Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wmtjevJvDffmfjdxxZPxL5ibOlE.roa
File:                     wmtjevJvDffmfjdxxZPxL5ibOlE.roa (raw, json)
Hash identifier:          BtPYQU3MXoPGo1dsbWPLTptT19BVH2348v2MCwBmGxo=
Subject key identifier:   C2:6B:63:7A:F2:6F:0D:F7:E6:7E:37:71:C5:93:F1:2F:98:9B:3A:51
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08F3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wmtjevJvDffmfjdxxZPxL5ibOlE.roa
Signing time:             Tue 29 Sep 2020 09:52:38 +0000
ROA not before:           Tue 29 Sep 2020 09:52:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.146.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C26B637AF26F0DF7E67E3771C593F12F989B3A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:13:8d:56:7a:c3:54:e7:a4:2f:a0:8e:a7:
                    e1:61:fd:5f:5f:35:9b:8a:aa:79:b8:f8:b3:57:0e:
                    3f:2d:83:5c:e1:81:12:5f:9b:63:c4:e8:c0:b9:98:
                    92:fd:c4:67:b7:af:fe:0f:15:6d:d3:ad:6c:71:a2:
                    49:1c:38:9d:d7:7a:ea:2b:c2:53:b2:9b:35:8c:2e:
                    72:ef:64:88:bf:79:43:ab:ce:7d:1e:69:40:9b:89:
                    97:5c:04:9b:01:a4:02:5a:6b:c2:0a:d7:18:75:fc:
                    8b:b6:70:18:54:17:79:ed:df:08:e0:97:5a:ae:40:
                    af:69:95:55:a2:a7:25:a8:d9:4f:a8:0e:79:b1:79:
                    38:f0:c8:42:64:9f:e9:17:27:00:b9:92:5e:81:08:
                    4b:78:d2:43:d0:38:2f:6d:e1:12:f6:62:4b:ba:45:
                    9c:19:47:fb:dd:34:7c:34:e4:38:36:85:08:de:5e:
                    20:fc:da:9d:54:6f:0a:7d:6d:83:58:5d:5c:45:87:
                    e1:8c:a5:3d:15:2d:76:f7:ae:52:05:3a:ac:be:1b:
                    23:5c:bd:45:d0:10:da:ae:46:8d:65:86:86:bc:19:
                    84:9f:d4:bb:fb:dd:eb:ee:3a:9a:9f:0d:f7:83:e9:
                    70:6b:3a:18:6e:16:81:5d:0f:4c:0d:52:0d:57:f1:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6B:63:7A:F2:6F:0D:F7:E6:7E:37:71:C5:93:F1:2F:98:9B:3A:51
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wmtjevJvDffmfjdxxZPxL5ibOlE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:09:c3:e4:9e:cd:ca:0a:92:df:bf:4e:18:3c:df:a0:aa:24:
         6f:21:77:2f:8e:4f:95:e1:4b:e0:cf:79:a8:15:7a:96:07:7d:
         df:b3:b2:af:fd:c6:3d:2e:32:c0:17:c5:91:85:13:d7:0f:eb:
         80:a4:00:0c:1e:99:9c:ab:6e:67:c7:e0:43:31:84:5e:17:a7:
         ec:6b:ff:f3:fc:d7:bf:7b:d3:5c:ae:35:c7:90:11:2a:26:c7:
         85:94:5d:2f:8d:c5:c0:a7:61:47:32:c1:3c:0c:ef:46:83:a2:
         c6:a5:bd:0a:d2:e2:93:61:ad:dd:d1:d9:3a:b3:e6:d8:3e:3b:
         29:0d:a2:0b:fd:93:f4:37:ae:f2:ed:97:b4:29:0e:b0:ff:8f:
         a9:0f:a3:9e:c5:39:75:ab:f2:1d:70:71:db:67:8a:a3:6e:7d:
         54:be:f1:3e:29:b5:2b:d8:6d:06:d8:e5:ec:3c:b4:e3:e3:d9:
         97:66:f8:c6:69:80:4e:01:88:d8:9c:70:4a:5a:07:76:96:1b:
         ba:53:d7:29:f3:2b:26:3d:3c:40:6d:a4:dc:57:0f:89:9f:69:
         99:80:1d:f9:83:fb:6b:ae:e6:24:d8:78:38:34:b6:ff:e6:7a:
         db:fc:af:f1:16:ec:1f:c8:e3:f6:e3:42:9e:49:73:84:2f:81:
         89:a5:4a:db
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMyNkI2MzdBRjI2RjBE
RjdFNjdFMzc3MUM1OTNGMTJGOTg5QjNBNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLmxONVnrDVOekL6COp+Fh/V9fNZuKqnm4+LNXDj8tg1zhgRJf
m2PE6MC5mJL9xGe3r/4PFW3TrWxxokkcOJ3XeuorwlOymzWMLnLvZIi/eUOrzn0e
aUCbiZdcBJsBpAJaa8IK1xh1/Iu2cBhUF3nt3wjgl1quQK9plVWipyWo2U+oDnmx
eTjwyEJkn+kXJwC5kl6BCEt40kPQOC9t4RL2Yku6RZwZR/vdNHw05Dg2hQjeXiD8
2p1Ubwp9bYNYXVxFh+GMpT0VLXb3rlIFOqy+GyNcvUXQENquRo1lhoa8GYSf1Lv7
3evuOpqfDfeD6XBrOhhuFoFdD0wNUg1X8R8vAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwmtjevJvDffmfjdxxZPxL5ibOlEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvd210amV2SnZEZmZtZmpkeHhaUHhM
NWliT2xFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqSQDAN
BgkqhkiG9w0BAQsFAAOCAQEARQnD5J7NygqS379OGDzfoKokbyF3L45PleFL4M95
qBV6lgd937Oyr/3GPS4ywBfFkYUT1w/rgKQADB6ZnKtuZ8fgQzGEXhen7Gv/8/zX
v3vTXK41x5ARKibHhZRdL43FwKdhRzLBPAzvRoOixqW9CtLik2Gt3dHZOrPm2D47
KQ2iC/2T9Deu8u2XtCkOsP+PqQ+jnsU5davyHXBx22eKo259VL7xPim1K9htBtjl
7Dy04+PZl2b4xmmATgGI2JxwSloHdpYbulPXKfMrJj08QG2k3FcPiZ9pmYAd+YP7
a67mJNh4ODS2/+Z62/yv8RbsH8jj9uNCnklzhC+BiaVK2w==
-----END CERTIFICATE-----