Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/rsY5IVHut88ls_Pcmr99hBirHOs.roa
File:                     rsY5IVHut88ls_Pcmr99hBirHOs.roa (raw, json)
Hash identifier:          RAp6DHQv4v+pqou16a78Y2lim4OQWJzQEb/CDXZCr8E=
Subject key identifier:   AE:C6:39:21:51:EE:B7:CF:25:B3:F3:DC:9A:BF:7D:84:18:AB:1C:EB
Certificate issuer:       /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial:       0948
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/rsY5IVHut88ls_Pcmr99hBirHOs.roa
Signing time:             Wed 29 Sep 2021 02:52:09 +0000
ROA not before:           Wed 29 Sep 2021 02:52:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18422
IP address blocks:        61.61.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2376 (0x948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
        Validity
            Not Before: Sep 29 02:52:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AEC6392151EEB7CF25B3F3DC9ABF7D8418AB1CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:11:04:9f:57:7f:5a:5b:63:aa:4a:17:1b:
                    d2:db:d9:b3:57:44:e0:d3:09:c1:82:0b:6d:88:22:
                    ca:ca:e8:ce:53:79:1c:8f:ad:19:3f:87:d6:a7:ad:
                    9b:e8:00:80:63:c9:ac:44:28:57:7b:d0:fa:5e:cb:
                    98:ae:6f:64:5a:d9:46:ce:22:70:2f:a4:52:92:36:
                    ff:e4:14:e0:f1:9d:c7:13:69:c3:38:8c:e0:b9:38:
                    73:ee:53:4d:a6:63:8a:a2:2f:1a:6e:ab:14:3c:27:
                    8e:60:eb:6e:96:16:6c:23:f4:b0:a1:ff:a4:e0:48:
                    c2:46:22:2d:e3:a9:df:46:da:1f:9d:f0:d0:e7:e8:
                    53:9d:b8:1f:37:cb:41:f1:cf:a0:3e:14:dc:b6:d6:
                    1b:b7:ff:1a:af:d0:b5:90:71:73:40:81:0e:c2:bd:
                    aa:33:af:aa:7e:8e:79:63:f6:91:77:73:d4:76:af:
                    1d:ea:fb:90:af:e0:ca:a9:e9:ae:61:58:08:2b:dd:
                    d5:73:85:c9:50:e4:35:4f:45:a4:1b:24:75:07:b4:
                    bb:f6:48:35:89:f1:1c:ae:b2:cc:05:94:a4:f2:a3:
                    bf:71:28:57:55:cd:6b:53:9a:c6:8b:d9:9d:23:88:
                    67:a0:d9:2b:3b:20:7c:bb:bb:b9:17:05:4d:cc:d1:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C6:39:21:51:EE:B7:CF:25:B3:F3:DC:9A:BF:7D:84:18:AB:1C:EB
            X509v3 Authority Key Identifier:
                keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/rsY5IVHut88ls_Pcmr99hBirHOs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:ec:03:32:21:5e:72:c8:17:9a:e0:46:07:b0:d0:07:dc:
         36:93:a4:d0:51:36:5c:f4:20:9a:88:57:49:0f:a4:30:1c:f7:
         80:73:79:d5:d8:2c:2b:7e:39:6a:96:04:3d:a7:d4:f5:d5:51:
         87:d4:46:49:61:1d:7a:32:71:e5:79:26:eb:20:17:92:05:d2:
         f2:4e:9e:b6:b8:5d:a5:80:91:54:e8:a1:b1:ce:83:d5:b1:58:
         9c:6a:e0:fb:51:82:0d:83:68:f2:d7:eb:7f:5b:92:1c:8c:b6:
         ec:a2:72:31:dd:97:91:23:cc:c8:ac:02:c6:4d:9e:cd:a4:b4:
         96:8e:a5:7f:f0:0f:8d:df:99:5e:98:a2:70:ee:28:cd:91:7a:
         4e:bb:0f:75:a1:16:53:a6:99:8c:c5:09:b1:b1:27:a8:80:84:
         fa:17:45:c3:3c:8b:57:54:cd:74:ba:bf:d3:1b:db:fd:d0:ee:
         10:c5:b4:d9:29:a7:1d:f6:60:55:34:fa:d9:ee:cd:0f:41:ca:
         1a:06:02:05:4f:24:db:a2:e6:3c:72:d7:c6:4e:05:fb:4d:a9:
         f0:dc:84:ee:6b:c5:a2:4e:39:e4:6c:0e:44:c4:2f:58:83:d2:
         9c:b1:48:03:cb:53:0f:da:a9:8a:33:3a:63:8d:af:58:1f:a6:
         7b:0a:52:9d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkY5
QkVDRkZFN0RBMDlDQTA1M0EyRjk2ODE0MTJCMTlGQjAwNEE3NDAeFw0yMTA5Mjkw
MjUyMDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEFFQzYzOTIxNTFFRUI3
Q0YyNUIzRjNEQzlBQkY3RDg0MThBQjFDRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsmBEEn1d/WltjqkoXG9Lb2bNXRODTCcGCC22IIsrK6M5TeRyP
rRk/h9anrZvoAIBjyaxEKFd70Ppey5iub2Ra2UbOInAvpFKSNv/kFODxnccTacM4
jOC5OHPuU02mY4qiLxpuqxQ8J45g626WFmwj9LCh/6TgSMJGIi3jqd9G2h+d8NDn
6FOduB83y0Hxz6A+FNy21hu3/xqv0LWQcXNAgQ7Cvaozr6p+jnlj9pF3c9R2rx3q
+5Cv4Mqp6a5hWAgr3dVzhclQ5DVPRaQbJHUHtLv2SDWJ8RyusswFlKTyo79xKFdV
zWtTmsaL2Z0jiGeg2Ss7IHy7u7kXBU3M0Y/pAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUrsY5IVHut88ls/Pcmr99hBirHOswHwYDVR0jBBgwFoAUL5vs/+faCcoFOi+W
gUErGfsASnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVRSSU5F
VC9MNXZzXy1mYUNjb0ZPaS1XZ1VFckdmc0FTblEuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0w1dnNfLWZhQ2NvRk9pLVdnVUVyR2ZzQVNuUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lUUklORVQvcnNZNUlWSHV0ODhsc19Q
Y21yOTloQmlySE9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD098DANBgkqhkiG9w0BAQsFAAOCAQEAbrDsAzIhXnLIF5rgRgew0AfcNpOk0FE2
XPQgmohXSQ+kMBz3gHN51dgsK345apYEPafU9dVRh9RGSWEdejJx5Xkm6yAXkgXS
8k6etrhdpYCRVOihsc6D1bFYnGrg+1GCDYNo8tfrf1uSHIy27KJyMd2XkSPMyKwC
xk2ezaS0lo6lf/APjd+ZXpiicO4ozZF6TrsPdaEWU6aZjMUJsbEnqICE+hdFwzyL
V1TNdLq/0xvb/dDuEMW02SmnHfZgVTT62e7ND0HKGgYCBU8k26LmPHLXxk4F+02p
8NyE7mvFok455GwORMQvWIPSnLFIA8tTD9qpijM6Y42vWB+mewpSnQ==
-----END CERTIFICATE-----