Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/BekMR9a3jU_6kg9ZXyIeocVjj_A.roa
File:                     BekMR9a3jU_6kg9ZXyIeocVjj_A.roa (raw, json)
Hash identifier:          5mxu643EY26hO2AFIdV4e5rsLtKAX8/3VxiRie4lWtA=
Subject key identifier:   05:E9:0C:47:D6:B7:8D:4F:FA:92:0F:59:5F:22:1E:A1:C5:63:8F:F0
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0CA5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/BekMR9a3jU_6kg9ZXyIeocVjj_A.roa
Signing time:             Wed 29 Sep 2021 02:50:06 +0000
ROA not before:           Wed 29 Sep 2021 02:50:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131634
IP address blocks:        60.199.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3237 (0xca5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:06 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=05E90C47D6B78D4FFA920F595F221EA1C5638FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:bd:1c:c2:f0:bf:f3:da:a8:f4:ef:e8:ac:
                    68:79:6b:ca:93:9c:9d:a1:2f:6f:bd:3d:43:53:ae:
                    8e:56:d7:97:bd:0f:35:38:fe:91:44:71:a1:55:c3:
                    e9:0b:29:99:f3:fd:99:6b:a4:a9:ee:8e:7b:8a:b8:
                    09:1c:b4:f9:86:78:94:f2:bd:bd:8e:b8:01:be:4e:
                    97:10:84:f4:f6:a1:b6:b5:d4:a8:d0:c7:34:cf:35:
                    c0:39:4c:a3:a4:a1:d6:a3:74:43:bc:30:47:0f:4d:
                    a3:a3:f8:60:f1:dc:49:32:2c:63:b4:23:b8:d4:ad:
                    81:c0:be:16:73:88:a9:7b:d9:03:26:9f:8c:a3:7d:
                    8c:28:18:3a:e3:bc:2f:44:28:3d:a7:a6:78:f5:e4:
                    3d:b0:7d:a1:ce:a6:59:3f:c0:00:dd:be:e8:3e:cf:
                    c3:37:03:30:c7:1b:5e:08:d2:30:aa:9f:af:e5:01:
                    24:2c:58:66:35:4b:40:96:eb:5e:5a:f0:4c:0e:a5:
                    a9:a2:c7:13:67:20:24:62:a8:3e:84:f8:89:71:2f:
                    bf:3e:b0:5d:6d:9d:84:a4:03:43:5e:22:88:87:58:
                    ce:90:79:2d:df:ec:19:3d:66:78:80:a9:2f:28:8b:
                    fd:91:e5:0a:5e:9a:d2:3e:72:bc:1e:20:2d:06:57:
                    e6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:0C:47:D6:B7:8D:4F:FA:92:0F:59:5F:22:1E:A1:C5:63:8F:F0
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/BekMR9a3jU_6kg9ZXyIeocVjj_A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:62:3f:5e:c2:af:7a:6b:89:1f:eb:4d:64:41:7c:66:24:af:
         b9:db:60:0f:f5:c0:82:3c:61:16:83:fb:82:88:7f:60:ad:67:
         12:d3:ef:88:8f:b3:b5:c4:74:7a:82:75:37:9c:53:63:01:35:
         d5:99:77:42:a3:8a:a2:a0:bc:d3:e0:b1:61:bd:46:fb:29:b6:
         d0:de:37:fa:7b:36:28:a4:8b:8c:d1:84:8c:cb:1d:f3:4b:0d:
         77:54:52:28:6f:1e:21:8b:91:17:c8:1a:88:cc:dd:b6:ad:2f:
         f1:79:10:f1:54:50:13:a9:59:2d:27:46:16:64:4c:b3:42:47:
         d2:f7:fe:66:a9:3f:54:8a:3f:52:7b:36:ce:b3:25:a4:43:b9:
         7e:ab:d6:4b:38:df:c3:18:62:e7:61:26:8d:87:40:bd:17:b8:
         04:37:1d:a5:94:0e:fa:97:14:fe:23:d5:0d:4d:dc:d2:8f:c8:
         d0:c0:04:c7:c7:c5:8b:8e:4e:4f:5a:05:21:94:57:e3:d3:7f:
         0f:ee:71:0a:60:91:db:14:2d:7b:78:7c:d3:3c:d0:71:9c:b3:
         a7:f6:54:e9:96:a6:43:cc:2b:37:9f:57:24:f2:54:8b:7c:4f:
         b0:86:f4:3e:5a:f7:97:74:90:6b:9a:eb:d1:ad:4b:0f:cd:6b:
         23:b4:df:23
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjUwMDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDA1RTkwQzQ3RDZCNzhE
NEZGQTkyMEY1OTVGMjIxRUExQzU2MzhGRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi/L0cwvC/89qo9O/orGh5a8qTnJ2hL2+9PUNTro5W15e9DzU4
/pFEcaFVw+kLKZnz/ZlrpKnujnuKuAkctPmGeJTyvb2OuAG+TpcQhPT2oba11KjQ
xzTPNcA5TKOkodajdEO8MEcPTaOj+GDx3EkyLGO0I7jUrYHAvhZziKl72QMmn4yj
fYwoGDrjvC9EKD2npnj15D2wfaHOplk/wADdvug+z8M3AzDHG14I0jCqn6/lASQs
WGY1S0CW615a8EwOpamixxNnICRiqD6E+IlxL78+sF1tnYSkA0NeIoiHWM6QeS3f
7Bk9ZniAqS8oi/2R5QpemtI+crweIC0GV+aRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUBekMR9a3jU/6kg9ZXyIeocVjj/AwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvQmVrTVI5YTNqVV82a2c5
Wlh5SWVvY1Zqal9BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzHMjANBgkqhkiG9w0BAQsFAAOCAQEAKWI/XsKvemuJH+tNZEF8ZiSvudtgD/XA
gjxhFoP7goh/YK1nEtPviI+ztcR0eoJ1N5xTYwE11Zl3QqOKoqC80+CxYb1G+ym2
0N43+ns2KKSLjNGEjMsd80sNd1RSKG8eIYuRF8gaiMzdtq0v8XkQ8VRQE6lZLSdG
FmRMs0JH0vf+Zqk/VIo/Uns2zrMlpEO5fqvWSzjfwxhi52EmjYdAvRe4BDcdpZQO
+pcU/iPVDU3c0o/I0MAEx8fFi45OT1oFIZRX49N/D+5xCmCR2xQte3h80zzQcZyz
p/ZU6ZamQ8wrN59XJPJUi3xPsIb0Plr3l3SQa5rr0a1LD81rI7TfIw==
-----END CERTIFICATE-----