Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKTSL/V_V142TfzdgQRzhk5ASDJJB4_Gg.roa
File:                     V_V142TfzdgQRzhk5ASDJJB4_Gg.roa (raw, json)
Hash identifier:          62lCWShow2lDn/K7OWoDoGKqM4n7gaOb/iChu5tGUns=
Subject key identifier:   57:F5:75:E3:64:DF:CD:D8:10:47:38:64:E4:04:83:24:90:78:FC:68
Certificate issuer:       /CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Certificate serial:       087B
Authority key identifier: 90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/V_V142TfzdgQRzhk5ASDJJB4_Gg.roa
Signing time:             Tue 29 Sep 2020 10:04:47 +0000
ROA not before:           Tue 29 Sep 2020 10:04:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131645
IP address blocks:        103.142.44.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
        Validity
            Not Before: Sep 29 10:04:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=57F575E364DFCDD810473864E40483249078FC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:a0:73:19:3e:00:00:bd:28:ce:4b:a3:1e:
                    63:d3:1c:01:1f:54:55:44:14:5d:01:2d:a0:e9:3a:
                    32:4f:8b:1e:99:d6:20:7e:f8:9b:6a:fd:26:72:31:
                    cb:69:aa:fa:36:04:2c:10:85:f4:79:10:5e:4d:f5:
                    ab:3d:06:b6:09:ae:c1:75:71:d1:8c:85:b0:4d:0e:
                    d2:bc:49:cb:cb:5a:07:31:3c:91:6c:a3:98:5f:df:
                    36:04:22:4c:41:09:ba:a4:f9:66:99:99:95:1f:06:
                    05:c1:d3:72:51:7d:69:c2:19:88:f2:13:21:5c:27:
                    bd:50:05:10:6e:67:b3:ba:ad:39:f1:2c:17:a6:56:
                    75:50:37:ed:a8:be:6e:c6:aa:24:8a:69:c0:da:6f:
                    cf:89:e9:29:13:6c:3c:2c:2c:ce:c6:a3:2b:f2:c8:
                    01:07:88:09:a2:35:3e:44:69:9e:cd:5a:2e:fd:ee:
                    5f:22:f4:94:70:e6:2a:8a:0d:06:91:eb:b9:53:7f:
                    ba:45:d6:26:aa:2f:30:e3:75:5c:8b:cd:47:cb:0d:
                    0c:9e:a9:a0:87:b4:4f:8d:14:1e:7e:2f:97:a4:77:
                    06:b4:1e:27:f9:fa:61:fe:f4:16:42:72:3c:74:6a:
                    6d:c3:62:59:f5:b2:d8:ba:da:09:13:ba:e2:26:40:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:75:E3:64:DF:CD:D8:10:47:38:64:E4:04:83:24:90:78:FC:68
            X509v3 Authority Key Identifier:
                keyid:90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/V_V142TfzdgQRzhk5ASDJJB4_Gg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:f9:cc:a4:a6:e0:77:cf:fa:60:1e:2b:4b:c2:37:4b:6c:
         7b:15:15:48:c8:98:26:47:6a:7b:5c:9a:b2:7a:37:04:a1:9e:
         b4:ab:0f:ae:f4:c9:5f:ea:12:19:a7:c5:77:50:cb:af:7b:75:
         c7:12:b4:e9:64:09:fe:0b:05:55:4c:3d:78:85:9b:5c:2e:05:
         ea:9b:34:09:1c:f0:d2:31:ea:c8:3f:63:7f:11:a4:0a:e9:0d:
         67:a8:f0:69:2a:ee:ba:81:6b:22:5b:9e:67:ad:0d:cf:9b:2a:
         29:51:38:23:77:c0:c1:9f:71:8b:95:ef:cb:b6:36:48:b7:13:
         24:ac:5a:00:32:a6:de:cb:48:0f:06:10:d2:02:01:a9:a9:63:
         2f:d3:17:b1:89:6c:5a:17:8b:6d:23:37:84:12:7b:a3:ba:38:
         7d:af:6a:55:e0:fb:b5:4c:51:3a:9a:57:6f:d6:78:bc:0b:f1:
         35:d3:a9:55:71:cb:13:e5:f9:3f:3c:1a:5c:f5:ea:ce:d8:4f:
         ae:5b:38:87:0e:f2:da:8d:9f:f3:b3:7f:ad:de:9f:33:d2:56:
         f8:1c:d1:11:32:ac:39:2a:0c:68:97:dc:0f:a6:ed:dc:30:40:
         7b:89:12:d5:58:33:19:46:3f:e3:b3:a0:25:d7:d3:27:01:02:
         9d:7d:35:fd
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTBF
RTY5OTg0ODQwRDFFMDMyNUU4QzAxM0RGRkI3QjI4NDEwNDdFNDAeFw0yMDA5Mjkx
MDA0NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU3RjU3NUUzNjRERkNE
RDgxMDQ3Mzg2NEU0MDQ4MzI0OTA3OEZDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaZaBzGT4AAL0ozkujHmPTHAEfVFVEFF0BLaDpOjJPix6Z1iB+
+Jtq/SZyMctpqvo2BCwQhfR5EF5N9as9BrYJrsF1cdGMhbBNDtK8ScvLWgcxPJFs
o5hf3zYEIkxBCbqk+WaZmZUfBgXB03JRfWnCGYjyEyFcJ71QBRBuZ7O6rTnxLBem
VnVQN+2ovm7GqiSKacDab8+J6SkTbDwsLM7GoyvyyAEHiAmiNT5EaZ7NWi797l8i
9JRw5iqKDQaR67lTf7pF1iaqLzDjdVyLzUfLDQyeqaCHtE+NFB5+L5ekdwa0Hif5
+mH+9BZCcjx0am3DYln1sti62gkTuuImQPBVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUV/V142TfzdgQRzhk5ASDJJB4/GgwHwYDVR0jBBgwFoAUkO5pmEhA0eAyXowB
Pf+3soQQR+QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tUU0wv
a081cG1FaEEwZUF5WG93QlBmLTNzb1FRUi1RLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9rTzVwbUVoQTBlQXlYb3dCUGYtM3NvUVFSLVEuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1RTTC9WX1YxNDJUZnpkZ1FSemhrNUFT
REpKQjRfR2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ44s
MA0GCSqGSIb3DQEBCwUAA4IBAQCPKfnMpKbgd8/6YB4rS8I3S2x7FRVIyJgmR2p7
XJqyejcEoZ60qw+u9Mlf6hIZp8V3UMuve3XHErTpZAn+CwVVTD14hZtcLgXqmzQJ
HPDSMerIP2N/EaQK6Q1nqPBpKu66gWsiW55nrQ3PmyopUTgjd8DBn3GLle/LtjZI
txMkrFoAMqbey0gPBhDSAgGpqWMv0xexiWxaF4ttIzeEEnujujh9r2pV4Pu1TFE6
mldv1ni8C/E106lVccsT5fk/PBpc9erO2E+uWziHDvLajZ/zs3+t3p8z0lb4HNER
Mqw5Kgxol9wPpu3cMEB7iRLVWDMZRj/js6Al19MnAQKdfTX9
-----END CERTIFICATE-----