF13gvq1enjFoyGadRpZwebvU9xdWbuTnOiJmvJ76ngodirgBW
AyRmHHDZdmGEtzupfnQN4OUM/ALG9vRDzYkBAVZdedDvkhG8JWIPcNHyjVNWBcI+
ICWUHw6OA3TU9IsEGQO8G4OIbF+/V24MJCpxbgQsWqko/GzK4edjwJ2a71fTijZX
jtYVWPHCBMzk4B1yzHe2SBu/QH2vqA0ScA4IuxlBErAy3LApHBdtRyn3XK4ygzPP
BAVYSZ/29MEa/ccDroiwEINdx9oC+XM1R54dAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUGJBj4BsdZ1hNP8XUvfZJ320gfukwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs
hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB
WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkvR0pCajRCc2RaMWhOUDhY
VXZmWkozMjBnZnVrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWfFrDANBgkqhkiG9w0BAQsFAAOCAQEAS9O5yPVT87fhS2Do5coN79Ks9uW83QLy
uur81D/RtRVVv2GM0cVNfw+Xwm29LczO1SXaBe52xoDAwxFghvCy6pidROJ48zNe
5GfvUSdbdjvaCrCkFAiK7RZaemEhviPAqz7xzbofXLgvLBp9GHVi3UggA5iCGOyI
AFDVU4mMy0c3mC7O0Bnbfrvz+aE/Krz0OCSq1CkccBGigwBvpsO5Wz09yL4nRrQo
lLYiTx+gOAXfXc0qvRCFGnJAPcP+SKg8tV02WbQnuNG+A0QsXx757fLJGyvG726A
xEZUMwsty2IPuslnOU5vyJURlu5kzRe+q0KfARjctmobsf/NBDp4Sw==
-----END CERTIFICATE-----