Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/3qy8fl1fseYMXwyYuOxzNlYXlPk.roa
File:                     3qy8fl1fseYMXwyYuOxzNlYXlPk.roa (raw, json)
Hash identifier:          YjHrWS6CujbPGGdWwF6u1lWxdCpUIAqCSyL7zhh5GXQ=
Subject key identifier:   DE:AC:BC:7E:5D:5F:B1:E6:0C:5F:0C:98:B8:EC:73:36:56:17:94:F9
Certificate issuer:       /CN=1D4D78F56750C7598953366D459A12B658B7FF38
Certificate serial:       E6
Authority key identifier: 1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/3qy8fl1fseYMXwyYuOxzNlYXlPk.roa
Signing time:             Thu 15 Sep 2022 02:48:53 +0000
ROA not before:           Thu 15 Sep 2022 02:48:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131668
IP address blocks:        2406:bfc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4D78F56750C7598953366D459A12B658B7FF38
        Validity
            Not Before: Sep 15 02:48:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DEACBC7E5D5FB1E60C5F0C98B8EC7336561794F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f5:c8:78:2e:0a:6a:3f:7e:53:1a:f6:c5:a1:
                    a4:74:ba:b7:78:03:1e:6f:6c:32:8d:e1:11:3e:4e:
                    bf:f6:5a:a0:fa:e2:c4:94:47:f0:88:9f:7b:5b:39:
                    72:0f:a7:ab:48:d9:d7:d5:bd:2d:9b:97:c1:d8:8f:
                    83:c2:e5:b4:3e:d0:3f:02:e4:f6:11:da:4a:fa:10:
                    ad:a4:dc:58:fc:24:8b:a3:a2:de:07:fd:16:5b:79:
                    f9:4b:1b:29:13:04:47:03:93:71:fc:34:34:cf:87:
                    4f:3f:e2:6d:f2:cb:31:38:79:94:76:40:71:03:cb:
                    fb:c3:08:2f:63:87:f4:b3:01:04:9f:9b:2c:5d:1d:
                    84:1d:6b:7d:d7:5c:06:b7:de:14:a8:27:c3:e2:30:
                    33:07:de:5d:0d:06:31:c0:d3:f8:9b:4f:8d:82:b9:
                    66:64:ba:8e:20:63:2a:fb:e3:f2:4d:8c:95:f4:63:
                    f0:88:ba:18:f8:30:5f:eb:c3:0e:2f:9f:c8:0f:87:
                    a1:05:da:a4:58:9c:48:d3:51:0d:4c:65:16:ce:0d:
                    e0:30:6c:0d:b5:79:9d:81:37:5d:e4:df:07:6e:57:
                    32:97:13:d4:7b:9b:ca:ed:33:28:81:f6:94:2f:65:
                    27:9f:a0:c8:ad:f0:e9:0d:e7:04:01:83:1e:fe:83:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:BC:7E:5D:5F:B1:E6:0C:5F:0C:98:B8:EC:73:36:56:17:94:F9
            X509v3 Authority Key Identifier:
                keyid:1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/3qy8fl1fseYMXwyYuOxzNlYXlPk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:b6:3c:8d:89:40:df:dc:fe:cc:94:f2:6e:fa:5d:b9:91:7e:
         75:d8:23:7b:d1:71:11:29:7c:a5:49:b4:e9:7c:13:42:4e:2d:
         41:c3:73:c1:7f:b0:9c:39:7f:44:a6:84:d6:2d:df:fc:62:4b:
         7e:11:46:56:87:60:58:2f:09:2c:82:d0:d2:d9:a6:15:a5:8c:
         32:f1:dd:04:1e:38:19:60:87:e1:99:bd:c6:c5:b7:b7:c0:63:
         0f:b5:18:3f:99:d9:65:d5:aa:b4:2d:85:e9:da:4f:52:ce:a4:
         c4:9e:41:b5:20:03:00:71:77:f1:d0:60:f5:69:2f:ef:d4:4a:
         fe:e9:85:6c:a5:c8:94:85:e5:de:e8:e8:ba:7e:ff:0a:ab:c9:
         58:e0:6b:cb:89:1a:f6:93:85:64:84:d2:9a:d8:8b:ce:e5:5b:
         7c:9a:d7:4a:c4:32:74:a4:4b:8f:95:2f:ac:40:9c:a0:4d:4b:
         a2:bf:db:f1:57:1a:0b:43:3d:73:b8:e2:0d:23:91:7e:be:2e:
         48:af:6a:ca:4c:16:bb:74:3a:5a:71:8d:24:91:d8:65:24:9c:
         a6:a7:eb:05:27:76:83:65:e3:3d:7f:8f:81:b7:b1:bc:b9:d7:
         88:38:ef:1a:90:ec:66:15:7b:2b:7a:49:83:e3:4e:d3:d1:d3:
         3b:71:22:0c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ0
RDc4RjU2NzUwQzc1OTg5NTMzNjZENDU5QTEyQjY1OEI3RkYzODAeFw0yMjA5MTUw
MjQ4NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERFQUNCQzdFNUQ1RkIx
RTYwQzVGMEM5OEI4RUM3MzM2NTYxNzk0RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDs9ch4LgpqP35TGvbFoaR0urd4Ax5vbDKN4RE+Tr/2WqD64sSU
R/CIn3tbOXIPp6tI2dfVvS2bl8HYj4PC5bQ+0D8C5PYR2kr6EK2k3Fj8JIujot4H
/RZbeflLGykTBEcDk3H8NDTPh08/4m3yyzE4eZR2QHEDy/vDCC9jh/SzAQSfmyxd
HYQda33XXAa33hSoJ8PiMDMH3l0NBjHA0/ibT42CuWZkuo4gYyr74/JNjJX0Y/CI
uhj4MF/rww4vn8gPh6EF2qRYnEjTUQ1MZRbODeAwbA21eZ2BN13k3wduVzKXE9R7
m8rtMyiB9pQvZSefoMit8OkN5wQBgx7+g7i7AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU3qy8fl1fseYMXwyYuOxzNlYXlPkwHwYDVR0jBBgwFoAUHU149WdQx1mJUzZt
RZoStli3/zgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkVCVUxB
WC9IVTE0OVdkUXgxbUpVelp0UlpvU3RsaTNfemcuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0hVMTQ5V2RReDFtSlV6WnRSWm9TdGxpM196Zy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05FQlVMQVgvM3F5OGZsMWZzZVlNWHd5
WXVPeHpObFlYbFBrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQGv8AwDQYJKoZIhvcNAQELBQADggEBAKq2PI2JQN/c/syU8m76XbmRfnXYI3vR
cREpfKVJtOl8E0JOLUHDc8F/sJw5f0SmhNYt3/xiS34RRlaHYFgvCSyC0NLZphWl
jDLx3QQeOBlgh+GZvcbFt7fAYw+1GD+Z2WXVqrQthenaT1LOpMSeQbUgAwBxd/HQ
YPVpL+/USv7phWylyJSF5d7o6Lp+/wqryVjga8uJGvaThWSE0prYi87lW3ya10rE
MnSkS4+VL6xAnKBNS6K/2/FXGgtDPXO44g0jkX6+LkivaspMFrt0OlpxjSSR2GUk
nKan6wUndoNl4z1/j4G3sby514g47xqQ7GYVeyt6SYPjTtPR0ztxIgw=
-----END CERTIFICATE-----