Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iJdHGstkG5ihQpj68PvWNG8JIX8.roa
File:                     iJdHGstkG5ihQpj68PvWNG8JIX8.roa (raw, json)
Hash identifier:          TkeFH1NywSDgkiRNhlE/AowCzgTq9kOuHvhVNCiyMJ4=
Subject key identifier:   88:97:47:1A:CB:64:1B:98:A1:42:98:FA:F0:FB:D6:34:6F:09:21:7F
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C57
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iJdHGstkG5ihQpj68PvWNG8JIX8.roa
Signing time:             Sun 07 Feb 2021 11:42:58 +0000
ROA not before:           Sun 07 Feb 2021 11:42:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        112.104.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3159 (0xc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:42:58 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8897471ACB641B98A14298FAF0FBD6346F09217F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:f8:7e:b6:90:16:46:ef:1b:2f:4b:99:0c:
                    9e:96:3f:e9:23:45:94:9c:49:b4:17:83:a7:04:38:
                    f5:89:32:05:9d:b0:be:47:e2:70:ad:53:2b:8c:9f:
                    14:0b:91:8c:8d:42:a1:78:c9:3a:91:25:f4:6e:25:
                    b4:7b:a0:b7:c9:76:ef:ab:7e:d9:d1:f3:56:7a:48:
                    9e:43:30:4a:2d:7b:9d:17:79:96:25:e9:ac:50:74:
                    f2:b0:c1:43:f0:f2:de:0e:c1:59:ed:5f:74:09:21:
                    65:23:2e:a7:2f:91:92:81:37:8b:42:e2:75:8f:99:
                    4f:2d:9e:ff:46:ec:5f:c1:20:e7:60:7e:e6:c6:9f:
                    24:04:41:08:64:8b:ce:cf:c4:c8:e6:73:95:8f:03:
                    cb:2e:ff:ae:80:06:45:6f:66:7b:66:2e:d5:3c:c0:
                    dc:88:21:26:b2:77:09:e1:82:64:19:f0:b3:9c:8c:
                    be:1d:86:11:14:bd:ff:c7:54:7e:d6:06:1e:92:9e:
                    c0:6a:ac:8d:2d:de:b0:8d:1e:f9:14:91:86:7a:6c:
                    db:8c:c6:27:47:e0:17:ec:ab:1d:56:fc:2e:6c:40:
                    ab:1d:fa:d6:b4:c8:94:db:5b:80:6e:55:20:b3:a1:
                    34:f7:88:b0:5d:8b:6d:b9:31:e4:ea:e5:9a:64:1c:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:97:47:1A:CB:64:1B:98:A1:42:98:FA:F0:FB:D6:34:6F:09:21:7F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iJdHGstkG5ihQpj68PvWNG8JIX8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:84:07:cd:be:20:14:b6:47:b8:e9:e4:1e:b9:27:da:0f:
         db:5c:01:5e:ad:83:cf:82:aa:7f:25:07:85:11:82:b2:2b:c4:
         e0:dd:4d:11:38:f3:9d:a3:7a:d0:11:58:69:2b:be:8b:95:9e:
         1d:f2:9f:9d:c7:aa:65:e4:7c:de:c5:b1:62:05:5f:e6:d2:68:
         f6:fe:58:32:49:9a:84:eb:f6:b2:67:f3:3b:e9:2d:22:64:a4:
         0f:60:b8:23:41:e8:31:6a:03:a9:5f:09:eb:0b:48:9b:04:af:
         de:5e:3f:00:72:06:57:3a:ec:ec:6a:48:6c:14:b2:47:ad:4b:
         27:ea:7a:82:9b:da:bf:e8:9e:c2:69:1d:ae:15:68:a9:f7:c3:
         5e:7b:35:03:74:18:32:f2:d6:41:73:15:9e:6e:d8:83:0d:8a:
         c0:cc:55:59:68:39:63:9b:76:41:7a:37:a4:c0:04:6c:71:a1:
         ea:42:a0:83:8a:b4:d0:1e:fc:c4:07:18:1a:30:d6:fb:4b:b8:
         2f:96:e1:32:b1:a2:06:75:a2:62:d4:03:22:3c:34:fb:29:01:
         b6:11:61:85:17:b9:19:c7:32:86:32:04:b3:38:d1:00:32:f7:
         1f:04:dc:61:86:a9:c3:11:f3:22:ec:eb:be:0a:5d:81:23:78:
         6f:87:83:39
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQyNThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg4OTc0NzFBQ0I2NDFC
OThBMTQyOThGQUYwRkJENjM0NkYwOTIxN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiZvh+tpAWRu8bL0uZDJ6WP+kjRZScSbQXg6cEOPWJMgWdsL5H
4nCtUyuMnxQLkYyNQqF4yTqRJfRuJbR7oLfJdu+rftnR81Z6SJ5DMEote50XeZYl
6axQdPKwwUPw8t4OwVntX3QJIWUjLqcvkZKBN4tC4nWPmU8tnv9G7F/BIOdgfubG
nyQEQQhki87PxMjmc5WPA8su/66ABkVvZntmLtU8wNyIISaydwnhgmQZ8LOcjL4d
hhEUvf/HVH7WBh6SnsBqrI0t3rCNHvkUkYZ6bNuMxidH4Bfsqx1W/C5sQKsd+ta0
yJTbW4BuVSCzoTT3iLBdi225MeTq5ZpkHKqJAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUiJdHGstkG5ihQpj68PvWNG8JIX8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaUpkSEdzdGtHNWloUXBqNjhQdldO
RzhKSVg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBoMA0G
CSqGSIb3DQEBCwUAA4IBAQCTf4QHzb4gFLZHuOnkHrkn2g/bXAFerYPPgqp/JQeF
EYKyK8Tg3U0ROPOdo3rQEVhpK76LlZ4d8p+dx6pl5HzexbFiBV/m0mj2/lgySZqE
6/ayZ/M76S0iZKQPYLgjQegxagOpXwnrC0ibBK/eXj8AcgZXOuzsakhsFLJHrUsn
6nqCm9q/6J7CaR2uFWip98NeezUDdBgy8tZBcxWebtiDDYrAzFVZaDljm3ZBejek
wARscaHqQqCDirTQHvzEBxgaMNb7S7gvluEysaIGdaJi1AMiPDT7KQG2EWGFF7kZ
xzKGMgSzONEAMvcfBNxhhqnDEfMi7Ou+Cl2BI3hvh4M5
-----END CERTIFICATE-----