Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wtd1AHvKmskW-1xMcwyhWh9pSp8.roa
File:                     Wtd1AHvKmskW-1xMcwyhWh9pSp8.roa (raw, json)
Hash identifier:          o/f7zbEqEU3Qn//3HLR2MHQ/bCsCSxUAGGfb9/1hF3E=
Subject key identifier:   5A:D7:75:00:7B:CA:9A:C9:16:FB:5C:4C:73:0C:A1:5A:1F:69:4A:9F
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0BA8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wtd1AHvKmskW-1xMcwyhWh9pSp8.roa
Signing time:             Sun 07 Feb 2021 06:27:40 +0000
ROA not before:           Sun 07 Feb 2021 06:27:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        175.180.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 06:27:40 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5AD775007BCA9AC916FB5C4C730CA15A1F694A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:a3:8f:d6:fb:90:40:16:49:17:a0:f8:65:
                    62:3c:57:32:51:7f:e8:a7:a6:97:1d:b1:82:fe:d8:
                    c4:cf:c7:3d:47:30:7d:f2:c6:53:bf:62:c8:8d:d1:
                    34:6b:94:f1:c3:8b:68:42:a1:1c:ba:97:dd:7f:24:
                    21:6d:e3:dd:75:94:59:1f:ef:32:55:4f:9f:86:4a:
                    a7:d5:a4:6d:d3:3b:02:e2:48:61:11:8a:0d:98:de:
                    23:6e:52:2f:0d:f2:71:e0:65:f9:6d:02:9f:c0:63:
                    68:e1:73:a0:26:9d:02:0c:33:c8:53:70:2c:93:38:
                    f2:53:06:03:f3:7f:3c:94:d6:41:1a:70:c9:b9:17:
                    b6:64:2d:28:e1:e8:c2:8a:63:f2:cf:1e:7e:c8:96:
                    06:ae:86:53:5f:69:92:07:2a:20:bb:77:f0:fe:4b:
                    18:ef:dc:84:a2:11:83:83:75:0d:e4:ff:65:68:49:
                    f4:b1:5c:e3:54:73:46:f2:ae:2c:64:98:d9:5a:b6:
                    db:0e:64:16:4f:d1:e6:a3:1d:72:de:0f:8d:64:5e:
                    7d:9c:6b:43:f6:4b:25:e7:7c:38:ac:e6:d5:c8:6b:
                    6a:27:b9:af:d9:ee:61:a1:c6:ef:9d:9d:97:6a:ca:
                    70:2a:a5:da:41:28:9c:f4:7d:e3:1f:2c:f5:74:b3:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:75:00:7B:CA:9A:C9:16:FB:5C:4C:73:0C:A1:5A:1F:69:4A:9F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wtd1AHvKmskW-1xMcwyhWh9pSp8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:97:9a:d3:9a:01:c5:80:4b:28:f3:f6:4a:0d:f1:23:58:
         e5:f4:e3:b9:48:e5:dd:9a:f3:33:20:62:b4:14:57:2e:7d:9e:
         db:71:c4:d5:a4:50:b7:15:5d:72:c9:81:f9:45:7a:7e:48:20:
         5d:61:11:91:39:8a:0b:b4:57:03:5f:19:da:c3:88:a4:56:e4:
         33:03:82:06:8b:e6:31:ba:fd:85:40:4a:01:53:13:11:f5:d2:
         b3:06:ce:bd:a3:b6:1b:56:3d:df:59:7e:8d:13:c4:17:46:44:
         04:c6:10:66:70:83:ed:71:c4:e1:9c:0a:cf:26:81:64:64:4e:
         fe:51:97:c7:44:2b:87:93:8d:46:a5:3a:a1:69:10:66:6c:44:
         63:8f:24:0b:b4:f2:10:27:3a:e8:64:d8:36:68:21:42:35:35:
         b7:6d:2b:5a:26:1c:45:d0:ac:0a:ad:a6:61:01:90:02:8f:e2:
         a2:13:8b:b6:a5:32:53:15:3a:92:ca:1a:e3:0b:70:01:b6:3f:
         33:7f:00:68:b2:32:9e:0f:a9:4e:1e:9d:17:3e:df:8d:d7:98:
         99:4f:df:b3:93:85:08:8f:87:de:5f:64:89:7d:07:c8:94:ca:
         ac:ec:c1:6f:bb:d3:a4:bc:5c:0f:e4:bd:2f:16:d7:0b:22:af:
         2d:e5:8c:2b
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NjI3NDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVBRDc3NTAwN0JDQTlB
QzkxNkZCNUM0QzczMENBMTVBMUY2OTRBOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvuKOP1vuQQBZJF6D4ZWI8VzJRf+inppcdsYL+2MTPxz1HMH3y
xlO/YsiN0TRrlPHDi2hCoRy6l91/JCFt4911lFkf7zJVT5+GSqfVpG3TOwLiSGER
ig2Y3iNuUi8N8nHgZfltAp/AY2jhc6AmnQIMM8hTcCyTOPJTBgPzfzyU1kEacMm5
F7ZkLSjh6MKKY/LPHn7IlgauhlNfaZIHKiC7d/D+Sxjv3ISiEYODdQ3k/2VoSfSx
XONUc0byrixkmNlattsOZBZP0eajHXLeD41kXn2ca0P2SyXnfDis5tXIa2onua/Z
7mGhxu+dnZdqynAqpdpBKJz0feMfLPV0s3kBAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUWtd1AHvKmskW+1xMcwyhWh9pSp8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3RkMUFIdkttc2tXLTF4TWN3eWhX
aDlwU3A4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAq+0MA0G
CSqGSIb3DQEBCwUAA4IBAQALaZea05oBxYBLKPP2Sg3xI1jl9OO5SOXdmvMzIGK0
FFcufZ7bccTVpFC3FV1yyYH5RXp+SCBdYRGROYoLtFcDXxnaw4ikVuQzA4IGi+Yx
uv2FQEoBUxMR9dKzBs69o7YbVj3fWX6NE8QXRkQExhBmcIPtccThnArPJoFkZE7+
UZfHRCuHk41GpTqhaRBmbERjjyQLtPIQJzroZNg2aCFCNTW3bStaJhxF0KwKraZh
AZACj+KiE4u2pTJTFTqSyhrjC3ABtj8zfwBosjKeD6lOHp0XPt+N15iZT9+zk4UI
j4feX2SJfQfIlMqs7MFvu9OkvFwP5L0vFtcLIq8t5Ywr
-----END CERTIFICATE-----