Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gP08BhvvYBmb_VOUy8fGByIiuNg.roa
File:                     gP08BhvvYBmb_VOUy8fGByIiuNg.roa (raw, json)
Hash identifier:          jNWTuj3hqAQ9Tc8U3nZhE4v0r88kV4ngeitREQ62Gb4=
Subject key identifier:   80:FD:3C:06:1B:EF:60:19:9B:FD:53:94:CB:C7:C6:07:22:22:B8:D8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CB1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gP08BhvvYBmb_VOUy8fGByIiuNg.roa
Signing time:             Sun 07 Feb 2021 11:44:37 +0000
ROA not before:           Sun 07 Feb 2021 11:44:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        112.105.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:44:37 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=80FD3C061BEF60199BFD5394CBC7C6072222B8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a0:33:c6:54:03:13:6e:d8:7a:ae:6d:a8:5c:
                    66:4a:2d:99:d1:a8:91:4c:02:b7:a7:13:b5:75:d3:
                    36:ac:13:6c:35:3a:1c:11:f2:5f:14:e1:67:26:d9:
                    01:cb:c3:10:24:ff:d2:a7:4b:51:d5:f3:5f:f9:66:
                    eb:49:e9:10:a1:24:c4:dd:71:1f:97:60:14:5b:2e:
                    35:9b:a9:f4:83:48:db:4c:61:bf:46:dc:69:3f:4f:
                    23:00:2d:f8:fb:b1:b9:45:1a:2f:45:02:d7:2f:00:
                    bc:48:cb:4b:f6:92:a7:f3:c8:c1:68:0b:6b:6e:b1:
                    50:56:ad:af:11:cb:b4:d3:98:75:1f:6c:04:14:55:
                    ff:04:7e:fa:b5:70:f7:66:b3:41:16:9e:d6:e1:a4:
                    69:a9:de:12:fe:08:a2:6d:ca:01:40:fd:d2:ff:65:
                    c9:66:35:5d:d1:b6:f5:66:43:e9:e1:51:ae:1b:44:
                    5f:ca:de:13:75:89:b9:31:23:7e:9d:30:a9:fc:ba:
                    0a:dc:2a:3d:92:6a:5e:4f:37:6f:08:9d:3a:65:11:
                    a3:ef:e5:e3:a8:dc:54:2d:99:34:03:40:eb:d6:66:
                    f4:ec:2e:99:b8:24:e4:66:87:a8:e3:c8:0a:91:71:
                    48:a2:df:2b:47:8a:1b:58:01:3e:f5:2e:41:93:d1:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:3C:06:1B:EF:60:19:9B:FD:53:94:CB:C7:C6:07:22:22:B8:D8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gP08BhvvYBmb_VOUy8fGByIiuNg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:b7:21:70:6f:e7:5b:3b:f9:fe:e7:bd:c2:3f:cc:fe:39:
         1e:86:45:05:aa:8f:1c:bb:0f:1d:8e:bf:05:30:49:ee:51:7d:
         5a:53:b3:a9:03:ef:92:a0:48:65:a4:73:e8:84:49:85:2a:cb:
         de:94:6e:7f:ee:13:02:42:92:ee:f4:f5:9a:85:f4:3d:5b:9a:
         9b:05:e2:8b:04:90:02:be:1e:de:57:cd:8e:ed:7a:ec:d6:9a:
         f7:3c:e8:d4:92:31:72:19:9e:30:7c:c7:48:37:52:9c:13:ea:
         1a:4e:da:c6:1d:0a:6b:2d:10:62:7c:9a:be:e3:6d:90:29:a6:
         74:0d:e3:5a:73:28:91:d5:00:ed:34:f6:70:07:54:03:25:04:
         3b:f0:1d:8d:c2:b9:e8:2d:65:ad:bf:87:06:e8:7a:bd:06:53:
         20:a4:85:20:de:a0:81:92:c5:7c:50:ea:a0:54:42:63:fd:22:
         8b:75:e3:f7:2d:62:22:b5:91:f0:58:56:42:96:61:3e:34:51:
         39:4c:bf:61:a8:35:ef:b0:42:41:e2:b1:8c:65:c9:81:66:0c:
         2d:31:ed:b0:f9:e0:36:d4:76:c4:b1:f7:ad:91:0c:4c:a2:21:
         1c:0c:16:c0:54:18:55:f0:fb:0c:d8:e5:5e:6b:cf:09:dd:83:
         31:f3:b9:3f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ0MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgwRkQzQzA2MUJFRjYw
MTk5QkZENTM5NENCQzdDNjA3MjIyMkI4RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDToDPGVAMTbth6rm2oXGZKLZnRqJFMArenE7V10zasE2w1OhwR
8l8U4Wcm2QHLwxAk/9KnS1HV81/5ZutJ6RChJMTdcR+XYBRbLjWbqfSDSNtMYb9G
3Gk/TyMALfj7sblFGi9FAtcvALxIy0v2kqfzyMFoC2tusVBWra8Ry7TTmHUfbAQU
Vf8Efvq1cPdms0EWntbhpGmp3hL+CKJtygFA/dL/ZclmNV3RtvVmQ+nhUa4bRF/K
3hN1ibkxI36dMKn8ugrcKj2Sal5PN28InTplEaPv5eOo3FQtmTQDQOvWZvTsLpm4
JORmh6jjyAqRcUii3ytHihtYAT71LkGT0WeVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUgP08BhvvYBmb/VOUy8fGByIiuNgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZ1AwOEJodnZZQm1iX1ZPVXk4ZkdC
eUlpdU5nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXBpADAN
BgkqhkiG9w0BAQsFAAOCAQEADRK3IXBv51s7+f7nvcI/zP45HoZFBaqPHLsPHY6/
BTBJ7lF9WlOzqQPvkqBIZaRz6IRJhSrL3pRuf+4TAkKS7vT1moX0PVuamwXiiwSQ
Ar4e3lfNju167Naa9zzo1JIxchmeMHzHSDdSnBPqGk7axh0Kay0QYnyavuNtkCmm
dA3jWnMokdUA7TT2cAdUAyUEO/AdjcK56C1lrb+HBuh6vQZTIKSFIN6ggZLFfFDq
oFRCY/0ii3Xj9y1iIrWR8FhWQpZhPjRROUy/Yag177BCQeKxjGXJgWYMLTHtsPng
NtR2xLH3rZEMTKIhHAwWwFQYVfD7DNjlXmvPCd2DMfO5Pw==
-----END CERTIFICATE-----