Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa
File:                     cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa (raw, json)
Hash identifier:          jZs9+iABg9AhpBm8C6fhT6loaisYsmGiPgdTbSqf8Lk=
Subject key identifier:   71:86:38:6F:E0:12:C3:5C:64:BE:76:47:20:90:A8:F1:E6:CB:10:A0
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       0DA2
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa
Signing time:             Mon 11 Jan 2021 12:38:33 +0000
ROA not before:           Mon 11 Jan 2021 12:38:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131633
IP address blocks:        2404:2a40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Jan 11 12:38:33 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7186386FE012C35C64BE76472090A8F1E6CB10A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:aa:10:a3:72:e8:14:fd:25:58:5b:5d:6a:
                    73:42:cd:92:43:cc:f6:1a:0d:40:34:91:4f:56:a0:
                    d6:47:2c:99:d4:9f:20:34:49:3f:5e:c6:17:42:ed:
                    da:bd:38:17:13:5d:ec:9b:e5:b1:3e:c0:1b:78:dd:
                    4b:a4:e4:a5:f3:b6:28:a9:c9:35:ad:96:72:6a:6d:
                    4a:7a:e9:74:93:0e:c7:75:9b:81:46:aa:ab:f9:ae:
                    99:07:aa:6d:3c:7d:3e:c0:f6:c7:46:26:bb:08:8c:
                    ea:69:9b:6d:74:f6:98:f1:14:04:b0:fa:6f:bd:e0:
                    0e:25:38:30:9f:8e:1a:55:8e:cb:06:90:df:00:3b:
                    da:8d:9d:46:72:59:f5:ff:65:3f:3e:a2:82:3c:3a:
                    b4:09:0d:b6:02:b0:b2:82:35:78:ea:a3:b1:ba:10:
                    c0:09:26:4c:6f:04:39:a7:7e:d7:e3:58:54:38:dc:
                    61:6c:88:43:40:1a:d5:d3:fe:50:0f:1c:52:96:85:
                    d1:33:03:f8:2f:db:bb:af:22:94:88:28:0c:b5:e9:
                    32:1e:3b:23:58:75:d5:50:0d:20:72:85:67:03:0e:
                    d4:c7:66:03:f1:5b:11:a3:7d:ad:ee:01:cb:ef:3b:
                    0c:4c:3a:56:54:9f:e8:66:b6:81:1d:f9:f8:dd:08:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:38:6F:E0:12:C3:5C:64:BE:76:47:20:90:A8:F1:E6:CB:10:A0
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/cYY4b-ASw1xkvnZHIJCo8ebLEKA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:1f:3f:d5:8b:26:32:7b:c1:6a:f7:0d:1c:ec:40:b9:d0:7d:
         dd:49:66:f9:2f:a3:ac:ef:65:82:17:8e:2f:fe:b3:f7:41:1a:
         cc:ea:3c:3d:1c:ba:15:b1:c9:57:01:8a:06:94:68:11:10:5c:
         5f:28:ef:55:68:a5:82:d5:d7:c0:7c:80:9d:ad:6c:d2:7d:87:
         7b:c7:fa:d7:2c:e6:e5:0b:ae:cf:9d:9f:03:47:7e:d5:44:26:
         7f:bb:14:4e:df:ff:64:52:e4:f4:36:5a:fe:8e:89:c7:76:da:
         61:f2:78:fd:56:cd:8b:63:ad:9e:66:27:1a:ec:f5:5b:cb:ff:
         7f:a1:7c:12:62:5e:b2:af:02:65:c9:91:9f:88:83:d4:04:46:
         8e:48:00:ec:a8:bf:15:16:88:69:bf:b4:31:0c:81:e2:9a:22:
         58:e9:c4:6d:13:45:cb:04:94:bb:96:fd:1f:57:e5:81:fb:d6:
         d3:00:ea:9f:10:cf:1b:98:13:85:aa:fd:ad:e7:d4:cc:80:fd:
         7f:21:87:fd:31:a1:bc:80:a6:a3:a8:50:0f:8b:89:ec:40:12:
         75:36:45:34:d9:ec:8e:7a:93:b3:86:0c:42:37:f9:ae:78:8d:
         d1:92:13:93:64:ef:25:78:e7:80:4c:21:7b:f4:26:d2:c5:be:
         ad:d3:53:d3
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3
MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yMTAxMTEx
MjM4MzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDcxODYzODZGRTAxMkMz
NUM2NEJFNzY0NzIwOTBBOEYxRTZDQjEwQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCit6oQo3LoFP0lWFtdanNCzZJDzPYaDUA0kU9WoNZHLJnUnyA0
ST9exhdC7dq9OBcTXeyb5bE+wBt43Uuk5KXztiipyTWtlnJqbUp66XSTDsd1m4FG
qqv5rpkHqm08fT7A9sdGJrsIjOppm2109pjxFASw+m+94A4lODCfjhpVjssGkN8A
O9qNnUZyWfX/ZT8+ooI8OrQJDbYCsLKCNXjqo7G6EMAJJkxvBDmnftfjWFQ43GFs
iENAGtXT/lAPHFKWhdEzA/gv27uvIpSIKAy16TIeOyNYddVQDSByhWcDDtTHZgPx
WxGjfa3uAcvvOwxMOlZUn+hmtoEd+fjdCI1fAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUcYY4b+ASw1xkvnZHIJCo8ebLEKAwHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b
Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ
TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9jWVk0Yi1BU3cxeGt2
blpISUpDbzhlYkxFS0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAQqQDANBgkqhkiG9w0BAQsFAAOCAQEAeh8/1YsmMnvBavcNHOxAudB93Ulm
+S+jrO9lgheOL/6z90EazOo8PRy6FbHJVwGKBpRoERBcXyjvVWilgtXXwHyAna1s
0n2He8f61yzm5Quuz52fA0d+1UQmf7sUTt//ZFLk9DZa/o6Jx3baYfJ4/VbNi2Ot
nmYnGuz1W8v/f6F8EmJesq8CZcmRn4iD1ARGjkgA7Ki/FRaIab+0MQyB4poiWOnE
bRNFywSUu5b9H1flgfvW0wDqnxDPG5gThar9refUzID9fyGH/TGhvICmo6hQD4uJ
7EASdTZFNNnsjnqTs4YMQjf5rniN0ZITk2TvJXjngEwhe/Qm0sW+rdNT0w==
-----END CERTIFICATE-----