Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TGdvWo611oKgt2pDRJr6m-50Jrc.roa
File:                     TGdvWo611oKgt2pDRJr6m-50Jrc.roa (raw, json)
Hash identifier:          rHCoyNtnPHOhT8Jvvmx6HpDtwD//hqHqjM16gO49weM=
Subject key identifier:   4C:67:6F:5A:8E:B5:D6:82:A0:B7:6A:43:44:9A:FA:9B:EE:74:26:B7
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E14
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TGdvWo611oKgt2pDRJr6m-50Jrc.roa
Signing time:             Wed 29 Sep 2021 02:43:11 +0000
ROA not before:           Wed 29 Sep 2021 02:43:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        115.30.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3604 (0xe14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4C676F5A8EB5D682A0B76A43449AFA9BEE7426B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:a9:13:b7:9d:e0:6f:3a:be:c0:ea:fe:3e:
                    4e:b0:4f:5c:3d:c0:28:ad:e8:0e:ac:75:2a:33:e2:
                    53:9d:c3:99:f6:f7:41:1b:d6:b9:25:7c:08:76:2e:
                    24:a6:2e:b3:b5:06:e8:b0:b5:5b:e2:1a:48:52:53:
                    79:96:98:ea:40:d9:ee:78:19:e5:aa:e5:87:29:16:
                    c1:0b:45:aa:94:60:34:04:e4:5a:cc:1a:f6:0a:30:
                    de:c1:1c:05:c4:d8:32:4b:4b:71:74:e0:e7:0e:fa:
                    c6:6f:dc:88:f9:ab:b9:51:b2:54:c3:74:31:0e:0e:
                    e0:5c:c5:9c:09:b4:c3:ba:13:8e:ea:a4:a7:8e:80:
                    06:83:a1:4d:7b:61:e0:7f:e0:fa:ce:78:85:bc:23:
                    d7:1b:0b:2a:84:7d:e7:75:49:ed:0d:9a:c0:c2:47:
                    d1:56:26:e7:8b:e3:13:fc:2e:7d:f5:01:9e:51:bc:
                    fa:1a:93:66:22:31:0b:4f:44:33:23:6d:12:b4:14:
                    8f:f4:fa:8a:5f:7a:ca:a5:01:95:c0:9b:0c:38:3e:
                    b9:71:69:86:44:ba:ea:50:3e:6c:97:86:a0:49:28:
                    12:3e:72:16:15:d3:56:aa:06:37:ca:57:5b:f3:2e:
                    60:21:b0:43:2c:6f:8e:78:cf:26:85:d3:f5:b5:54:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:67:6F:5A:8E:B5:D6:82:A0:B7:6A:43:44:9A:FA:9B:EE:74:26:B7
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TGdvWo611oKgt2pDRJr6m-50Jrc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:37:34:4c:af:de:92:06:4f:ed:5f:4f:66:ff:e0:97:1c:bd:
         ed:ec:8e:59:d3:f3:3e:0c:72:9e:ec:8f:b9:97:86:9b:58:85:
         b7:25:03:60:3b:bc:4a:43:f2:da:97:71:59:9d:16:e8:a9:48:
         89:b9:83:9b:a0:92:48:00:4c:53:8a:7f:bb:a3:56:59:f6:e7:
         9e:e6:e2:be:66:e9:94:00:8e:17:e6:76:74:25:a5:75:95:3c:
         0a:a0:da:4a:61:a3:d5:fe:ab:d5:fb:95:38:80:bc:57:53:87:
         35:dc:a0:c8:53:2f:e3:2e:dd:3b:41:c0:1b:79:a6:0a:13:bd:
         0c:63:e9:82:14:f8:7c:60:75:bd:79:16:13:57:f4:d9:ff:a4:
         15:48:13:4a:a8:03:21:ea:b3:78:70:c5:54:64:d0:71:e8:7e:
         ad:4c:ec:6b:01:6e:dd:06:d6:cb:7b:a1:fa:36:e8:c5:37:1b:
         5b:60:c0:95:9b:81:78:2e:a8:b7:10:06:e5:46:78:08:0f:18:
         d3:17:ad:c8:c8:a3:69:af:69:10:c9:d0:ea:09:19:d6:9b:22:
         a3:c9:a0:15:29:0d:17:c1:b8:b9:0c:55:3c:34:4f:ac:f3:c0:
         06:97:75:e2:bc:6c:8f:b4:c3:ad:aa:70:32:cc:80:d7:41:1f:
         f9:a0:06:04
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDRDNjc2RjVBOEVCNUQ2
ODJBMEI3NkE0MzQ0OUFGQTlCRUU3NDI2QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqrqkTt53gbzq+wOr+Pk6wT1w9wCit6A6sdSoz4lOdw5n290Eb
1rklfAh2LiSmLrO1BuiwtVviGkhSU3mWmOpA2e54GeWq5YcpFsELRaqUYDQE5FrM
GvYKMN7BHAXE2DJLS3F04OcO+sZv3Ij5q7lRslTDdDEODuBcxZwJtMO6E47qpKeO
gAaDoU17YeB/4PrOeIW8I9cbCyqEfed1Se0NmsDCR9FWJueL4xP8Ln31AZ5RvPoa
k2YiMQtPRDMjbRK0FI/0+opfesqlAZXAmww4PrlxaYZEuupQPmyXhqBJKBI+chYV
01aqBjfKV1vzLmAhsEMsb454zyaF0/W1VAZnAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUTGdvWo611oKgt2pDRJr6m+50JrcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVEdkdldvNjExb0tndDJwRFJKcjZt
LTUwSnJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnMeQDAN
BgkqhkiG9w0BAQsFAAOCAQEAdDc0TK/ekgZP7V9PZv/glxy97eyOWdPzPgxynuyP
uZeGm1iFtyUDYDu8SkPy2pdxWZ0W6KlIibmDm6CSSABMU4p/u6NWWfbnnubivmbp
lACOF+Z2dCWldZU8CqDaSmGj1f6r1fuVOIC8V1OHNdygyFMv4y7dO0HAG3mmChO9
DGPpghT4fGB1vXkWE1f02f+kFUgTSqgDIeqzeHDFVGTQceh+rUzsawFu3QbWy3uh
+jboxTcbW2DAlZuBeC6otxAG5UZ4CA8Y0xetyMijaa9pEMnQ6gkZ1psio8mgFSkN
F8G4uQxVPDRPrPPABpd14rxsj7TDrapwMsyA10Ef+aAGBA==
-----END CERTIFICATE-----