Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/WO422plaKeOdNitSC9cvnhN5408.roa
File:                     WO422plaKeOdNitSC9cvnhN5408.roa (raw, json)
Hash identifier:          +lnCjbTm4i3HxfzF/jvjsqWQ5Flf4/d2zZDExGqdWO8=
Subject key identifier:   58:EE:36:DA:99:5A:29:E3:9D:36:2B:52:0B:D7:2F:9E:13:79:E3:4F
Certificate issuer:       /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
Certificate serial:       0DD7
Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/WO422plaKeOdNitSC9cvnhN5408.roa
Signing time:             Sun 07 Feb 2021 12:48:27 +0000
ROA not before:           Sun 07 Feb 2021 12:48:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131634
IP address blocks:        103.127.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3543 (0xdd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
        Validity
            Not Before: Feb  7 12:48:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=58EE36DA995A29E39D362B520BD72F9E1379E34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:90:ad:99:bb:29:b9:48:73:f2:dd:2a:12:
                    6e:7a:32:39:75:0c:62:1c:0e:88:9a:4e:ae:f6:82:
                    44:93:eb:62:46:8c:6f:8e:8e:53:1f:e2:b8:13:00:
                    99:21:ce:04:f4:96:ee:ef:41:d5:ee:32:e6:d8:25:
                    7f:38:20:17:e5:e4:03:99:83:00:83:b3:91:48:22:
                    43:e3:df:d8:27:73:3e:74:19:12:a9:c4:7e:0f:63:
                    e5:21:40:47:ac:46:94:dc:71:84:d3:28:6d:9b:72:
                    f8:81:f9:9d:e2:1b:2c:e0:0c:f7:28:1d:33:1d:2e:
                    32:54:92:eb:25:c3:ab:5e:70:71:2b:a2:88:77:bb:
                    1e:90:e2:46:46:13:f6:e4:fd:b1:43:57:4e:0d:5b:
                    af:34:9b:1a:18:e2:ee:29:14:f4:a4:27:a9:b7:5a:
                    bd:a1:e9:bb:f6:e7:9f:fc:f0:82:a6:fc:b5:c3:59:
                    3b:41:02:35:56:67:8b:2c:fc:87:36:ca:16:32:aa:
                    f5:65:70:7e:8d:1b:1b:d9:f3:c0:6b:88:21:31:a2:
                    f2:35:ad:37:03:8a:c3:ab:38:45:57:ae:9e:3d:ea:
                    ba:94:e0:58:20:ee:99:79:30:f4:66:0a:fc:f8:73:
                    f0:d3:fa:a5:e3:7c:2c:ec:b2:b6:c4:39:f3:cf:86:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EE:36:DA:99:5A:29:E3:9D:36:2B:52:0B:D7:2F:9E:13:79:E3:4F
            X509v3 Authority Key Identifier:
                keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/WO422plaKeOdNitSC9cvnhN5408.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:d4:bd:25:1e:6f:10:f7:98:5c:6f:cb:8c:c7:40:d4:83:
         e6:d5:07:53:a5:8c:f7:63:a4:eb:18:80:bf:d1:f5:f6:b9:4d:
         7e:e0:ac:91:5e:18:07:a4:2e:53:4e:8a:2b:fb:79:85:6d:c5:
         50:10:4d:18:14:a4:fe:f5:01:c5:c2:d7:e8:5e:7f:a1:da:19:
         12:35:d3:23:84:e5:a7:d0:91:0d:2e:54:71:81:ba:a8:d8:33:
         f7:2b:ee:2a:51:4f:67:30:15:36:2c:22:a5:5f:56:14:17:ad:
         ae:aa:e2:4c:be:22:f0:da:29:60:67:c8:4f:a8:c8:44:17:7b:
         ed:7a:4b:3c:41:ad:75:5e:ea:b2:af:cc:c1:94:b9:aa:13:c9:
         e9:e2:b5:6b:22:0a:48:d4:dc:20:1d:ff:05:11:53:f6:8b:4f:
         ae:0f:6b:f3:e3:8a:ff:c3:c4:84:5d:77:c5:75:e6:7c:91:66:
         ed:28:db:ad:d4:6f:88:33:6d:45:f4:a2:7f:69:6a:6c:27:79:
         d0:68:ef:68:5b:90:4a:fd:26:30:da:9a:64:13:d7:58:08:67:
         09:52:5e:15:87:0e:ab:f6:ed:d4:21:4e:53:0e:97:5e:54:fa:
         1c:a8:3f:ea:c5:87:11:c6:af:a4:25:83:8e:2a:ce:d7:ce:16:
         3e:70:93:8f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1
RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yMTAyMDcx
MjQ4MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU4RUUzNkRBOTk1QTI5
RTM5RDM2MkI1MjBCRDcyRjlFMTM3OUUzNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDEZCtmbspuUhz8t0qEm56Mjl1DGIcDoiaTq72gkST62JGjG+O
jlMf4rgTAJkhzgT0lu7vQdXuMubYJX84IBfl5AOZgwCDs5FIIkPj39gncz50GRKp
xH4PY+UhQEesRpTccYTTKG2bcviB+Z3iGyzgDPcoHTMdLjJUkuslw6tecHErooh3
ux6Q4kZGE/bk/bFDV04NW680mxoY4u4pFPSkJ6m3Wr2h6bv255/88IKm/LXDWTtB
AjVWZ4ss/Ic2yhYyqvVlcH6NGxvZ88BriCExovI1rTcDisOrOEVXrp496rqU4Fgg
7pl5MPRmCvz4c/DT+qXjfCzssrbEOfPPhvGjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWO422plaKeOdNitSC9cvnhN5408wHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2
+jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX
L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL1dPNDIycGxhS2VPZE5pdFND
OWN2bmhONTQwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
f+QwDQYJKoZIhvcNAQELBQADggEBAFz41L0lHm8Q95hcb8uMx0DUg+bVB1OljPdj
pOsYgL/R9fa5TX7grJFeGAekLlNOiiv7eYVtxVAQTRgUpP71AcXC1+hef6HaGRI1
0yOE5afQkQ0uVHGBuqjYM/cr7ipRT2cwFTYsIqVfVhQXra6q4ky+IvDaKWBnyE+o
yEQXe+16SzxBrXVe6rKvzMGUuaoTyenitWsiCkjU3CAd/wURU/aLT64Pa/Pjiv/D
xIRdd8V15nyRZu0o263Ub4gzbUX0on9pamwnedBo72hbkEr9JjDammQT11gIZwlS
XhWHDqv27dQhTlMOl15U+hyoP+rFhxHGr6Qlg44qztfOFj5wk48=
-----END CERTIFICATE-----