Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5YJbaIC86BcVNTMCv_6SfYa7w4w.roa
File:                     5YJbaIC86BcVNTMCv_6SfYa7w4w.roa (raw, json)
Hash identifier:          zMy4Q864r9wzhx7kheBpTHRHtj1/NDUdpRDE+ygrdp8=
Subject key identifier:   E5:82:5B:68:80:BC:E8:17:15:35:33:02:BF:FE:92:7D:86:BB:C3:8C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       085F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5YJbaIC86BcVNTMCv_6SfYa7w4w.roa
Signing time:             Tue 29 Sep 2020 09:51:57 +0000
ROA not before:           Tue 29 Sep 2020 09:51:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.147.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2143 (0x85f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E5825B6880BCE81715353302BFFE927D86BBC38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:10:13:34:ae:a6:a6:e8:9b:94:98:31:0a:
                    02:8f:8e:9b:db:ac:25:fa:97:d7:ef:53:8d:94:ed:
                    a1:12:cf:4e:0a:2b:c7:9b:b8:45:00:0e:60:51:d6:
                    db:33:78:fc:5f:41:33:a2:5a:bd:f3:02:7c:33:33:
                    68:13:b6:ed:a5:a6:bc:0c:bf:19:38:15:a4:22:a6:
                    48:ff:a5:6e:6b:cb:be:2e:98:d9:bc:6b:58:2a:3f:
                    65:e1:e0:52:12:c8:ad:bd:ce:c3:a4:39:08:64:9d:
                    7b:06:6d:22:5d:18:d5:4b:33:e0:3b:34:de:1a:39:
                    41:cd:90:37:13:09:58:dc:a2:ca:a8:ad:3a:1a:44:
                    4d:a0:e2:c7:8d:50:4e:16:eb:2c:ac:f6:c1:2f:4f:
                    37:6e:3b:d3:7c:fc:81:a0:76:61:09:17:3c:22:82:
                    98:d7:f3:91:25:2d:90:ec:b3:51:ea:76:b2:a3:31:
                    96:32:dd:c5:78:d0:32:f6:40:9b:2e:d8:3a:3c:9f:
                    69:2b:2a:1c:1a:25:5c:81:e7:15:3c:87:68:94:6e:
                    62:b0:32:aa:bb:3b:e1:6d:22:07:42:dc:a4:fc:bc:
                    6c:e7:bb:51:3a:e0:4a:80:e9:66:93:4c:49:46:ad:
                    a0:1e:b3:27:9c:86:fc:b9:2c:28:6f:73:bf:a6:e4:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:5B:68:80:BC:E8:17:15:35:33:02:BF:FE:92:7D:86:BB:C3:8C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5YJbaIC86BcVNTMCv_6SfYa7w4w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:a8:40:5f:cc:1b:d3:5f:41:91:1b:cf:e0:45:41:23:d7:
         9c:4d:21:50:39:0d:a6:c6:31:67:75:7e:fc:05:b8:38:8f:6f:
         44:f2:ec:b8:a9:18:ca:46:13:23:68:18:a7:c8:3b:aa:46:2d:
         be:27:d0:49:86:a2:cc:18:c8:3f:4e:8e:65:4e:63:40:4a:03:
         a8:77:5b:e3:f6:3c:1f:63:29:d7:7f:74:cd:5c:f8:36:4b:81:
         b9:c0:09:7f:bf:c5:ac:71:d8:93:90:e8:a6:64:01:d8:31:39:
         f4:c0:d2:a5:a3:3b:ac:9d:41:46:c4:1e:0e:ea:88:5e:13:6c:
         83:5e:f2:fe:0c:70:77:74:16:40:f9:eb:08:ba:f3:3d:03:52:
         9b:97:23:3a:09:3c:a2:15:ad:9f:c0:e7:e8:38:66:db:e8:5b:
         fe:00:3e:24:a2:a8:13:58:d2:c8:51:3f:eb:13:cd:df:d6:72:
         13:59:a4:3a:33:6d:07:4c:25:37:b9:2a:ad:82:0e:aa:25:11:
         c0:44:0f:e7:ea:63:84:42:46:9a:c8:76:f5:88:ee:f8:9f:3d:
         3b:e7:06:2b:60:79:2c:97:f3:87:3c:50:2d:54:ca:99:f9:0f:
         ba:97:83:b1:19:b3:b8:b8:28:dc:ac:1a:2b:13:dc:c9:c5:f5:
         ee:8c:f6:84
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUxNTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU1ODI1QjY4ODBCQ0U4
MTcxNTM1MzMwMkJGRkU5MjdEODZCQkMzOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrtRATNK6mpuiblJgxCgKPjpvbrCX6l9fvU42U7aESz04KK8eb
uEUADmBR1tszePxfQTOiWr3zAnwzM2gTtu2lprwMvxk4FaQipkj/pW5ry74umNm8
a1gqP2Xh4FISyK29zsOkOQhknXsGbSJdGNVLM+A7NN4aOUHNkDcTCVjcosqorToa
RE2g4seNUE4W6yys9sEvTzduO9N8/IGgdmEJFzwigpjX85ElLZDss1HqdrKjMZYy
3cV40DL2QJsu2Do8n2krKhwaJVyB5xU8h2iUbmKwMqq7O+FtIgdC3KT8vGznu1E6
4EqA6WaTTElGraAesyechvy5LChvc7+m5Ob1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU5YJbaIC86BcVNTMCv/6SfYa7w4wwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNVlKYmFJQzg2QmNWTlRNQ3ZfNlNm
WWE3dzR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqTgDAN
BgkqhkiG9w0BAQsFAAOCAQEAQ6CoQF/MG9NfQZEbz+BFQSPXnE0hUDkNpsYxZ3V+
/AW4OI9vRPLsuKkYykYTI2gYp8g7qkYtvifQSYaizBjIP06OZU5jQEoDqHdb4/Y8
H2Mp1390zVz4NkuBucAJf7/FrHHYk5DopmQB2DE59MDSpaM7rJ1BRsQeDuqIXhNs
g17y/gxwd3QWQPnrCLrzPQNSm5cjOgk8ohWtn8Dn6Dhm2+hb/gA+JKKoE1jSyFE/
6xPN39ZyE1mkOjNtB0wlN7kqrYIOqiURwEQP5+pjhEJGmsh29Yju+J89O+cGK2B5
LJfzhzxQLVTKmfkPupeDsRmzuLgo3KwaKxPcycX17oz2hA==
-----END CERTIFICATE-----