Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/EToxYRLaWenLRU6arP1BbFBB3to.roa
File:                     EToxYRLaWenLRU6arP1BbFBB3to.roa (raw, json)
Hash identifier:          VedDIlgGv2xf2gmjYX18ZCNHrsayiHzECHidgm+HI38=
Subject key identifier:   11:3A:31:61:12:DA:59:E9:CB:45:4E:9A:AC:FD:41:6C:50:41:DE:DA
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       0CB5
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/EToxYRLaWenLRU6arP1BbFBB3to.roa
Signing time:             Mon 12 Oct 2020 06:15:37 +0000
ROA not before:           Mon 12 Oct 2020 06:15:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     2914
IP address blocks:        103.127.238.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3253 (0xcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Oct 12 06:15:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=113A316112DA59E9CB454E9AACFD416C5041DEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:8f:1e:6e:c5:2c:0e:a8:37:4f:87:ab:0e:
                    59:9e:fe:58:47:36:72:9c:a4:aa:69:69:51:3e:47:
                    a6:b4:54:d0:b6:d5:61:2f:8d:00:21:71:8f:9b:39:
                    48:81:c8:10:bf:8a:97:25:02:2e:09:3d:7f:9a:64:
                    07:22:1d:85:c6:a9:3f:d9:aa:b3:11:fa:d6:d0:4b:
                    6e:28:5b:24:a2:08:1d:59:e9:ff:66:14:d2:e4:07:
                    43:3c:d6:1f:6b:65:a4:c8:64:1c:91:9a:72:37:99:
                    4e:4a:07:d4:e4:4a:64:69:85:54:24:b5:98:86:b1:
                    37:c7:f8:5e:a2:08:5b:9f:86:53:05:07:d5:83:de:
                    61:10:99:13:c5:32:a7:ea:62:b7:50:11:34:cd:38:
                    36:87:d9:62:cc:b8:7e:ff:a6:da:5e:99:1e:73:60:
                    ed:28:bb:a0:85:53:4b:fd:79:e8:bf:94:f6:ca:d5:
                    3b:fe:93:e8:6d:e3:a6:30:fd:b5:14:7a:f6:0d:20:
                    91:ef:5d:2c:4d:d8:60:41:21:25:db:e2:f2:ac:88:
                    b8:f6:ff:2d:db:fb:f3:1b:e1:00:74:b9:67:19:63:
                    39:e0:df:1a:7e:ae:48:1e:e0:7e:84:2d:3f:3c:ad:
                    6e:28:36:5b:ff:24:22:a5:2f:3e:c5:dc:89:cb:77:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3A:31:61:12:DA:59:E9:CB:45:4E:9A:AC:FD:41:6C:50:41:DE:DA
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/EToxYRLaWenLRU6arP1BbFBB3to.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:33:67:8e:5d:18:2c:99:52:56:a4:fd:b6:fb:a0:97:1d:2b:
         68:4e:dd:c8:81:24:23:f2:ac:ce:ff:17:96:1b:b3:49:c0:d2:
         81:ab:c5:07:0e:59:4d:73:1c:68:f4:89:47:a1:d0:7a:5a:87:
         70:b9:a0:90:c2:af:60:95:a4:2b:5e:ce:64:14:c4:6c:7b:8f:
         3c:f4:b4:3e:df:92:cd:4f:81:c8:02:fc:39:6d:f1:46:c7:00:
         ce:90:cb:6b:85:7a:7c:5e:92:68:88:44:3f:f7:4e:d3:22:c7:
         4c:56:7a:c4:c7:a1:95:ba:0e:b4:a8:e5:a0:83:8c:6e:9a:76:
         ef:e4:c5:6f:15:2c:50:b9:07:6e:cf:13:0a:b6:e1:58:1b:42:
         51:e4:c1:dd:9a:f7:73:3a:91:7c:2f:6c:06:3d:ff:77:77:d5:
         af:01:0f:cb:7d:24:f0:52:54:2f:ad:51:84:32:4c:be:84:f6:
         cc:92:b7:3e:01:75:fc:a5:2d:42:88:92:27:2d:40:9c:1a:64:
         96:d6:74:0b:7e:89:fd:f3:7a:57:65:c9:f0:66:f8:21:b0:0b:
         d3:bf:7d:8d:89:c2:c1:56:8a:63:03:eb:4f:a0:66:7d:06:c3:
         c1:d2:7d:12:d1:53:22:eb:dc:9a:6a:d9:09:11:8b:9f:18:71:
         0d:76:7e:0f
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx
ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yMDEwMTIw
NjE1MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDExM0EzMTYxMTJEQTU5
RTlDQjQ1NEU5QUFDRkQ0MTZDNTA0MURFREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqoo8ebsUsDqg3T4erDlme/lhHNnKcpKppaVE+R6a0VNC21WEv
jQAhcY+bOUiByBC/ipclAi4JPX+aZAciHYXGqT/ZqrMR+tbQS24oWySiCB1Z6f9m
FNLkB0M81h9rZaTIZByRmnI3mU5KB9TkSmRphVQktZiGsTfH+F6iCFufhlMFB9WD
3mEQmRPFMqfqYrdQETTNODaH2WLMuH7/ptpemR5zYO0ou6CFU0v9eei/lPbK1Tv+
k+ht46Yw/bUUevYNIJHvXSxN2GBBISXb4vKsiLj2/y3b+/Mb4QB0uWcZYzng3xp+
rkge4H6ELT88rW4oNlv/JCKlLz7F3InLd/JXAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUEToxYRLaWenLRU6arP1BbFBB3towHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7
k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ
TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9FVG94WVJMYVdlbkxS
VTZhclAxQmJGQkIzdG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ3/uMA0GCSqGSIb3DQEBCwUAA4IBAQDEM2eOXRgsmVJWpP22+6CXHStoTt3I
gSQj8qzO/xeWG7NJwNKBq8UHDllNcxxo9IlHodB6WodwuaCQwq9glaQrXs5kFMRs
e4889LQ+35LNT4HIAvw5bfFGxwDOkMtrhXp8XpJoiEQ/907TIsdMVnrEx6GVug60
qOWgg4xumnbv5MVvFSxQuQduzxMKtuFYG0JR5MHdmvdzOpF8L2wGPf93d9WvAQ/L
fSTwUlQvrVGEMky+hPbMkrc+AXX8pS1CiJInLUCcGmSW1nQLfon983pXZcnwZvgh
sAvTv32NicLBVopjA+tPoGZ9BsPB0n0S0VMi69yaatkJEYufGHENdn4P
-----END CERTIFICATE-----