Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/de91t8dYbaNKpmR9g7_7OBMwLl8.roa
File:                     de91t8dYbaNKpmR9g7_7OBMwLl8.roa (raw, json)
Hash identifier:          URwa1adT20GMwF8PifMRsjgmkSRu2jeBzLHypsAkxic=
Subject key identifier:   75:EF:75:B7:C7:58:6D:A3:4A:A6:64:7D:83:BF:FB:38:13:30:2E:5F
Certificate issuer:       /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial:       1020
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/de91t8dYbaNKpmR9g7_7OBMwLl8.roa
Signing time:             Wed 29 Sep 2021 02:38:01 +0000
ROA not before:           Wed 29 Sep 2021 02:38:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     7482
IP address blocks:        103.130.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4128 (0x1020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
        Validity
            Not Before: Sep 29 02:38:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=75EF75B7C7586DA34AA6647D83BFFB3813302E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:d6:2f:1f:4b:50:c6:be:ce:fb:5f:77:e7:
                    05:1d:34:53:b8:1e:38:70:40:50:bb:bc:2a:2b:43:
                    24:46:7b:ba:63:32:47:aa:bc:e1:72:13:70:df:de:
                    67:b9:f2:66:a9:55:46:e3:18:c5:2c:e3:7a:ca:bd:
                    e7:7f:3f:a2:47:26:3a:67:4f:f1:80:ca:e1:8a:8a:
                    f4:9f:1f:10:ca:0c:8d:19:61:a1:6a:5f:91:a3:c6:
                    fd:98:d4:54:11:3f:3a:0e:59:c5:a1:f0:7d:6a:52:
                    d0:4a:74:55:23:58:1c:0b:84:31:b0:aa:bf:ba:f8:
                    03:a2:c6:f6:41:48:bd:73:68:a3:4a:17:4a:7e:58:
                    e5:5f:a1:58:28:b6:99:bc:1b:66:51:c1:94:50:e4:
                    8c:c6:f7:89:f2:f7:a3:45:4b:1b:65:fa:52:e7:ef:
                    c4:2a:fb:f1:70:ff:2c:19:70:c8:52:cd:ec:c1:32:
                    87:12:5d:f5:1a:b1:d0:76:d1:f8:7a:c5:e9:9f:61:
                    cf:c2:3b:6f:14:23:b3:4b:43:87:df:a7:51:0a:45:
                    51:4b:c6:2e:ed:4c:70:37:42:83:24:50:66:b6:8c:
                    30:7a:17:61:60:47:69:28:bc:68:48:e9:95:d3:fc:
                    63:80:32:5e:38:31:67:a0:f3:98:0b:e1:17:72:a4:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EF:75:B7:C7:58:6D:A3:4A:A6:64:7D:83:BF:FB:38:13:30:2E:5F
            X509v3 Authority Key Identifier:
                keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/de91t8dYbaNKpmR9g7_7OBMwLl8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:6f:47:14:f5:58:29:bd:de:13:a6:b1:d6:4d:88:ab:49:
         03:6d:b3:6e:1d:9e:bf:06:58:5b:10:a6:c1:e9:fb:c4:3a:77:
         76:99:dc:a8:58:66:4c:f0:23:26:ac:d4:75:40:c0:e2:b6:ab:
         71:a9:6e:78:0c:bf:d1:16:14:55:5a:af:50:b0:d3:4b:77:43:
         77:4a:75:17:d2:d1:30:ff:82:68:c2:a3:d8:99:00:c3:75:ed:
         5e:c7:46:68:eb:86:05:96:88:eb:03:71:d2:02:ca:27:fa:17:
         6a:2a:7d:2a:de:61:87:07:22:dc:20:6d:ab:13:fd:b6:14:57:
         ad:43:ea:6d:84:56:ee:ef:c1:dc:ec:70:85:ad:87:31:5c:49:
         fa:c2:db:95:9f:fb:be:b1:db:13:fd:a6:0d:ed:02:56:09:ef:
         2a:20:81:0e:19:06:a3:0a:0e:7f:f3:3c:cc:b8:ff:84:0d:d0:
         49:6e:e6:24:82:47:4c:b8:f8:e8:c5:e3:02:31:f8:86:ba:ea:
         96:77:2e:e2:54:be:90:6a:c9:62:41:4d:cf:29:9b:d7:87:4c:
         8c:87:9d:47:2f:73:f7:a9:a3:36:4a:06:41:f7:ee:e2:48:af:
         d3:96:1e:e0:26:82:a3:a7:02:7f:4e:1d:56:2f:79:43:48:2c:
         c2:c2:76:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICECAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yMTA5Mjkw
MjM4MDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc1RUY3NUI3Qzc1ODZE
QTM0QUE2NjQ3RDgzQkZGQjM4MTMzMDJFNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmA9YvH0tQxr7O+1935wUdNFO4HjhwQFC7vCorQyRGe7pjMkeq
vOFyE3Df3me58mapVUbjGMUs43rKved/P6JHJjpnT/GAyuGKivSfHxDKDI0ZYaFq
X5Gjxv2Y1FQRPzoOWcWh8H1qUtBKdFUjWBwLhDGwqr+6+AOixvZBSL1zaKNKF0p+
WOVfoVgotpm8G2ZRwZRQ5IzG94ny96NFSxtl+lLn78Qq+/Fw/ywZcMhSzezBMocS
XfUasdB20fh6xemfYc/CO28UI7NLQ4ffp1EKRVFLxi7tTHA3QoMkUGa2jDB6F2Fg
R2kovGhI6ZXT/GOAMl44MWeg85gL4RdypOUDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUde91t8dYbaNKpmR9g7/7OBMwLl8wHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL2RlOTF0OGRZYmFOS3BtUjln
N183T0JNd0xsOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
gjAwDQYJKoZIhvcNAQELBQADggEBABedb0cU9Vgpvd4TprHWTYirSQNts24dnr8G
WFsQpsHp+8Q6d3aZ3KhYZkzwIyas1HVAwOK2q3GpbngMv9EWFFVar1Cw00t3Q3dK
dRfS0TD/gmjCo9iZAMN17V7HRmjrhgWWiOsDcdICyif6F2oqfSreYYcHItwgbasT
/bYUV61D6m2EVu7vwdzscIWthzFcSfrC25Wf+76x2xP9pg3tAlYJ7yoggQ4ZBqMK
Dn/zPMy4/4QN0Elu5iSCR0y4+OjF4wIx+Ia66pZ3LuJUvpBqyWJBTc8pm9eHTIyH
nUcvc/epozZKBkH37uJIr9OWHuAmgqOnAn9OHVYveUNILMLCdh8=
-----END CERTIFICATE-----