Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YDQSI70G0YTrI-QUnhukwJwwCBc.roa
File:                     YDQSI70G0YTrI-QUnhukwJwwCBc.roa (raw, json)
Hash identifier:          hglhMU0DWq3FLLWNmG62I5N9esN+uGwcsJQcIapR4Lo=
Subject key identifier:   60:34:12:23:BD:06:D1:84:EB:23:E4:14:9E:1B:A4:C0:9C:30:08:17
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0869
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YDQSI70G0YTrI-QUnhukwJwwCBc.roa
Signing time:             Tue 29 Sep 2020 09:52:00 +0000
ROA not before:           Tue 29 Sep 2020 09:52:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        122.147.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=60341223BD06D184EB23E4149E1BA4C09C300817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:79:8d:b3:24:61:b9:9b:a2:b5:d4:cd:18:
                    89:b3:19:27:ea:dc:14:1a:40:2c:98:41:52:71:8e:
                    f9:22:aa:1c:77:b6:b0:15:13:ad:89:c3:a3:72:83:
                    dc:93:25:00:aa:4f:9f:2d:c5:64:b0:ad:f5:70:4c:
                    17:c1:dc:2b:df:91:d7:ea:14:f6:f5:f9:be:c6:5e:
                    1f:81:dd:31:c4:27:4e:14:0b:29:35:4f:3e:89:f3:
                    e7:29:35:98:0c:d3:dd:ec:15:4b:ed:59:3c:ed:c2:
                    c4:83:e5:a9:70:b3:6b:10:37:ee:77:53:a5:c8:32:
                    df:79:d3:6a:74:8b:4d:21:2a:f1:9e:0f:da:6e:9c:
                    82:30:07:10:38:1e:ed:0b:35:54:9f:60:92:95:af:
                    81:86:7a:7e:8e:38:9c:04:bb:6f:29:3b:4c:9e:1e:
                    f5:79:a0:8d:f5:36:06:6f:ae:c8:2f:ca:8a:06:d6:
                    a8:1a:94:48:51:ee:a2:93:77:8d:bc:3c:64:7c:19:
                    b1:83:ec:7f:33:f9:bd:37:73:29:2c:aa:ae:ee:f8:
                    6b:08:a0:3e:65:1b:e7:77:1f:1f:11:fa:d0:ac:a3:
                    58:0a:ef:d4:2e:cc:26:56:d1:c8:e6:df:f7:5b:d8:
                    4c:d8:5b:a9:93:cc:d2:ed:95:1b:c4:96:e9:18:35:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:12:23:BD:06:D1:84:EB:23:E4:14:9E:1B:A4:C0:9C:30:08:17
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YDQSI70G0YTrI-QUnhukwJwwCBc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:af:41:a4:6f:a2:8d:2b:ee:13:d6:a2:67:04:92:38:f3:
         71:17:1e:0e:e0:25:ee:c3:18:1b:c2:17:73:19:30:15:e6:09:
         ee:ba:a9:8a:bb:26:f9:25:2b:81:eb:76:62:9b:f7:be:54:c7:
         17:c9:c3:9f:19:7a:34:03:89:5b:a5:e4:ba:69:fc:09:53:5f:
         bd:3e:40:3d:4c:56:4b:2e:b3:e1:f9:a2:9f:19:26:24:b0:e6:
         28:a1:83:04:86:3d:a3:7a:51:36:97:36:5a:be:67:27:3a:a2:
         67:2e:6f:7c:c1:64:0d:9b:9d:74:3d:4f:82:fc:b9:a5:74:c8:
         43:6a:ea:62:08:ee:13:54:c8:9e:51:26:53:5a:1c:07:5f:be:
         38:64:1a:34:a1:df:2a:93:e5:4a:9f:8d:5b:04:f8:f3:e0:4d:
         ff:b2:d7:bc:a4:e7:c9:fc:c3:b2:c1:10:43:d1:c7:8f:f3:c6:
         0e:f7:91:1e:0d:a5:ea:35:48:6c:21:77:6a:7f:d4:85:e6:b0:
         49:2a:8b:66:ed:3f:a1:ed:c5:e6:bb:06:3b:71:48:98:e5:c7:
         48:04:28:5c:fd:fc:3f:57:71:61:8c:b6:f5:bb:4f:76:b1:e9:
         2d:d8:98:5f:bd:54:b1:d8:d9:a8:0e:d5:31:6b:df:8c:5a:30:
         a2:f8:6d:aa
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYwMzQxMjIzQkQwNkQx
ODRFQjIzRTQxNDlFMUJBNEMwOUMzMDA4MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMIHmNsyRhuZuitdTNGImzGSfq3BQaQCyYQVJxjvkiqhx3trAV
E62Jw6Nyg9yTJQCqT58txWSwrfVwTBfB3CvfkdfqFPb1+b7GXh+B3THEJ04UCyk1
Tz6J8+cpNZgM093sFUvtWTztwsSD5alws2sQN+53U6XIMt9502p0i00hKvGeD9pu
nIIwBxA4Hu0LNVSfYJKVr4GGen6OOJwEu28pO0yeHvV5oI31NgZvrsgvyooG1qga
lEhR7qKTd428PGR8GbGD7H8z+b03cyksqq7u+GsIoD5lG+d3Hx8R+tCso1gK79Qu
zCZW0cjm3/db2EzYW6mTzNLtlRvElukYNQBxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUYDQSI70G0YTrI+QUnhukwJwwCBcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWURRU0k3MEcwWVRySS1RVW5odWt3
Snd3Q0JjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3qTgDAN
BgkqhkiG9w0BAQsFAAOCAQEACJ6vQaRvoo0r7hPWomcEkjjzcRceDuAl7sMYG8IX
cxkwFeYJ7rqpirsm+SUrget2Ypv3vlTHF8nDnxl6NAOJW6Xkumn8CVNfvT5APUxW
Sy6z4fminxkmJLDmKKGDBIY9o3pRNpc2Wr5nJzqiZy5vfMFkDZuddD1Pgvy5pXTI
Q2rqYgjuE1TInlEmU1ocB1++OGQaNKHfKpPlSp+NWwT48+BN/7LXvKTnyfzDssEQ
Q9HHj/PGDveRHg2l6jVIbCF3an/UheawSSqLZu0/oe3F5rsGO3FImOXHSAQoXP38
P1dxYYy29btPdrHpLdiYX71UsdjZqA7VMWvfjFowovhtqg==
-----END CERTIFICATE-----