Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/E4NW7stoZV01F7_Y6Ck94Qs4Teg.roa
File:                     E4NW7stoZV01F7_Y6Ck94Qs4Teg.roa (raw, json)
Hash identifier:          VnMvE4KmW/nm4BT9LUuMp39Mdec2uDi9EyuVWdWiFpI=
Subject key identifier:   13:83:56:EE:CB:68:65:5D:35:17:BF:D8:E8:29:3D:E1:0B:38:4D:E8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E4NW7stoZV01F7_Y6Ck94Qs4Teg.roa
Signing time:             Tue 29 Sep 2020 09:52:31 +0000
ROA not before:           Tue 29 Sep 2020 09:52:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        123.204.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=138356EECB68655D3517BFD8E8293DE10B384DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:4a:43:7d:68:9d:ae:02:0a:5b:b3:e6:3e:
                    ff:95:fd:2c:ec:f0:8e:be:c8:71:a9:35:d9:62:ff:
                    2d:19:3d:37:91:94:7e:de:ef:5a:01:90:16:45:25:
                    d8:e3:16:c6:e7:ac:19:73:be:ce:c8:67:48:9c:7f:
                    79:8a:77:1d:15:2f:89:46:a2:0d:65:a9:9d:99:ac:
                    c5:52:e4:3a:b0:52:f6:a7:a3:e5:c0:07:c9:84:9f:
                    e7:02:a8:73:cb:c2:7f:6d:0c:1d:b4:d4:ac:3e:c5:
                    c2:6b:b3:44:60:d2:23:fb:38:cc:b6:77:26:07:87:
                    bf:d8:62:9f:4e:68:6c:68:d6:6d:fd:64:78:61:9c:
                    ee:89:74:7c:8d:e1:4f:74:fe:18:7c:68:61:97:38:
                    c2:ab:1f:ae:b0:cc:df:97:cf:75:8b:e6:82:34:74:
                    57:d1:13:2e:60:cf:00:97:55:b7:c0:70:ab:f0:95:
                    67:62:40:a7:83:a8:bf:70:5f:4f:ef:78:44:e1:34:
                    b0:4c:10:fb:d7:d1:d7:9d:3c:cb:94:01:a7:55:86:
                    9d:88:42:12:8f:8d:ae:5e:7a:74:41:ed:ca:55:49:
                    cd:67:8a:07:64:ae:a4:b0:1f:73:ee:c3:fd:a8:d0:
                    c2:e1:f3:13:43:ac:f0:96:2d:90:51:c5:20:48:b4:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:83:56:EE:CB:68:65:5D:35:17:BF:D8:E8:29:3D:E1:0B:38:4D:E8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E4NW7stoZV01F7_Y6Ck94Qs4Teg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.204.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:b2:c1:dc:d9:f9:1e:e0:a6:28:8f:65:12:1f:73:d6:2c:
         31:ea:eb:ad:e0:e4:b4:2a:a7:df:3e:fb:71:f3:0c:16:02:42:
         90:d7:b9:57:62:c4:f0:38:6c:43:e0:ab:20:ed:50:16:e7:94:
         aa:43:49:4d:1f:34:a7:e8:0e:4c:20:26:e2:b2:59:a8:dd:52:
         78:ee:ae:4c:d1:a1:f2:61:74:a2:1b:53:4a:30:9a:8b:09:92:
         55:49:16:09:09:2e:e6:04:4f:f8:5f:20:d0:c9:67:1b:5a:33:
         1c:59:f9:6b:99:01:ed:47:f1:70:91:56:19:4b:81:08:00:91:
         d9:c4:c4:a5:3d:05:ec:75:0e:78:46:04:cb:56:de:89:2b:79:
         af:ec:66:3b:83:62:fc:0f:a1:c6:8b:95:b4:87:1a:20:b0:04:
         0a:41:e4:55:60:83:64:cf:85:03:d7:80:24:8e:a7:44:ee:94:
         64:4e:46:f1:dc:6a:ac:59:85:31:a6:19:0a:87:d4:d8:cc:31:
         8d:30:0d:86:ed:ca:cd:b6:86:07:2a:50:83:13:52:85:7f:62:
         1b:f1:24:f6:d9:08:98:ed:cb:b1:4d:76:9e:e9:5f:52:de:a3:
         d9:29:a7:0e:98:f3:7a:2b:71:3c:9b:72:22:81:5a:0a:51:fa:
         89:4a:f8:37
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEzODM1NkVFQ0I2ODY1
NUQzNTE3QkZEOEU4MjkzREUxMEIzODRERTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLZ0pDfWidrgIKW7PmPv+V/Szs8I6+yHGpNdli/y0ZPTeRlH7e
71oBkBZFJdjjFsbnrBlzvs7IZ0icf3mKdx0VL4lGog1lqZ2ZrMVS5DqwUvano+XA
B8mEn+cCqHPLwn9tDB201Kw+xcJrs0Rg0iP7OMy2dyYHh7/YYp9OaGxo1m39ZHhh
nO6JdHyN4U90/hh8aGGXOMKrH66wzN+Xz3WL5oI0dFfREy5gzwCXVbfAcKvwlWdi
QKeDqL9wX0/veEThNLBMEPvX0dedPMuUAadVhp2IQhKPja5eenRB7cpVSc1nigdk
rqSwH3Puw/2o0MLh8xNDrPCWLZBRxSBItHCfAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUE4NW7stoZV01F7/Y6Ck94Qs4TegwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRTROVzdzdG9aVjAxRjdfWTZDazk0
UXM0VGVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXvMMA0G
CSqGSIb3DQEBCwUAA4IBAQAcXLLB3Nn5HuCmKI9lEh9z1iwx6uut4OS0KqffPvtx
8wwWAkKQ17lXYsTwOGxD4Ksg7VAW55SqQ0lNHzSn6A5MICbislmo3VJ47q5M0aHy
YXSiG1NKMJqLCZJVSRYJCS7mBE/4XyDQyWcbWjMcWflrmQHtR/FwkVYZS4EIAJHZ
xMSlPQXsdQ54RgTLVt6JK3mv7GY7g2L8D6HGi5W0hxogsAQKQeRVYINkz4UD14Ak
jqdE7pRkTkbx3GqsWYUxphkKh9TYzDGNMA2G7crNtoYHKlCDE1KFf2Ib8ST22QiY
7cuxTXae6V9S3qPZKacOmPN6K3E8m3IigVoKUfqJSvg3
-----END CERTIFICATE-----