Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/j9GZdYBjnqxO5d804MoVGoNZ4Ns.roa
File:                     j9GZdYBjnqxO5d804MoVGoNZ4Ns.roa (raw, json)
Hash identifier:          iYow+EwSRUOlCE5vjT40btODlqDR6i/4kutu4nIM9y8=
Subject key identifier:   8F:D1:99:75:80:63:9E:AC:4E:E5:DF:34:E0:CA:15:1A:83:59:E0:DB
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       090C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/j9GZdYBjnqxO5d804MoVGoNZ4Ns.roa
Signing time:             Tue 29 Sep 2020 09:52:44 +0000
ROA not before:           Tue 29 Sep 2020 09:52:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        106.105.0.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8FD1997580639EAC4EE5DF34E0CA151A8359E0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:df:2b:0b:75:6a:0a:5c:0b:9b:c5:96:07:
                    55:ea:bc:38:8d:bf:fd:e3:89:d1:ea:4a:b0:ae:c2:
                    30:3d:2a:64:78:ea:34:07:55:eb:ba:4b:63:38:01:
                    d6:a6:09:b0:2e:34:3e:e1:16:b9:c5:bc:7b:12:96:
                    6b:0e:b7:ef:b4:8f:6b:50:14:c5:e5:77:23:5b:b3:
                    3d:ea:d9:a8:30:c5:40:f4:69:60:90:ff:77:d1:1c:
                    6c:42:d9:7b:f0:e4:cd:5b:bf:83:96:5e:38:11:dd:
                    a1:07:9b:d4:6a:4b:39:98:42:70:cb:92:8e:79:57:
                    a5:2e:57:d9:12:6b:e6:39:8a:5c:d8:42:71:0f:ff:
                    62:ea:c5:47:fb:1a:55:ea:69:8c:50:bb:25:2c:43:
                    a4:5d:c8:9b:3b:5e:d5:67:51:0b:d9:d1:59:fb:99:
                    89:20:2a:82:10:c3:07:6a:e4:cf:b3:a8:e3:bb:48:
                    9f:70:a3:ce:d7:23:ee:ec:31:49:5a:a2:6e:74:4d:
                    ff:3c:17:9d:25:35:3d:1e:02:ae:d9:93:ae:d8:74:
                    50:04:91:4c:ad:20:ef:9c:2b:c2:08:35:0e:23:37:
                    8c:e1:cc:6d:de:f5:8b:e3:9d:2d:b7:0c:2b:46:7a:
                    f6:bd:2e:41:88:8b:bf:3f:d1:1e:5e:84:e7:04:eb:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:99:75:80:63:9E:AC:4E:E5:DF:34:E0:CA:15:1A:83:59:E0:DB
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/j9GZdYBjnqxO5d804MoVGoNZ4Ns.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:f9:e1:c1:d2:d8:e1:fb:f0:1a:f8:c1:c6:95:91:db:0a:
         b9:5b:2a:98:47:4b:39:6f:61:98:f6:71:16:80:f7:c6:e8:83:
         35:4d:01:83:d2:ac:44:09:78:7d:3d:1a:b9:f5:76:57:4b:d2:
         08:dd:f1:19:08:24:eb:ff:a9:15:25:b3:98:99:34:e3:b3:87:
         09:50:8c:95:50:6f:ca:90:04:20:78:31:c4:44:9d:f5:96:51:
         b0:27:1d:c8:2f:87:fe:9c:71:4e:02:41:57:2c:63:b0:26:94:
         60:28:c0:1f:9a:37:cb:c4:f8:03:0c:01:41:85:36:52:4e:cf:
         20:50:2f:86:8b:76:cd:86:cf:6c:ef:bd:c9:1f:5d:cb:a4:02:
         c7:6b:b6:c1:b8:a1:d0:b0:4b:e2:10:b8:b0:bd:2f:66:9e:8c:
         f3:9b:63:9f:b0:6e:50:e0:1c:3b:03:4d:85:62:fb:6d:33:aa:
         93:65:fd:d2:e3:ec:74:c2:c9:7d:c2:b9:0f:37:cd:7d:0e:9b:
         f5:7c:d1:79:f8:7f:05:af:42:80:49:71:b1:06:ff:50:6d:60:
         0d:9a:7b:37:1b:87:e3:a8:07:57:c1:02:f6:65:10:d6:64:f6:
         e1:e9:30:3b:94:c3:9f:a2:88:3b:3a:14:86:7b:99:6e:c3:ef:
         ef:18:70:e0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyNDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhGRDE5OTc1ODA2MzlF
QUM0RUU1REYzNEUwQ0ExNTFBODM1OUUwREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ3t8rC3VqClwLm8WWB1XqvDiNv/3jidHqSrCuwjA9KmR46jQH
Veu6S2M4AdamCbAuND7hFrnFvHsSlmsOt++0j2tQFMXldyNbsz3q2agwxUD0aWCQ
/3fRHGxC2Xvw5M1bv4OWXjgR3aEHm9RqSzmYQnDLko55V6UuV9kSa+Y5ilzYQnEP
/2LqxUf7GlXqaYxQuyUsQ6RdyJs7XtVnUQvZ0Vn7mYkgKoIQwwdq5M+zqOO7SJ9w
o87XI+7sMUlaom50Tf88F50lNT0eAq7Zk67YdFAEkUytIO+cK8IINQ4jN4zhzG3e
9YvjnS23DCtGeva9LkGIi78/0R5ehOcE663vAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUj9GZdYBjnqxO5d804MoVGoNZ4NswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvajlHWmRZQmpucXhPNWQ4MDRNb1ZH
b05aNE5zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppADAN
BgkqhkiG9w0BAQsFAAOCAQEAVqX54cHS2OH78Br4wcaVkdsKuVsqmEdLOW9hmPZx
FoD3xuiDNU0Bg9KsRAl4fT0aufV2V0vSCN3xGQgk6/+pFSWzmJk047OHCVCMlVBv
ypAEIHgxxESd9ZZRsCcdyC+H/pxxTgJBVyxjsCaUYCjAH5o3y8T4AwwBQYU2Uk7P
IFAvhot2zYbPbO+9yR9dy6QCx2u2wbih0LBL4hC4sL0vZp6M85tjn7BuUOAcOwNN
hWL7bTOqk2X90uPsdMLJfcK5DzfNfQ6b9XzRefh/Ba9CgElxsQb/UG1gDZp7NxuH
46gHV8EC9mUQ1mT24ekwO5TDn6KIOzoUhnuZbsPv7xhw4A==
-----END CERTIFICATE-----