Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKPC/8e0A0NBzIQyQY2cSMMxEUa42WJw.roa
File:                     8e0A0NBzIQyQY2cSMMxEUa42WJw.roa (raw, json)
Hash identifier:          qXBCZWff966DJP64lUecWGPUOpUMLZSY1IaIfm6HPr4=
Subject key identifier:   F1:ED:00:D0:D0:73:21:0C:90:63:67:12:30:CC:44:51:AE:36:58:9C
Certificate issuer:       /CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Certificate serial:       0ADD
Authority key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/8e0A0NBzIQyQY2cSMMxEUa42WJw.roa
Signing time:             Wed 29 Sep 2021 02:37:59 +0000
ROA not before:           Wed 29 Sep 2021 02:37:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131645
IP address blocks:        2405:14c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2781 (0xadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
        Validity
            Not Before: Sep 29 02:37:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F1ED00D0D073210C9063671230CC4451AE36589C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:1d:4b:13:c8:58:7d:1e:7a:b8:57:c1:0f:
                    4b:78:db:27:f3:ab:2c:89:25:da:f6:c8:d4:e4:cb:
                    21:7f:bd:6c:dc:72:db:7e:a7:48:30:eb:c0:88:d6:
                    e5:f7:dc:dd:f5:56:41:d0:9d:1e:e5:11:72:0f:d4:
                    1f:cc:55:ac:01:d7:be:ce:62:ea:e2:30:b1:13:eb:
                    1d:93:18:82:85:48:5b:28:5a:82:d1:bc:ef:51:d1:
                    2a:e5:12:f8:85:63:e0:b4:07:4e:14:eb:d8:da:9d:
                    11:c4:d3:4a:2d:a5:62:c8:95:7b:0c:3c:b0:b8:99:
                    2d:0a:67:ba:14:49:78:af:08:7f:bf:6e:5e:4a:05:
                    1c:a1:22:3e:17:41:cd:0d:04:91:b0:dd:3b:9a:e1:
                    ee:31:54:93:fc:76:c3:a0:38:c9:5a:dd:4e:a6:fd:
                    36:ae:36:bd:af:c4:83:9d:5d:5f:df:99:4a:70:6d:
                    5f:f4:95:ba:02:c6:92:02:af:64:66:fd:0a:6a:eb:
                    07:ad:87:13:8f:4d:df:07:ff:89:cf:b2:92:eb:69:
                    7f:2c:c2:32:8f:bb:46:00:41:97:46:77:51:81:21:
                    57:f4:96:b7:00:40:53:81:a0:ed:89:3a:fe:0b:5b:
                    4e:df:02:60:d9:e7:f7:84:30:7b:d9:ad:6d:1a:f5:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:00:D0:D0:73:21:0C:90:63:67:12:30:CC:44:51:AE:36:58:9C
            X509v3 Authority Key Identifier:
                keyid:CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/8e0A0NBzIQyQY2cSMMxEUa42WJw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:14c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:f1:35:f8:dc:d1:ec:6f:46:88:45:5b:28:3c:be:9c:cd:47:
         05:b3:bc:4d:2b:d8:b7:25:7e:7b:13:2a:07:46:61:aa:81:82:
         72:13:e6:19:79:c3:1b:f1:69:2b:0b:ac:13:52:00:2d:8b:6a:
         e0:da:2b:6c:29:af:2e:c2:0d:9b:67:98:a8:e0:12:20:3c:f4:
         86:e9:d2:6f:3d:4f:38:6a:14:fc:1f:ea:8d:7b:d9:c8:50:e8:
         1e:b9:a5:9b:9c:6e:00:25:20:78:1a:11:bc:fc:57:7a:56:dc:
         01:bc:37:7b:fe:a5:6c:43:fa:6d:51:43:e4:e6:0b:81:aa:18:
         de:8b:0a:36:50:a4:f7:36:b1:ab:15:12:26:71:3e:88:2f:dd:
         bb:f7:7c:57:ad:c5:47:4b:f8:48:be:a0:71:5d:20:a9:7e:ab:
         16:34:6e:e0:b1:d0:23:53:7a:b0:c4:52:19:35:d0:a2:5f:04:
         c0:b5:75:1c:db:96:51:a7:58:6e:4c:ee:b6:f9:6b:bb:c3:cf:
         c9:05:e0:64:3f:4f:8a:f2:b9:2a:ff:3a:63:b0:db:7b:6e:81:
         a1:ee:6e:33:e2:79:69:00:c1:86:9b:5d:3e:d1:75:23:43:b1:
         49:70:a5:47:52:78:db:4a:d4:7b:b2:18:cd:36:84:62:ae:c1:
         2b:ba:ad:6d
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uz
N0Q3Qzk5MTg1QTNEOUFDNjExNzE4REE3ODU1OUI2RTk5QTMxQjAeFw0yMTA5Mjkw
MjM3NTlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYxRUQwMEQwRDA3MzIx
MEM5MDYzNjcxMjMwQ0M0NDUxQUUzNjU4OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdJh1LE8hYfR56uFfBD0t42yfzqyyJJdr2yNTkyyF/vWzcctt+
p0gw68CI1uX33N31VkHQnR7lEXIP1B/MVawB177OYuriMLET6x2TGIKFSFsoWoLR
vO9R0SrlEviFY+C0B04U69janRHE00otpWLIlXsMPLC4mS0KZ7oUSXivCH+/bl5K
BRyhIj4XQc0NBJGw3Tua4e4xVJP8dsOgOMla3U6m/TauNr2vxIOdXV/fmUpwbV/0
lboCxpICr2Rm/Qpq6wethxOPTd8H/4nPspLraX8swjKPu0YAQZdGd1GBIVf0lrcA
QFOBoO2JOv4LW07fAmDZ5/eEMHvZrW0a9fx1AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU8e0A0NBzIQyQY2cSMMxEUa42WJwwHwYDVR0jBBgwFoAUzjfXyZGFo9msYRcY
2nhVm26ZoxswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tQQy96
amZYeVpHRm85bXNZUmNZMm5oVm0yNlpveHMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3pqZlh5WkdGbzltc1lSY1kybmhWbTI2Wm94cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0tLUEMvOGUwQTBOQnpJUXlRWTJjU01NeEVV
YTQyV0p3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFFMAw
DQYJKoZIhvcNAQELBQADggEBAJXxNfjc0exvRohFWyg8vpzNRwWzvE0r2LclfnsT
KgdGYaqBgnIT5hl5wxvxaSsLrBNSAC2LauDaK2wpry7CDZtnmKjgEiA89Ibp0m89
TzhqFPwf6o172chQ6B65pZucbgAlIHgaEbz8V3pW3AG8N3v+pWxD+m1RQ+TmC4Gq
GN6LCjZQpPc2sasVEiZxPogv3bv3fFetxUdL+Ei+oHFdIKl+qxY0buCx0CNTerDE
Uhk10KJfBMC1dRzbllGnWG5M7rb5a7vDz8kF4GQ/T4ryuSr/OmOw23tugaHubjPi
eWkAwYabXT7RdSNDsUlwpUdSeNtK1HuyGM02hGKuwSu6rW0=
-----END CERTIFICATE-----