Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/E4krdU4ZKJVUjhYy_lmAe6r5wwg.roa
File:                     E4krdU4ZKJVUjhYy_lmAe6r5wwg.roa (raw, json)
Hash identifier:          jEJYp2wYfQen4ePxbyJXjCRDDNfMlgVvvbeDl67wkxI=
Subject key identifier:   13:89:2B:75:4E:19:28:95:54:8E:16:32:FE:59:80:7B:AA:F9:C3:08
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0873
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E4krdU4ZKJVUjhYy_lmAe6r5wwg.roa
Signing time:             Tue 29 Sep 2020 09:52:02 +0000
ROA not before:           Tue 29 Sep 2020 09:52:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        175.180.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=13892B754E192895548E1632FE59807BAAF9C308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:3d:9c:91:41:3b:0b:ab:b9:29:c1:0a:4d:
                    28:51:4c:4c:89:35:e2:06:38:d7:3d:09:2d:ec:01:
                    b4:6f:66:45:c1:2b:05:0d:4a:99:22:31:18:fd:b9:
                    10:b9:a7:c8:c1:c0:58:d5:e3:93:24:47:7c:39:f7:
                    b6:e0:65:84:79:46:29:28:5a:cf:d4:3d:9a:9c:f7:
                    fa:3d:10:7e:23:76:2f:95:12:4b:ea:56:ac:5b:7e:
                    21:c3:14:fa:cb:00:4f:d5:b1:23:13:a7:38:e4:52:
                    59:03:f7:73:ba:ed:f4:10:f6:56:25:fe:97:d6:0f:
                    f3:3d:3f:12:76:d2:13:be:fd:e2:e1:c6:ec:2e:c6:
                    3d:2f:bc:94:5a:7d:78:03:1a:1a:7d:46:de:9d:6b:
                    5d:fd:22:9f:00:d6:4e:69:42:a9:f7:93:4a:0f:1b:
                    e3:51:88:b3:ec:9d:3b:21:5f:d1:fc:3e:25:b1:04:
                    1f:8f:72:a6:21:02:89:5c:82:bb:06:8f:f6:f2:12:
                    69:84:ef:4b:ee:1a:41:4d:45:3b:ec:12:a7:c4:a8:
                    88:31:e8:d5:28:23:d0:2e:71:c7:b6:03:a4:f7:87:
                    7f:27:d6:cb:82:c5:cb:e8:78:30:8b:4f:f9:64:e4:
                    2e:18:e1:9e:99:63:13:de:eb:c7:f5:84:75:fe:6b:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:89:2B:75:4E:19:28:95:54:8E:16:32:FE:59:80:7B:AA:F9:C3:08
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E4krdU4ZKJVUjhYy_lmAe6r5wwg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a8:53:ef:2b:8f:27:df:ab:9c:35:7f:69:9d:14:fc:84:12:d7:
         49:58:3d:0e:b0:ab:e1:c5:01:4a:e9:e3:62:1f:ad:32:74:76:
         28:7c:7e:37:ee:c7:eb:8d:ee:80:70:c2:a1:be:0d:e9:44:5b:
         6e:fa:82:75:aa:50:22:e2:92:5c:fe:12:89:d0:01:9c:05:2b:
         25:8f:e4:85:42:c1:35:97:df:0f:e3:21:50:76:e3:cf:15:3b:
         4c:d0:e1:08:13:72:3c:2c:b7:56:c2:1b:e4:7a:a2:a0:7b:0e:
         01:8f:7a:a9:ce:84:8b:e8:61:85:38:4e:ad:ca:24:7c:5e:4a:
         c0:38:42:34:fb:f0:48:45:0f:d3:52:16:ee:d2:82:78:1e:56:
         d0:05:8c:e7:aa:13:c6:b4:a6:24:23:de:1c:bb:49:d8:90:d0:
         fa:c3:a3:b4:b0:1a:67:bd:97:9f:c8:6c:19:d3:98:14:eb:27:
         83:6f:17:df:8e:55:92:35:6d:4d:c4:50:09:a5:4c:71:ba:ba:
         b3:13:30:37:1f:6f:a7:e3:d8:78:3c:0e:47:b7:51:a5:e9:77:
         e2:69:77:ba:5d:79:08:69:f4:90:9a:50:71:1b:c6:9d:6c:31:
         63:6f:7d:22:54:7a:4f:08:ad:ba:3c:59:0e:7d:2f:da:d1:a7:
         39:8f:e0:9b
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEzODkyQjc1NEUxOTI4
OTU1NDhFMTYzMkZFNTk4MDdCQUFGOUMzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCTPD2ckUE7C6u5KcEKTShRTEyJNeIGONc9CS3sAbRvZkXBKwUN
SpkiMRj9uRC5p8jBwFjV45MkR3w597bgZYR5RikoWs/UPZqc9/o9EH4jdi+VEkvq
VqxbfiHDFPrLAE/VsSMTpzjkUlkD93O67fQQ9lYl/pfWD/M9PxJ20hO+/eLhxuwu
xj0vvJRafXgDGhp9Rt6da139Ip8A1k5pQqn3k0oPG+NRiLPsnTshX9H8PiWxBB+P
cqYhAolcgrsGj/byEmmE70vuGkFNRTvsEqfEqIgx6NUoI9Aucce2A6T3h38n1suC
xcvoeDCLT/lk5C4Y4Z6ZYxPe68f1hHX+a42lAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUE4krdU4ZKJVUjhYy/lmAe6r5wwgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRTRrcmRVNFpLSlZVamhZeV9sbUFl
NnI1d3dnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAq+0MA0G
CSqGSIb3DQEBCwUAA4IBAQCoU+8rjyffq5w1f2mdFPyEEtdJWD0OsKvhxQFK6eNi
H60ydHYofH437sfrje6AcMKhvg3pRFtu+oJ1qlAi4pJc/hKJ0AGcBSslj+SFQsE1
l98P4yFQduPPFTtM0OEIE3I8LLdWwhvkeqKgew4Bj3qpzoSL6GGFOE6tyiR8XkrA
OEI0+/BIRQ/TUhbu0oJ4HlbQBYznqhPGtKYkI94cu0nYkND6w6O0sBpnvZefyGwZ
05gU6yeDbxffjlWSNW1NxFAJpUxxurqzEzA3H2+n49h4PA5Ht1Gl6XfiaXe6XXkI
afSQmlBxG8adbDFjb30iVHpPCK26PFkOfS/a0ac5j+Cb
-----END CERTIFICATE-----