Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WqzDRPWEcvGCsUAWg37hw3yMSQY.roa
File:                     WqzDRPWEcvGCsUAWg37hw3yMSQY.roa (raw, json)
Hash identifier:          vExzuTwxoWze+5luHEEHNvLiiays9QPLmRGoQi3bDyQ=
Subject key identifier:   5A:AC:C3:44:F5:84:72:F1:82:B1:40:16:83:7E:E1:C3:7C:8C:49:06
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       088F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WqzDRPWEcvGCsUAWg37hw3yMSQY.roa
Signing time:             Tue 29 Sep 2020 09:52:09 +0000
ROA not before:           Tue 29 Sep 2020 09:52:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        61.56.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5AACC344F58472F182B14016837EE1C37C8C4906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:3d:8d:23:8d:3e:69:fb:d0:13:c2:74:3f:
                    45:20:18:c8:87:68:15:e0:be:6f:16:ac:5a:00:1a:
                    4c:23:58:5d:c6:d4:d9:78:79:4c:03:15:25:12:4e:
                    3d:b7:6f:a5:c2:5c:18:bf:5c:c9:de:98:e2:88:a1:
                    4c:4a:61:74:30:35:98:41:55:c4:4d:44:2e:b3:ca:
                    02:0b:c3:d2:b7:90:1a:16:e5:ad:3b:6a:bd:01:46:
                    a5:b8:db:29:f5:91:c2:e4:5c:ab:88:8a:50:be:14:
                    a0:f6:89:c6:24:cb:25:f5:da:6d:52:23:f1:fa:61:
                    06:c2:15:8c:30:f0:94:ef:b7:43:c5:51:31:56:cc:
                    2d:cd:86:7e:0d:2a:6b:f0:77:fc:b3:f9:ce:44:f1:
                    f1:37:67:46:0e:5f:cf:b1:88:6e:59:43:62:7a:a5:
                    0c:55:90:6d:fa:ec:c9:39:2e:ae:6e:7c:18:53:03:
                    10:a6:6d:0e:02:f9:0b:12:75:4d:c9:5e:a4:e0:2c:
                    c8:7e:66:65:c3:1b:fa:82:70:b4:c1:0c:b7:97:e8:
                    16:b5:00:99:98:44:cf:4c:2e:e9:13:c6:83:57:4c:
                    7b:54:d1:67:0b:5b:6f:6a:f6:34:c9:09:65:88:ef:
                    3a:2b:c2:49:d1:c8:d4:e4:1a:2e:25:01:17:36:9d:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:C3:44:F5:84:72:F1:82:B1:40:16:83:7E:E1:C3:7C:8C:49:06
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WqzDRPWEcvGCsUAWg37hw3yMSQY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:06:07:a8:46:00:eb:67:93:d1:09:5c:b6:cb:25:6f:76:6f:
         d8:89:5d:71:02:82:bd:2d:13:cf:58:0d:0d:d3:68:95:2c:1f:
         08:09:25:79:7f:00:47:0b:17:58:b2:6f:6a:53:57:63:1d:48:
         d1:0e:57:69:97:93:cf:1e:b0:89:ec:1c:42:1e:2b:59:0a:b7:
         cc:7e:e0:7b:dc:76:bb:14:c8:3a:e0:2b:db:8a:ef:39:1b:04:
         d9:a2:45:24:9a:d8:f8:d8:89:a7:2b:14:2f:e5:78:0d:6c:e9:
         84:f8:ef:96:ff:05:8e:1a:ae:73:73:7e:a5:58:54:e0:72:1e:
         43:87:32:42:da:5c:0f:21:c0:a5:da:35:fd:a6:46:1e:85:ba:
         d1:f1:b0:cb:71:a8:9c:00:8f:64:c4:9c:98:06:98:ee:04:3a:
         7b:f0:6d:5d:c3:79:26:15:59:c2:98:28:f9:60:a0:1e:3b:a5:
         ef:0a:7e:87:ad:54:43:33:fe:3d:3c:97:2f:ae:24:1e:2d:82:
         d8:64:72:f5:16:3d:6d:43:f3:57:bf:29:60:ba:7a:43:2f:ae:
         e1:88:6b:d2:97:5d:20:8f:0f:a1:ca:8d:fe:67:d8:5e:77:4d:
         c7:21:01:66:24:37:1a:ed:a3:70:22:20:5a:7c:ad:35:cd:a4:
         d2:25:c7:f8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVBQUNDMzQ0RjU4NDcy
RjE4MkIxNDAxNjgzN0VFMUMzN0M4QzQ5MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+mz2NI40+afvQE8J0P0UgGMiHaBXgvm8WrFoAGkwjWF3G1Nl4
eUwDFSUSTj23b6XCXBi/XMnemOKIoUxKYXQwNZhBVcRNRC6zygILw9K3kBoW5a07
ar0BRqW42yn1kcLkXKuIilC+FKD2icYkyyX12m1SI/H6YQbCFYww8JTvt0PFUTFW
zC3Nhn4NKmvwd/yz+c5E8fE3Z0YOX8+xiG5ZQ2J6pQxVkG367Mk5Lq5ufBhTAxCm
bQ4C+QsSdU3JXqTgLMh+ZmXDG/qCcLTBDLeX6Ba1AJmYRM9MLukTxoNXTHtU0WcL
W29q9jTJCWWI7zorwknRyNTkGi4lARc2necBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUWqzDRPWEcvGCsUAWg37hw3yMSQYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3F6RFJQV0VjdkdDc1VBV2czN2h3
M3lNU1FZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN
BgkqhkiG9w0BAQsFAAOCAQEAoQYHqEYA62eT0Qlctsslb3Zv2IldcQKCvS0Tz1gN
DdNolSwfCAkleX8ARwsXWLJvalNXYx1I0Q5XaZeTzx6wiewcQh4rWQq3zH7ge9x2
uxTIOuAr24rvORsE2aJFJJrY+NiJpysUL+V4DWzphPjvlv8Fjhquc3N+pVhU4HIe
Q4cyQtpcDyHApdo1/aZGHoW60fGwy3GonACPZMScmAaY7gQ6e/BtXcN5JhVZwpgo
+WCgHjul7wp+h61UQzP+PTyXL64kHi2C2GRy9RY9bUPzV78pYLp6Qy+u4Yhr0pdd
II8PocqN/mfYXndNxyEBZiQ3Gu2jcCIgWnytNc2k0iXH+A==
-----END CERTIFICATE-----