Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/k2cFGaBxnt1eAaZiLGHh-T-D9yM.roa
File:                     k2cFGaBxnt1eAaZiLGHh-T-D9yM.roa (raw, json)
Hash identifier:          3g204zGq6TjDckKy3exH7tLbr6v3z4j96MkAO/iL9rc=
Subject key identifier:   93:67:05:19:A0:71:9E:DD:5E:01:A6:62:2C:61:E1:F9:3F:83:F7:23
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       08F5
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/k2cFGaBxnt1eAaZiLGHh-T-D9yM.roa
Signing time:             Mon 08 Feb 2021 16:41:24 +0000
ROA not before:           Mon 08 Feb 2021 16:41:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38047
IP address blocks:        2402:c340:cccc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Feb  8 16:41:24 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=93670519A0719EDD5E01A6622C61E1F93F83F723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:3c:e5:b2:80:2c:67:28:c3:69:d2:4d:7c:
                    c3:ba:53:80:17:d7:3a:41:04:28:09:42:83:b9:ac:
                    35:e0:35:44:f1:1c:e7:87:ba:ae:b1:bd:f0:5c:a8:
                    1b:08:8b:69:4b:69:32:aa:b1:2c:18:a7:62:55:f3:
                    8f:30:1d:94:e6:c3:0d:f6:ec:ab:78:8e:b9:d8:f5:
                    96:d7:f9:57:40:27:a5:cf:f1:6a:05:fe:24:b7:d7:
                    ec:aa:76:d1:ed:33:40:47:0d:ff:b1:a7:6c:b8:63:
                    55:6c:13:d6:7b:31:67:d1:15:d8:b8:81:e9:50:22:
                    72:db:30:c4:b6:10:74:c5:ea:6a:c7:cd:3c:4c:6a:
                    35:41:b2:83:1c:e7:6f:6f:df:91:92:35:f3:11:07:
                    ab:04:c4:b6:25:3d:7b:47:36:9a:2c:16:4d:c9:ff:
                    17:74:07:dc:2b:a2:b5:b2:57:70:a9:91:03:7b:f5:
                    84:a5:e9:11:18:02:b6:be:29:93:e3:69:13:b1:9c:
                    a9:06:ea:d9:01:26:89:da:d3:50:e3:d7:15:df:60:
                    26:19:08:d9:21:2f:d5:1f:5c:21:ce:fe:ee:11:09:
                    37:a0:6a:06:60:bb:05:9a:89:d0:16:d7:bf:57:fd:
                    83:ed:fb:41:e5:28:e0:ac:1c:dd:f5:f0:89:31:2f:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:67:05:19:A0:71:9E:DD:5E:01:A6:62:2C:61:E1:F9:3F:83:F7:23
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/k2cFGaBxnt1eAaZiLGHh-T-D9yM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:cccc::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:cd:8c:2b:dd:e2:44:50:5f:cf:5e:c7:bc:c0:d3:e8:c5:
         69:dd:12:33:9c:a2:01:ad:a7:fd:8d:94:44:ee:eb:3b:02:a5:
         98:7a:93:2e:a3:f2:33:66:aa:08:fd:63:08:1b:be:a7:ff:86:
         3e:77:66:ec:98:1e:4f:cc:01:47:72:d3:0e:7f:b2:4d:0c:d0:
         ce:8a:b6:f4:ff:0c:5b:d5:47:96:12:f0:33:7a:7f:b1:9b:ce:
         3d:e7:b9:d6:05:36:fa:76:80:e8:2e:19:6b:d2:10:ee:e7:f6:
         79:2f:b1:50:72:32:59:a9:01:12:ac:47:c2:0e:88:5f:3a:b7:
         92:8d:9a:81:0a:6f:f9:d0:b7:a4:56:6a:0b:3d:c2:88:64:e7:
         da:ad:55:e1:1b:43:a6:96:4a:fc:0b:bd:f5:b2:3a:d8:a1:e3:
         c4:c3:a4:88:b0:35:b0:b8:30:c9:ac:e0:54:4e:14:fe:0b:f9:
         34:71:a0:d8:7b:66:fb:e0:33:e0:7f:7c:8e:36:56:ff:13:54:
         f4:16:e0:6e:40:4e:9b:9b:c3:ab:1f:92:56:01:fc:ca:df:1d:
         8f:d3:fc:5d:93:b3:aa:4b:9b:11:4d:37:83:3d:d6:de:16:06:
         65:52:bf:18:d6:1d:e2:5e:0b:4a:95:5d:43:54:3b:8d:f3:07:
         00:3f:ae:2e
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMTAyMDgx
NjQxMjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDkzNjcwNTE5QTA3MTlF
REQ1RTAxQTY2MjJDNjFFMUY5M0Y4M0Y3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ8zzlsoAsZyjDadJNfMO6U4AX1zpBBCgJQoO5rDXgNUTxHOeH
uq6xvfBcqBsIi2lLaTKqsSwYp2JV848wHZTmww327Kt4jrnY9ZbX+VdAJ6XP8WoF
/iS31+yqdtHtM0BHDf+xp2y4Y1VsE9Z7MWfRFdi4gelQInLbMMS2EHTF6mrHzTxM
ajVBsoMc529v35GSNfMRB6sExLYlPXtHNposFk3J/xd0B9wrorWyV3CpkQN79YSl
6REYAra+KZPjaROxnKkG6tkBJona01Dj1xXfYCYZCNkhL9UfXCHO/u4RCTegagZg
uwWaidAW179X/YPt+0HlKOCsHN318IkxL2m9AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUk2cFGaBxnt1eAaZiLGHh+T+D9yMwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL2syY0ZHYUJ4bnQx
ZUFhWmlMR0hoLVQtRDl5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkAsNAzMwwDQYJKoZIhvcNAQELBQADggEBAI/zzYwr3eJEUF/PXse8wNPo
xWndEjOcogGtp/2NlETu6zsCpZh6ky6j8jNmqgj9Ywgbvqf/hj53ZuyYHk/MAUdy
0w5/sk0M0M6KtvT/DFvVR5YS8DN6f7Gbzj3nudYFNvp2gOguGWvSEO7n9nkvsVBy
MlmpARKsR8IOiF86t5KNmoEKb/nQt6RWags9wohk59qtVeEbQ6aWSvwLvfWyOtih
48TDpIiwNbC4MMms4FROFP4L+TRxoNh7ZvvgM+B/fI42Vv8TVPQW4G5ATpubw6sf
klYB/MrfHY/T/F2Ts6pLmxFNN4M91t4WBmVSvxjWHeJeC0qVXUNUO43zBwA/ri4=
-----END CERTIFICATE-----