Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/fHGZvTfpClTE7HkTytRrWtrdYtk.roa
File:                     fHGZvTfpClTE7HkTytRrWtrdYtk.roa (raw, json)
Hash identifier:          49Bg9I6uqzh+QRqdp8i0byy6sdbIrF5DoHBdO85Tr1A=
Subject key identifier:   7C:71:99:BD:37:E9:0A:54:C4:EC:79:13:CA:D4:6B:5A:DA:DD:62:D9
Certificate issuer:       /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Certificate serial:       F0
Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/fHGZvTfpClTE7HkTytRrWtrdYtk.roa
Signing time:             Thu 16 Jun 2022 07:27:17 +0000
ROA not before:           Thu 16 Jun 2022 07:27:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38853
IP address blocks:        103.169.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
        Validity
            Not Before: Jun 16 07:27:17 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7C7199BD37E90A54C4EC7913CAD46B5ADADD62D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fc:e3:32:e0:2a:bc:59:4d:45:11:de:61:14:
                    10:1b:44:e6:99:11:e7:ee:eb:ae:b7:bc:03:d4:1c:
                    ef:f5:e0:15:0b:d1:19:04:23:12:f9:e2:79:59:08:
                    71:00:07:3c:bc:e9:9a:b8:41:bc:11:a4:db:b6:36:
                    97:96:e6:e4:a4:f3:b5:90:a9:ae:d6:7d:0a:16:55:
                    9e:c7:8d:67:3f:55:5d:74:41:ab:9b:7e:92:db:39:
                    8f:09:7a:b6:97:70:3a:07:85:72:09:a2:44:9e:40:
                    64:0c:f3:cf:21:8a:1c:99:00:be:b1:0b:97:a3:87:
                    36:c5:05:ae:a7:df:a8:0e:4a:cb:3a:0d:d5:13:0c:
                    9d:8e:3f:c9:24:0b:b0:99:51:a3:0a:69:1f:89:3c:
                    5a:7f:b1:8e:13:a5:8a:b2:f3:c9:34:80:c7:ff:b7:
                    ee:27:47:14:18:29:26:ff:95:00:75:86:14:01:12:
                    1d:60:07:7e:0c:68:9c:c3:1c:05:00:b3:a6:0c:48:
                    d4:cc:61:f3:aa:48:90:ae:ca:ef:c8:ad:25:91:bd:
                    ee:17:44:6b:cc:9e:aa:ed:0b:78:93:5d:27:38:37:
                    3c:f9:ad:49:7f:fb:82:91:d4:d8:eb:45:52:28:fe:
                    2f:a0:94:bf:14:ea:88:9b:fa:fd:bb:1e:6c:25:89:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:99:BD:37:E9:0A:54:C4:EC:79:13:CA:D4:6B:5A:DA:DD:62:D9
            X509v3 Authority Key Identifier:
                keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/fHGZvTfpClTE7HkTytRrWtrdYtk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:70:d6:d6:f0:30:ea:46:bf:4f:46:cb:ea:78:ed:d4:1a:46:
         64:fd:ee:c5:44:a8:64:31:b7:38:a7:6a:5a:3d:47:0c:21:f6:
         bf:64:7b:6a:68:86:d0:99:c8:b6:66:9d:aa:ee:a1:e2:61:21:
         3f:e6:d1:1f:53:3a:28:0a:71:0d:ae:e9:75:d0:56:5d:a7:a7:
         30:0e:91:c7:79:c9:10:dc:b6:8b:b2:86:6f:3e:18:37:ec:bc:
         54:5e:82:28:7d:a4:66:b5:c3:6d:c8:5d:5f:c5:20:28:0b:fe:
         fb:39:72:ac:d5:6b:53:2c:a7:3d:11:bb:ab:35:4a:87:fa:c5:
         37:cf:19:f2:33:74:66:90:41:60:d2:5a:f5:21:00:b7:a7:d6:
         46:e5:01:49:f2:4f:f4:3e:3e:42:a2:35:7c:ec:27:48:78:1b:
         a2:f5:83:f8:a5:3f:f2:b1:d2:44:92:8a:1a:8f:b3:4f:0c:be:
         07:b9:69:af:10:86:00:fa:bf:27:55:dd:a1:d2:01:75:53:26:
         56:8f:30:bb:34:dd:55:ed:3b:26:f3:af:08:aa:c7:5a:41:57:
         08:7f:2c:dc:7f:62:18:92:83:a4:48:f8:9b:8c:20:b6:4c:62:
         15:74:c2:20:e8:72:d3:8f:bc:12:f4:c9:da:7a:b7:97:f3:37:
         45:9f:e4:72
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I4
MjU3RkZEQzdDRDFDQjQxOTYxMjlDRDQwNDkzMzUyQkM4M0JCOTAeFw0yMjA2MTYw
NzI3MTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdDNzE5OUJEMzdFOTBB
NTRDNEVDNzkxM0NBRDQ2QjVBREFERDYyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx/OMy4Cq8WU1FEd5hFBAbROaZEefu6663vAPUHO/14BUL0RkE
IxL54nlZCHEABzy86Zq4QbwRpNu2NpeW5uSk87WQqa7WfQoWVZ7HjWc/VV10Qaub
fpLbOY8JeraXcDoHhXIJokSeQGQM888hihyZAL6xC5ejhzbFBa6n36gOSss6DdUT
DJ2OP8kkC7CZUaMKaR+JPFp/sY4TpYqy88k0gMf/t+4nRxQYKSb/lQB1hhQBEh1g
B34MaJzDHAUAs6YMSNTMYfOqSJCuyu/IrSWRve4XRGvMnqrtC3iTXSc4Nzz5rUl/
+4KR1NjrRVIo/i+glL8U6oib+v27HmwliSe9AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUfHGZvTfpClTE7HkTytRrWtrdYtkwHwYDVR0jBBgwFoAUe4JX/9x80ctBlhKc
1ASTNSvIO7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFSQU1J
VEEvZTRKWF85eDgwY3RCbGhLYzFBU1ROU3ZJTzdrLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9lNEpYXzl4ODBjdEJsaEtjMUFTVE5TdklPN2suY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQVJBTUlUQS9mSEdadlRmcENsVEU3
SGtUeXRScld0cmRZdGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ6kuMA0GCSqGSIb3DQEBCwUAA4IBAQBFcNbW8DDqRr9PRsvqeO3UGkZk/e7F
RKhkMbc4p2paPUcMIfa/ZHtqaIbQmci2Zp2q7qHiYSE/5tEfUzooCnENrul10FZd
p6cwDpHHeckQ3LaLsoZvPhg37LxUXoIofaRmtcNtyF1fxSAoC/77OXKs1WtTLKc9
EburNUqH+sU3zxnyM3RmkEFg0lr1IQC3p9ZG5QFJ8k/0Pj5CojV87CdIeBui9YP4
pT/ysdJEkooaj7NPDL4HuWmvEIYA+r8nVd2h0gF1UyZWjzC7NN1V7Tsm868Iqsda
QVcIfyzcf2IYkoOkSPibjCC2TGIVdMIg6HLTj7wS9MnaereX8zdFn+Ry
-----END CERTIFICATE-----