Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FvKqdUzRLOWRGQfp9GKrnFnnlF4.roa
File:                     FvKqdUzRLOWRGQfp9GKrnFnnlF4.roa (raw, json)
Hash identifier:          hFLw/7AF2/UZScMY1pyJdEDdC9DeGElW8WKlE3EVhcM=
Subject key identifier:   16:F2:AA:75:4C:D1:2C:E5:91:19:07:E9:F4:62:AB:9C:59:E7:94:5E
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       086F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FvKqdUzRLOWRGQfp9GKrnFnnlF4.roa
Signing time:             Tue 29 Sep 2020 09:52:01 +0000
ROA not before:           Tue 29 Sep 2020 09:52:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        106.106.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=16F2AA754CD12CE5911907E9F462AB9C59E7945E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:ff:83:b7:a8:b3:a1:f7:65:25:ae:24:8a:
                    bb:e7:c7:e2:c3:e4:23:84:69:99:ec:99:31:2e:e0:
                    f1:a7:08:9a:b1:13:a2:89:f1:47:6e:4a:fc:7f:9d:
                    78:44:c1:f2:c6:00:2f:d1:bc:0f:85:fc:74:5a:c0:
                    59:a7:3f:62:32:8a:33:d9:f4:67:9f:01:86:29:ba:
                    8c:52:a9:8b:41:df:93:a2:29:3f:fc:95:62:8b:f2:
                    0d:10:64:2b:bb:f5:4f:db:53:23:08:44:3b:d2:8d:
                    2c:d4:42:fd:53:fd:f2:c0:4f:16:15:ad:e9:b0:32:
                    94:58:46:66:39:ae:4d:ae:25:b9:8e:03:64:ba:1b:
                    4c:cd:c3:be:b2:7c:78:24:70:6e:11:97:5a:7f:76:
                    f4:58:40:1f:f8:ab:b8:00:05:1e:f7:64:17:51:4d:
                    4c:a6:8a:56:b8:04:46:9c:e8:56:0c:1d:03:f6:3e:
                    f3:b2:c5:98:5a:0e:87:cc:e8:50:6b:5b:3d:a8:8d:
                    4a:0a:e2:b3:b9:c0:65:0c:b1:6c:e2:98:8a:78:08:
                    0e:f3:82:de:ee:8d:23:2c:96:98:b1:27:90:27:71:
                    2e:54:9d:f4:9b:73:22:40:2d:d2:f5:04:db:d3:3b:
                    a8:8e:44:06:1a:e7:d0:30:4e:d9:b1:0b:ca:11:b7:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:AA:75:4C:D1:2C:E5:91:19:07:E9:F4:62:AB:9C:59:E7:94:5E
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FvKqdUzRLOWRGQfp9GKrnFnnlF4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.106.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:9e:b5:82:8b:aa:8f:76:31:36:aa:d4:1f:30:c1:db:4e:28:
         25:b0:26:86:74:70:0b:b5:be:45:95:e5:f7:63:0e:ca:a7:79:
         d0:06:c0:a8:d5:98:93:64:d1:ce:e9:15:af:21:05:bf:42:50:
         9b:31:b7:db:88:22:9d:70:d2:db:81:a9:f5:16:52:97:22:c4:
         47:f6:76:4d:cf:01:32:4e:73:eb:43:03:10:51:cc:41:b3:25:
         aa:95:7d:aa:14:42:f0:06:15:76:e3:e9:eb:4c:0b:4a:9f:86:
         fe:3a:9e:c8:da:fb:f8:2f:0e:37:03:b9:ca:f7:40:8a:a1:43:
         ff:53:ff:1d:be:87:ea:00:ff:c1:f1:58:a3:c1:8c:fc:e7:df:
         b9:3d:2f:c8:02:50:18:3d:37:ae:e6:fb:cb:1b:92:69:2d:e8:
         56:bf:e7:d5:00:78:3a:db:3f:30:5e:54:10:89:dd:ad:bf:2a:
         5e:5c:e3:0a:4e:a0:64:28:54:aa:a8:ca:3c:26:ad:25:1f:d4:
         88:a7:17:c3:60:6d:2e:63:58:89:b8:50:98:67:6d:d8:97:31:
         4a:1c:ab:c8:a9:18:76:02:b6:cf:f9:77:40:dc:45:b5:b3:bc:
         88:8e:42:3e:6a:00:70:80:82:20:cc:ac:07:8f:24:8a:0a:65:
         5a:cd:dc:4a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE2RjJBQTc1NENEMTJD
RTU5MTE5MDdFOUY0NjJBQjlDNTlFNzk0NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuav+Dt6izofdlJa4kirvnx+LD5COEaZnsmTEu4PGnCJqxE6KJ
8UduSvx/nXhEwfLGAC/RvA+F/HRawFmnP2IyijPZ9GefAYYpuoxSqYtB35OiKT/8
lWKL8g0QZCu79U/bUyMIRDvSjSzUQv1T/fLATxYVremwMpRYRmY5rk2uJbmOA2S6
G0zNw76yfHgkcG4Rl1p/dvRYQB/4q7gABR73ZBdRTUymila4BEac6FYMHQP2PvOy
xZhaDofM6FBrWz2ojUoK4rO5wGUMsWzimIp4CA7zgt7ujSMslpixJ5AncS5UnfSb
cyJALdL1BNvTO6iORAYa59AwTtmxC8oRt9iTAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFvKqdUzRLOWRGQfp9GKrnFnnlF4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRnZLcWRVelJMT1dSR1FmcDlHS3Ju
Rm5ubEY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpqxTAN
BgkqhkiG9w0BAQsFAAOCAQEAYp61gouqj3YxNqrUHzDB204oJbAmhnRwC7W+RZXl
92MOyqd50AbAqNWYk2TRzukVryEFv0JQmzG324ginXDS24Gp9RZSlyLER/Z2Tc8B
Mk5z60MDEFHMQbMlqpV9qhRC8AYVduPp60wLSp+G/jqeyNr7+C8ONwO5yvdAiqFD
/1P/Hb6H6gD/wfFYo8GM/OffuT0vyAJQGD03rub7yxuSaS3oVr/n1QB4Ots/MF5U
EIndrb8qXlzjCk6gZChUqqjKPCatJR/UiKcXw2BtLmNYibhQmGdt2JcxShyryKkY
dgK2z/l3QNxFtbO8iI5CPmoAcICCIMysB48kigplWs3cSg==
-----END CERTIFICATE-----