Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9j_xGHjhpMZfJNc7ecD99jDVegY.roa
File:                     9j_xGHjhpMZfJNc7ecD99jDVegY.roa (raw, json)
Hash identifier:          uZLxLu88UVMHoicZXbiD/sdgGAS2cl3nyu+n/QzvafM=
Subject key identifier:   F6:3F:F1:18:78:E1:A4:C6:5F:24:D7:3B:79:C0:FD:F6:30:D5:7A:06
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0885
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9j_xGHjhpMZfJNc7ecD99jDVegY.roa
Signing time:             Tue 29 Sep 2020 09:52:07 +0000
ROA not before:           Tue 29 Sep 2020 09:52:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        123.51.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F63FF11878E1A4C65F24D73B79C0FDF630D57A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:7c:85:b9:e4:32:7c:2a:77:e0:cd:c6:23:
                    4f:78:90:60:d8:e9:dc:79:50:f4:5d:8a:f7:c3:3e:
                    bf:9b:e9:aa:8a:09:f7:02:fa:37:2f:41:2b:f8:b6:
                    96:b9:95:81:89:ab:f2:cd:c2:53:26:6b:a4:2e:c9:
                    14:d1:6b:b0:e0:b2:5c:14:f6:69:d9:a9:6c:8d:15:
                    ba:17:81:c9:e8:ab:ff:41:6f:17:b3:e6:18:ff:41:
                    26:4a:42:2c:f7:be:67:71:bf:76:17:c7:c0:d1:1e:
                    2f:79:9a:ef:c2:32:1c:02:c1:d0:3f:a0:cf:cd:35:
                    84:d4:fc:83:ae:93:2a:bb:e9:69:36:ab:34:aa:19:
                    e3:6d:73:3a:80:65:f1:d3:37:6d:52:49:93:84:6b:
                    5f:ef:a2:5d:f3:2d:c3:f4:3e:7d:ef:52:95:fe:65:
                    aa:d1:f1:cb:84:49:dc:51:09:a2:27:f1:c0:c1:c5:
                    93:6a:af:d4:02:fd:d4:c1:be:79:28:f8:4d:4b:9b:
                    11:21:39:42:49:3a:1c:5b:82:8a:07:c7:a3:b9:52:
                    10:0e:5e:32:26:38:21:12:ce:10:03:ad:b2:c2:55:
                    a0:10:fc:2e:3f:6e:76:81:85:ca:f6:20:0d:27:e6:
                    ff:26:e8:05:40:71:38:aa:ba:51:68:19:13:22:5a:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:F1:18:78:E1:A4:C6:5F:24:D7:3B:79:C0:FD:F6:30:D5:7A:06
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9j_xGHjhpMZfJNc7ecD99jDVegY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.51.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:10:40:8a:aa:c0:54:5a:c3:e3:87:24:a7:1e:47:2d:99:af:
         a4:9c:4e:7e:0f:ad:e4:6c:a6:09:9d:79:9d:58:eb:81:46:c2:
         dd:7f:de:fb:5a:6c:67:ac:a3:5d:c4:e1:95:e5:7a:8c:fc:74:
         c7:25:ae:a4:b3:3a:ac:25:c3:90:84:b3:5c:ad:65:7d:5e:ca:
         f5:31:7e:44:5c:b1:ab:4b:4c:1e:5e:f0:54:0e:c8:54:81:49:
         84:b0:47:3b:09:f1:e8:3b:00:76:da:2e:0d:98:df:32:32:da:
         4a:24:48:df:8e:5d:62:2a:ab:89:fd:ab:bd:91:e0:68:85:35:
         2d:64:da:da:ea:77:60:91:38:74:3e:4f:9c:e1:d6:b1:96:7c:
         ac:ab:97:e2:ca:fb:f4:c9:e0:56:e1:72:eb:b0:cc:3b:47:8e:
         25:1a:65:9b:20:81:88:13:5a:a9:0b:f6:60:34:ec:73:11:ee:
         98:2a:0b:94:5c:09:fb:d4:9a:b0:6f:37:41:f0:55:05:97:71:
         f1:a1:11:1e:92:5b:db:fb:40:5d:38:f4:19:0a:35:59:7e:04:
         ce:c8:12:59:52:89:d1:18:41:ca:be:1d:32:d9:a4:53:30:40:
         07:5c:de:b0:9a:da:69:b5:5e:10:61:81:50:e3:46:21:09:72:
         9b:b6:83:91
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY2M0ZGMTE4NzhFMUE0
QzY1RjI0RDczQjc5QzBGREY2MzBENTdBMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBXnyFueQyfCp34M3GI094kGDY6dx5UPRdivfDPr+b6aqKCfcC
+jcvQSv4tpa5lYGJq/LNwlMma6QuyRTRa7DgslwU9mnZqWyNFboXgcnoq/9Bbxez
5hj/QSZKQiz3vmdxv3YXx8DRHi95mu/CMhwCwdA/oM/NNYTU/IOukyq76Wk2qzSq
GeNtczqAZfHTN21SSZOEa1/vol3zLcP0Pn3vUpX+ZarR8cuESdxRCaIn8cDBxZNq
r9QC/dTBvnko+E1LmxEhOUJJOhxbgooHx6O5UhAOXjImOCESzhADrbLCVaAQ/C4/
bnaBhcr2IA0n5v8m6AVAcTiqulFoGRMiWijLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU9j/xGHjhpMZfJNc7ecD99jDVegYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOWpfeEdIamhwTVpmSk5jN2VjRDk5
akRWZWdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHsztDAN
BgkqhkiG9w0BAQsFAAOCAQEAvhBAiqrAVFrD44ckpx5HLZmvpJxOfg+t5GymCZ15
nVjrgUbC3X/e+1psZ6yjXcThleV6jPx0xyWupLM6rCXDkISzXK1lfV7K9TF+RFyx
q0tMHl7wVA7IVIFJhLBHOwnx6DsAdtouDZjfMjLaSiRI345dYiqrif2rvZHgaIU1
LWTa2up3YJE4dD5PnOHWsZZ8rKuX4sr79MngVuFy67DMO0eOJRplmyCBiBNaqQv2
YDTscxHumCoLlFwJ+9SasG83QfBVBZdx8aERHpJb2/tAXTj0GQo1WX4EzsgSWVKJ
0RhByr4dMtmkUzBAB1zesJraabVeEGGBUONGIQlym7aDkQ==
-----END CERTIFICATE-----