Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/tBj8hVkO6pEzm1wGzztvN5UGq4g.roa
File:                     tBj8hVkO6pEzm1wGzztvN5UGq4g.roa (raw, json)
Hash identifier:          MwTw/uPGqHgRqTrOj1G2/1nZ3qBw+ZQZGwaxzg4p6jA=
Subject key identifier:   B4:18:FC:85:59:0E:EA:91:33:9B:5C:06:CF:3B:6F:37:95:06:AB:88
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       09E2
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/tBj8hVkO6pEzm1wGzztvN5UGq4g.roa
Signing time:             Wed 29 Sep 2021 02:52:18 +0000
ROA not before:           Wed 29 Sep 2021 02:52:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        211.78.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Sep 29 02:52:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B418FC85590EEA91339B5C06CF3B6F379506AB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:c6:31:c1:bf:73:4e:78:27:3e:2c:e8:44:
                    a8:99:10:71:8c:64:2e:20:82:ac:b5:ca:d1:43:b5:
                    a2:a7:b9:fc:f3:6a:d3:3c:98:98:2e:b4:2d:74:2f:
                    bd:7a:4e:27:b3:75:9d:40:d3:6e:95:99:ff:ef:b4:
                    62:d9:00:ec:97:b4:e0:4d:76:d5:42:65:67:ef:27:
                    00:84:a3:c9:96:2d:76:f7:a5:50:25:6d:32:16:aa:
                    05:5d:5b:5f:1c:cb:c7:e7:49:e4:26:bb:a1:50:1f:
                    27:4f:11:4b:bf:78:ca:a8:b6:1d:f4:17:06:8e:97:
                    dc:0e:ed:5b:ec:bf:9b:01:78:bf:08:af:7d:e2:ed:
                    31:0d:e8:36:ae:38:21:8c:85:4b:9f:e8:50:a6:3b:
                    1d:51:d7:75:2c:c5:05:39:fe:23:14:ea:98:39:88:
                    20:99:d6:73:7c:c8:22:20:3e:21:48:66:5f:9e:90:
                    e0:30:d9:3c:43:66:85:5c:75:1a:ff:a7:ae:68:b7:
                    15:24:51:2a:5a:07:47:4e:a8:5b:fd:5c:66:17:9a:
                    da:52:94:54:1e:6c:72:72:69:e6:31:ea:04:8a:cd:
                    ae:89:3d:bb:14:f0:78:ac:16:66:e8:a1:6d:c7:24:
                    7f:b3:30:5c:37:bf:1b:44:58:85:5b:2c:09:62:c7:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:18:FC:85:59:0E:EA:91:33:9B:5C:06:CF:3B:6F:37:95:06:AB:88
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/tBj8hVkO6pEzm1wGzztvN5UGq4g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:ce:fc:fe:e8:1a:63:ba:d9:f4:07:f5:fb:18:5a:23:2f:
         df:05:9f:eb:4e:7e:fe:81:4b:2c:c8:26:e8:f3:ac:dd:80:bd:
         a1:24:ba:89:9c:56:d3:7c:c0:eb:e2:24:f1:ee:97:01:c1:28:
         9c:48:38:a7:04:3a:a8:e0:b4:54:39:8b:6b:18:37:fc:01:a2:
         53:22:f7:93:19:c9:cd:5a:f5:9d:d8:6d:db:de:56:24:3c:ec:
         8a:9d:ec:25:54:5e:10:6a:49:3d:ef:98:c0:f8:b8:c6:a8:ea:
         0a:82:25:3b:29:01:87:d8:54:54:7d:e7:86:94:0c:23:86:c1:
         bd:40:81:9c:b3:e9:23:7c:72:86:50:f1:5d:0d:1a:4f:89:13:
         7f:69:48:2a:6e:5e:37:47:94:86:2e:bb:03:a9:be:a2:c0:c1:
         56:f1:1a:99:68:39:38:82:e4:23:3c:7c:57:b9:bc:62:f9:a0:
         21:50:ce:a0:5f:3f:62:7e:b1:91:fd:cf:97:44:c8:6c:5b:ca:
         76:7e:ea:ae:70:92:de:1f:e2:d3:e1:8d:4e:96:b7:41:68:0f:
         bf:2b:35:30:11:5f:36:fe:6d:53:fc:02:3a:ff:68:71:79:8b:
         fd:eb:f5:32:f3:b0:e0:86:f7:af:a5:c8:06:64:fe:c8:ba:91:
         f5:7a:63:53
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMTA5Mjkw
MjUyMThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI0MThGQzg1NTkwRUVB
OTEzMzlCNUMwNkNGM0I2RjM3OTUwNkFCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGIcYxwb9zTngnPizoRKiZEHGMZC4ggqy1ytFDtaKnufzzatM8
mJgutC10L716TiezdZ1A026Vmf/vtGLZAOyXtOBNdtVCZWfvJwCEo8mWLXb3pVAl
bTIWqgVdW18cy8fnSeQmu6FQHydPEUu/eMqoth30FwaOl9wO7Vvsv5sBeL8Ir33i
7TEN6DauOCGMhUuf6FCmOx1R13UsxQU5/iMU6pg5iCCZ1nN8yCIgPiFIZl+ekOAw
2TxDZoVcdRr/p65otxUkUSpaB0dOqFv9XGYXmtpSlFQebHJyaeYx6gSKza6JPbsU
8HisFmbooW3HJH+zMFw3vxtEWIVbLAlix811AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUtBj8hVkO6pEzm1wGzztvN5UGq4gwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3RCajhoVmtPNnBFem0xd0d6enR2TjVV
R3E0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTTgAwDQYJ
KoZIhvcNAQELBQADggEBAJFrzvz+6Bpjutn0B/X7GFojL98Fn+tOfv6BSyzIJujz
rN2AvaEkuomcVtN8wOviJPHulwHBKJxIOKcEOqjgtFQ5i2sYN/wBolMi95MZyc1a
9Z3YbdveViQ87Iqd7CVUXhBqST3vmMD4uMao6gqCJTspAYfYVFR954aUDCOGwb1A
gZyz6SN8coZQ8V0NGk+JE39pSCpuXjdHlIYuuwOpvqLAwVbxGploOTiC5CM8fFe5
vGL5oCFQzqBfP2J+sZH9z5dEyGxbynZ+6q5wkt4f4tPhjU6Wt0FoD78rNTARXzb+
bVP8Ajr/aHF5i/3r9TLzsOCG96+lyAZk/si6kfV6Y1M=
-----END CERTIFICATE-----