Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/NZK8nziiWGjq13WRGVZhzw69UgY.roa
File:                     NZK8nziiWGjq13WRGVZhzw69UgY.roa (raw, json)
Hash identifier:          rrJLXmwG6+RTHL+Drie20k/czzrrZ03mUwd2RzC7fAo=
Subject key identifier:   35:92:BC:9F:38:A2:58:68:EA:D7:75:91:19:56:61:CF:0E:BD:52:06
Certificate issuer:       /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial:       0E3D
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/NZK8nziiWGjq13WRGVZhzw69UgY.roa
Signing time:             Tue 29 Sep 2020 10:05:11 +0000
ROA not before:           Tue 29 Sep 2020 10:05:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9922
IP address blocks:        103.130.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3645 (0xe3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
        Validity
            Not Before: Sep 29 10:05:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3592BC9F38A25868EAD77591195661CF0EBD5206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:81:7f:d0:3f:cf:71:4a:23:c5:61:4e:20:17:
                    bd:bc:cd:d6:90:85:eb:c1:9a:87:2c:76:80:60:7d:
                    1e:33:bf:98:7a:a4:b8:f1:ae:80:d7:fe:4a:90:25:
                    63:3f:6c:48:82:10:c4:79:fa:9d:b6:8a:2d:38:86:
                    f8:67:85:b1:db:3b:05:f0:f3:f9:86:ee:a0:b5:5a:
                    e3:42:7c:19:e0:52:54:3c:85:d8:16:23:c8:e0:b9:
                    0a:1c:51:7c:9c:6a:46:42:9a:22:23:d5:5f:43:9f:
                    b7:f6:3e:56:a1:55:3b:72:54:37:a6:f3:87:b9:46:
                    a1:4a:54:11:99:66:dc:18:ba:85:6c:2f:1e:a3:11:
                    9c:07:89:a8:0a:70:2e:1b:68:55:51:c8:f2:f1:09:
                    e5:75:13:a2:ac:db:ed:27:e7:5d:18:33:0e:2c:a4:
                    bf:e8:50:af:9d:a7:d8:8a:51:78:37:9c:43:e4:b6:
                    02:e5:71:b9:76:44:1d:ea:99:61:2e:9c:98:fa:52:
                    32:d3:f6:67:fe:eb:4e:4e:83:a1:b3:b6:12:9a:13:
                    64:bf:36:04:2d:7d:95:41:2a:05:55:3c:a6:00:0d:
                    9e:d5:ae:c6:5c:7e:0f:f9:43:2d:d2:d9:23:92:17:
                    9c:5f:d3:f0:03:32:07:11:3c:07:e1:f9:fc:b7:ac:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:92:BC:9F:38:A2:58:68:EA:D7:75:91:19:56:61:CF:0E:BD:52:06
            X509v3 Authority Key Identifier:
                keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/NZK8nziiWGjq13WRGVZhzw69UgY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:85:33:d8:1e:77:68:33:4e:a9:91:89:6a:62:8b:1e:c8:e9:
         92:2a:13:f9:4c:b1:b3:f2:a4:52:93:3e:a5:3a:e3:9e:e8:17:
         29:70:40:e9:7c:73:31:e3:d4:8a:b2:ab:8b:43:ce:b5:00:3f:
         ac:01:ac:23:f3:5e:bc:9e:5b:e3:61:85:e4:db:25:a2:e1:58:
         7f:8f:5c:a0:b3:c3:65:22:9c:de:92:8c:bf:2b:d7:a7:fc:ef:
         f2:f4:48:ba:83:fe:e9:aa:82:f6:f3:75:28:8d:54:c8:ee:6a:
         62:ab:3e:05:25:ee:75:5d:96:aa:ea:12:35:9f:fb:28:cf:a3:
         65:3d:f9:5a:42:8e:03:98:23:48:ac:9c:5c:41:7d:70:b4:49:
         2b:88:c9:c3:08:c1:05:d1:69:fa:03:0d:fd:35:bb:37:b4:f0:
         ae:89:82:7e:8a:bc:d4:b4:99:02:ce:36:cc:0c:36:4d:3d:92:
         0b:4f:63:c6:dc:bf:26:c1:36:e8:1e:19:12:6b:4e:fb:ef:58:
         f0:ac:5f:b1:03:66:43:85:80:85:5a:94:da:ec:9d:e3:06:3b:
         af:3c:4f:f9:33:5b:8c:a8:b8:1d:4d:24:57:0d:ae:00:ba:ca:
         ea:b2:6a:32:df:0e:a7:16:12:dc:70:19:4d:cf:2b:9b:eb:90:
         49:58:9a:fb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yMDA5Mjkx
MDA1MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM1OTJCQzlGMzhBMjU4
NjhFQUQ3NzU5MTE5NTY2MUNGMEVCRDUyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdgX/QP89xSiPFYU4gF728zdaQhevBmocsdoBgfR4zv5h6pLjx
roDX/kqQJWM/bEiCEMR5+p22ii04hvhnhbHbOwXw8/mG7qC1WuNCfBngUlQ8hdgW
I8jguQocUXycakZCmiIj1V9Dn7f2PlahVTtyVDem84e5RqFKVBGZZtwYuoVsLx6j
EZwHiagKcC4baFVRyPLxCeV1E6Ks2+0n510YMw4spL/oUK+dp9iKUXg3nEPktgLl
cbl2RB3qmWEunJj6UjLT9mf+605Og6GzthKaE2S/NgQtfZVBKgVVPKYADZ7VrsZc
fg/5Qy3S2SOSF5xf0/ADMgcRPAfh+fy3rCOzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNZK8nziiWGjq13WRGVZhzw69UgYwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL05aSzhuemlpV0dqcTEzV1JH
Vlpoenc2OVVnWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
gjAwDQYJKoZIhvcNAQELBQADggEBAFKFM9ged2gzTqmRiWpiix7I6ZIqE/lMsbPy
pFKTPqU6457oFylwQOl8czHj1Iqyq4tDzrUAP6wBrCPzXryeW+NhheTbJaLhWH+P
XKCzw2UinN6SjL8r16f87/L0SLqD/umqgvbzdSiNVMjuamKrPgUl7nVdlqrqEjWf
+yjPo2U9+VpCjgOYI0isnFxBfXC0SSuIycMIwQXRafoDDf01uze08K6Jgn6KvNS0
mQLONswMNk09kgtPY8bcvybBNugeGRJrTvvvWPCsX7EDZkOFgIValNrsneMGO688
T/kzW4youB1NJFcNrgC6yuqyajLfDqcWEtxwGU3PK5vrkElYmvs=
-----END CERTIFICATE-----