Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/Bcq34Vxf3wjj7lxnoOrVBRkZKDY.roa
File:                     Bcq34Vxf3wjj7lxnoOrVBRkZKDY.roa (raw, json)
Hash identifier:          Y7ek6Jis2GLODZQuINJ9Ifo+xpCkv17RUAIPPctmwkM=
Subject key identifier:   05:CA:B7:E1:5C:5F:DF:08:E3:EE:5C:67:A0:EA:D5:05:19:19:28:36
Certificate issuer:       /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Certificate serial:       08BD
Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/Bcq34Vxf3wjj7lxnoOrVBRkZKDY.roa
Signing time:             Sun 07 Feb 2021 12:35:03 +0000
ROA not before:           Sun 07 Feb 2021 12:35:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7478
IP address blocks:        210.244.192.0/19 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
        Validity
            Not Before: Feb  7 12:35:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=05CAB7E15C5FDF08E3EE5C67A0EAD50519192836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:c6:fe:fb:17:2a:8e:e2:d7:15:5a:8a:cc:
                    e1:8b:33:06:1e:b8:f9:c4:5b:bc:17:53:68:ab:5a:
                    d8:6f:0f:e8:76:a9:45:c5:fe:aa:0e:22:a5:98:74:
                    e3:46:22:b5:e1:71:97:7c:b6:6f:ab:01:35:8b:42:
                    37:1a:5c:48:9a:5e:6a:96:2a:b7:c1:06:b0:3d:b7:
                    33:a4:6c:b1:0a:c9:e5:99:c2:26:84:2b:a3:33:4d:
                    4a:80:2a:af:87:6e:8f:05:f2:f5:e3:a2:08:01:7d:
                    7c:f3:be:3c:3e:61:b1:b8:0f:77:bd:6e:33:bb:84:
                    6c:33:f1:82:98:19:e9:99:05:2f:64:f3:28:9a:22:
                    f2:e2:ac:5f:f7:f5:00:34:fa:79:7b:75:a5:82:fc:
                    41:ef:fc:5e:63:21:1e:9f:c5:7e:ce:3f:cf:93:be:
                    7a:9f:ad:bd:4f:c6:4d:27:e8:7a:fc:dd:f4:bf:78:
                    1f:de:e6:e2:87:55:8e:ad:36:17:3b:ac:61:b2:ba:
                    03:c2:7e:93:c2:29:5d:1f:72:72:14:37:cb:c5:17:
                    ff:a6:13:71:90:ef:39:de:08:6a:94:3b:68:a2:43:
                    c9:e8:69:47:88:30:d9:a5:22:b7:85:ae:14:a4:1f:
                    24:28:e2:e4:04:e6:d7:40:40:76:4e:23:49:05:6e:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CA:B7:E1:5C:5F:DF:08:E3:EE:5C:67:A0:EA:D5:05:19:19:28:36
            X509v3 Authority Key Identifier:
                keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/Bcq34Vxf3wjj7lxnoOrVBRkZKDY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.244.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:16:c2:97:d6:6f:19:c0:81:6a:77:00:31:a8:fb:3d:df:
         f7:b3:35:4c:cd:21:68:3b:4b:98:30:92:e9:6d:a9:80:aa:66:
         c6:3c:7f:a0:af:17:c9:8d:01:55:5b:9f:2e:6c:8c:df:ac:1d:
         cf:dd:9d:f5:dc:57:78:c4:0e:b4:3f:20:ca:44:3f:a8:a5:d0:
         f6:e3:ee:ab:58:0d:19:38:ff:5e:ce:c1:4f:dc:b5:8a:13:49:
         7f:1d:64:75:89:0f:a4:91:0f:39:98:bb:38:e1:d7:31:96:2e:
         e6:d4:9b:4b:6e:3a:01:2f:e9:94:38:53:8c:16:c7:d1:11:1e:
         71:d4:b6:a8:fe:d4:15:23:67:1a:a5:80:69:09:32:4b:30:eb:
         94:ce:4c:b7:2e:8f:c1:32:18:32:db:91:d0:c7:b3:da:f5:b3:
         e5:e8:48:45:3a:e8:12:3d:dd:96:5a:13:65:4b:5d:d2:e3:dd:
         20:6b:84:05:e6:a4:c1:1a:a3:12:db:57:45:78:ff:35:e3:f6:
         8a:6f:8b:65:35:78:e4:2b:5a:b0:66:be:99:22:72:fd:83:23:
         c6:84:89:4f:81:32:a3:a3:e4:81:2c:29:09:1f:1b:02:fa:92:
         79:4f:bf:7c:3c:e1:0a:f4:64:26:7a:74:44:d5:93:48:4d:74:
         c3:6c:4a:cd
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ5
RTk3QjAwRDJFMTVDNDFBRTcwNzE3MzIwMThDMkIxMzdFNTNBMTAeFw0yMTAyMDcx
MjM1MDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA1Q0FCN0UxNUM1RkRG
MDhFM0VFNUM2N0EwRUFENTA1MTkxOTI4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHcsb++xcqjuLXFVqKzOGLMwYeuPnEW7wXU2irWthvD+h2qUXF
/qoOIqWYdONGIrXhcZd8tm+rATWLQjcaXEiaXmqWKrfBBrA9tzOkbLEKyeWZwiaE
K6MzTUqAKq+Hbo8F8vXjoggBfXzzvjw+YbG4D3e9bjO7hGwz8YKYGemZBS9k8yia
IvLirF/39QA0+nl7daWC/EHv/F5jIR6fxX7OP8+Tvnqfrb1Pxk0n6Hr83fS/eB/e
5uKHVY6tNhc7rGGyugPCfpPCKV0fcnIUN8vFF/+mE3GQ7zneCGqUO2iiQ8noaUeI
MNmlIreFrhSkHyQo4uQE5tdAQHZOI0kFbsaJAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUBcq34Vxf3wjj7lxnoOrVBRkZKDYwHwYDVR0jBBgwFoAUnZ6XsA0uFcQa5wcX
MgGMKxN+U6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL25a
NlhzQTB1RmNRYTV3Y1hNZ0dNS3hOLVU2RS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
blo2WHNBMHVGY1FhNXdjWE1nR01LeE4tVTZFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL0JjcTM0VnhmM3dqajdseG5vT3JWQlJr
WktEWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS9MAwDQYJ
KoZIhvcNAQELBQADggEBAG7fFsKX1m8ZwIFqdwAxqPs93/ezNUzNIWg7S5gwkult
qYCqZsY8f6CvF8mNAVVbny5sjN+sHc/dnfXcV3jEDrQ/IMpEP6il0Pbj7qtYDRk4
/17OwU/ctYoTSX8dZHWJD6SRDzmYuzjh1zGWLubUm0tuOgEv6ZQ4U4wWx9ERHnHU
tqj+1BUjZxqlgGkJMksw65TOTLcuj8EyGDLbkdDHs9r1s+XoSEU66BI93ZZaE2VL
XdLj3SBrhAXmpMEaoxLbV0V4/zXj9opvi2U1eOQrWrBmvpkicv2DI8aEiU+BMqOj
5IEsKQkfGwL6knlPv3w84Qr0ZCZ6dETVk0hNdMNsSs0=
-----END CERTIFICATE-----