Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/re-prAMQgDMNgPLgHFVLBeWifwk.roa
File:                     re-prAMQgDMNgPLgHFVLBeWifwk.roa (raw, json)
Hash identifier:          rWFUhAwOKRMx+topG+ZYWWhbnT31D3faZop3tixE8z0=
Subject key identifier:   AD:EF:A9:AC:03:10:80:33:0D:80:F2:E0:1C:55:4B:05:E5:A2:7F:09
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08FC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/re-prAMQgDMNgPLgHFVLBeWifwk.roa
Signing time:             Tue 29 Sep 2020 09:52:40 +0000
ROA not before:           Tue 29 Sep 2020 09:52:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        122.147.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ADEFA9AC031080330D80F2E01C554B05E5A27F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:43:d9:5c:28:96:75:ed:d8:2e:9c:36:88:
                    6f:a5:c6:1f:db:c8:ab:9d:1a:b2:10:81:f1:81:e3:
                    a5:41:cd:bb:4f:d1:13:b9:93:4b:67:08:06:81:0d:
                    c9:a5:8a:59:1f:f8:77:ae:dc:12:83:b1:84:99:f2:
                    36:8b:61:6d:43:89:9c:6e:14:41:ec:28:ee:6f:d9:
                    df:f4:a9:66:cb:df:55:cb:4c:90:16:cb:e7:c3:5b:
                    3b:de:3c:53:b5:ff:b9:e0:49:d2:79:48:2f:2b:6a:
                    65:89:da:80:fb:93:d0:11:c7:f3:ea:f0:dc:bb:e9:
                    ec:4d:16:63:0f:b7:be:09:b2:d6:7e:35:1c:aa:0f:
                    b7:ce:29:13:52:db:e9:df:ea:f2:5f:3b:a1:71:60:
                    49:81:7e:72:04:9e:d8:93:6f:8b:e2:76:08:dc:da:
                    f8:d4:b1:6c:fc:7f:d1:1c:47:cd:66:8b:46:8c:37:
                    c0:38:27:44:f3:26:2c:fe:d0:c4:57:ef:7b:19:28:
                    f3:72:4e:0c:e1:32:27:ca:7e:c6:3f:7f:58:81:95:
                    2a:ab:91:e8:d9:fe:3b:95:30:94:b6:a1:99:68:da:
                    73:38:96:d6:8d:7c:79:7e:8d:8e:8c:e8:a1:81:66:
                    4e:27:ee:db:4e:62:aa:88:48:0d:8d:24:7a:58:c5:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EF:A9:AC:03:10:80:33:0D:80:F2:E0:1C:55:4B:05:E5:A2:7F:09
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/re-prAMQgDMNgPLgHFVLBeWifwk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:f1:70:57:16:a1:5d:b6:5c:da:93:f3:4c:cb:08:6c:42:
         82:36:9c:f1:08:75:66:d4:80:ed:4a:d8:47:71:96:b8:ae:ea:
         13:90:de:04:fa:68:b4:d9:07:e8:e0:c0:e8:a7:6d:cb:16:85:
         92:55:5d:0b:42:72:4d:fc:46:0f:98:08:4e:7a:b6:8e:a9:4b:
         41:b7:af:58:20:0b:0b:07:04:b0:b0:b3:85:8a:96:b7:d7:54:
         a1:5d:5b:e7:3e:66:47:32:d3:5d:dc:26:71:03:c1:fe:90:3f:
         1d:6d:aa:04:ce:a1:e4:30:7a:bc:e8:e8:74:fe:d0:a8:62:90:
         a1:9f:c4:be:da:70:5d:6f:53:11:5c:86:46:4a:03:c4:0a:20:
         f5:d9:7f:40:b1:20:66:82:cf:c4:f4:ea:8e:6d:ca:bd:ec:04:
         d2:c5:c8:f5:d3:bd:16:d1:7e:d4:e2:32:4c:db:92:37:10:5f:
         86:63:31:c2:2c:72:b1:15:43:a8:a9:f5:86:62:37:2b:18:75:
         dc:f3:04:6d:16:ea:0b:79:f2:df:10:c2:f3:5b:7a:8e:4d:c0:
         7c:65:49:99:f6:ce:40:97:a4:14:84:0f:4d:fa:44:0a:82:bc:
         94:49:2f:dd:50:43:2b:95:0c:c0:34:18:5f:1b:bb:eb:9c:be:
         dc:88:58:01
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyNDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFERUZBOUFDMDMxMDgw
MzMwRDgwRjJFMDFDNTU0QjA1RTVBMjdGMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcWEPZXCiWde3YLpw2iG+lxh/byKudGrIQgfGB46VBzbtP0RO5
k0tnCAaBDcmlilkf+Heu3BKDsYSZ8jaLYW1DiZxuFEHsKO5v2d/0qWbL31XLTJAW
y+fDWzvePFO1/7ngSdJ5SC8ramWJ2oD7k9ARx/Pq8Ny76exNFmMPt74JstZ+NRyq
D7fOKRNS2+nf6vJfO6FxYEmBfnIEntiTb4vidgjc2vjUsWz8f9EcR81mi0aMN8A4
J0TzJiz+0MRX73sZKPNyTgzhMifKfsY/f1iBlSqrkejZ/juVMJS2oZlo2nM4ltaN
fHl+jY6M6KGBZk4n7ttOYqqISA2NJHpYxeILAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUre+prAMQgDMNgPLgHFVLBeWifwkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcmUtcHJBTVFnRE1OZ1BMZ0hGVkxC
ZVdpZndrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qTEDAN
BgkqhkiG9w0BAQsFAAOCAQEArLPxcFcWoV22XNqT80zLCGxCgjac8Qh1ZtSA7UrY
R3GWuK7qE5DeBPpotNkH6ODA6KdtyxaFklVdC0JyTfxGD5gITnq2jqlLQbevWCAL
CwcEsLCzhYqWt9dUoV1b5z5mRzLTXdwmcQPB/pA/HW2qBM6h5DB6vOjodP7QqGKQ
oZ/EvtpwXW9TEVyGRkoDxAog9dl/QLEgZoLPxPTqjm3KvewE0sXI9dO9FtF+1OIy
TNuSNxBfhmMxwixysRVDqKn1hmI3Kxh13PMEbRbqC3ny3xDC81t6jk3AfGVJmfbO
QJekFIQPTfpECoK8lEkv3VBDK5UMwDQYXxu765y+3IhYAQ==
-----END CERTIFICATE-----