Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa
File:                     2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa (raw, json)
Hash identifier:          vmoIQHYHrNs9aJepaLR6SOK3exQ0J7w2qjMCotW2JcU=
Subject key identifier:   D8:78:63:47:AC:1C:C5:AA:A4:F8:F0:EF:78:91:CB:E8:56:7B:7E:6F
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E23
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa
Signing time:             Wed 29 Sep 2021 02:43:14 +0000
ROA not before:           Wed 29 Sep 2021 02:43:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        203.73.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3619 (0xe23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D8786347AC1CC5AAA4F8F0EF7891CBE8567B7E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:b8:2f:d0:4f:e1:00:5b:91:3b:f8:fb:61:
                    ac:43:79:3a:4b:bb:92:21:d7:11:5b:66:57:a2:99:
                    8e:5b:8f:32:ab:33:2d:ab:a8:a3:76:0f:68:15:4b:
                    fc:41:68:ab:fd:17:cc:ae:5f:e3:6b:1d:73:02:e0:
                    fe:8d:43:8c:6d:8b:53:b6:8a:d7:b1:f7:c3:b8:c9:
                    f0:a8:ad:fd:b4:1b:7d:3d:3f:81:2f:8d:55:c1:eb:
                    9f:02:bf:10:9f:98:43:c2:9b:a8:1e:45:08:10:53:
                    3c:d6:cd:61:9b:c6:d6:c8:ac:19:64:23:f9:cf:ca:
                    2a:1f:47:f2:d3:42:b7:f5:d1:91:65:e4:14:fd:6e:
                    ab:57:99:55:da:af:53:04:da:27:06:66:b4:f7:71:
                    f6:e0:a5:f2:2c:8c:60:84:d6:9d:bb:52:78:1a:01:
                    5c:f9:63:2b:f6:c6:1b:20:21:ba:69:88:e1:04:61:
                    db:df:34:6f:30:2f:90:d8:87:5e:19:b8:fb:9e:7b:
                    e4:8e:d8:0c:0b:51:0e:d6:c2:9e:29:7b:9c:bc:eb:
                    8f:be:0e:72:89:3e:23:7a:57:bb:94:d4:bb:c7:47:
                    6d:81:d0:97:ea:fd:ad:16:26:e0:91:54:5f:4f:d0:
                    b8:77:bd:be:ec:fd:a3:48:d3:d2:35:34:b4:f0:86:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:78:63:47:AC:1C:C5:AA:A4:F8:F0:EF:78:91:CB:E8:56:7B:7E:6F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:ce:e6:38:e2:97:36:30:c2:b0:54:9a:2b:13:a2:63:68:49:
         51:09:d3:35:06:a3:72:38:89:f3:c4:8c:c6:48:52:61:d8:31:
         56:33:a6:d2:3e:da:71:ed:3a:ff:fd:41:99:98:6b:44:3b:c2:
         d7:f2:a6:a0:f3:11:64:fb:c5:7c:95:fd:61:27:18:f9:67:f6:
         85:19:d4:3f:f8:b1:6d:26:72:8c:57:6d:44:3a:78:2c:48:72:
         dd:28:2d:03:58:f2:bc:9b:5d:8b:cf:66:33:ec:ae:97:e9:2a:
         05:e2:ca:bc:ac:20:bf:fd:5e:a7:51:3b:80:c4:ed:94:53:61:
         9e:65:d8:31:64:e0:6a:e2:00:bb:83:30:13:f3:2f:12:26:6e:
         50:e3:21:5d:0f:62:c1:09:d5:cf:f7:e8:6a:19:1e:09:31:53:
         26:64:c0:63:13:9e:ff:e9:d2:49:c4:4c:fb:6b:e5:a7:f8:eb:
         a5:32:ec:92:4a:93:36:c2:46:a3:1c:57:fd:69:24:f8:d5:66:
         47:a2:17:ab:23:90:63:fb:3c:39:04:5c:fa:29:d1:2e:bc:f0:
         42:df:30:5e:ca:a8:ff:f9:cf:85:2a:d6:c5:db:59:96:6c:0a:
         32:b2:f1:ed:21:f4:4b:c6:0c:80:a6:13:5f:91:be:f7:5e:1f:
         f7:db:f8:1c
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQ4Nzg2MzQ3QUMxQ0M1
QUFBNEY4RjBFRjc4OTFDQkU4NTY3QjdFNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCphLgv0E/hAFuRO/j7YaxDeTpLu5Ih1xFbZleimY5bjzKrMy2r
qKN2D2gVS/xBaKv9F8yuX+NrHXMC4P6NQ4xti1O2itex98O4yfCorf20G309P4Ev
jVXB658CvxCfmEPCm6geRQgQUzzWzWGbxtbIrBlkI/nPyiofR/LTQrf10ZFl5BT9
bqtXmVXar1ME2icGZrT3cfbgpfIsjGCE1p27UngaAVz5Yyv2xhsgIbppiOEEYdvf
NG8wL5DYh14ZuPuee+SO2AwLUQ7Wwp4pe5y864++DnKJPiN6V7uU1LvHR22B0Jfq
/a0WJuCRVF9P0Lh3vb7s/aNI09I1NLTwhlh9AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQU2HhjR6wcxaqk+PDveJHL6FZ7fm8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMkhoalI2d2N4YXFrLVBEdmVKSEw2
Rlo3Zm04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMtJMA0G
CSqGSIb3DQEBCwUAA4IBAQADzuY44pc2MMKwVJorE6JjaElRCdM1BqNyOInzxIzG
SFJh2DFWM6bSPtpx7Tr//UGZmGtEO8LX8qag8xFk+8V8lf1hJxj5Z/aFGdQ/+LFt
JnKMV21EOngsSHLdKC0DWPK8m12Lz2Yz7K6X6SoF4sq8rCC//V6nUTuAxO2UU2Ge
ZdgxZOBq4gC7gzAT8y8SJm5Q4yFdD2LBCdXP9+hqGR4JMVMmZMBjE57/6dJJxEz7
a+Wn+OulMuySSpM2wkajHFf9aST41WZHoherI5Bj+zw5BFz6KdEuvPBC3zBeyqj/
+c+FKtbF21mWbAoysvHtIfRLxgyAphNfkb73Xh/32/gc
-----END CERTIFICATE-----