Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/vtC_dt9T49TxMMgfPD1TldRMVUY.roa
File:                     vtC_dt9T49TxMMgfPD1TldRMVUY.roa (raw, json)
Hash identifier:          IxlJNnddOHqMfCAQi4MT0ljXlT717FUEHwRJDp+falM=
Subject key identifier:   BE:D0:BF:76:DF:53:E3:D4:F1:30:C8:1F:3C:3D:53:95:D4:4C:55:46
Certificate issuer:       /CN=958B346FB031A83DA2F43F761FA02042D523F50D
Certificate serial:       1010
Authority key identifier: 95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/vtC_dt9T49TxMMgfPD1TldRMVUY.roa
Signing time:             Wed 29 Sep 2021 02:40:47 +0000
ROA not before:           Wed 29 Sep 2021 02:40:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131607
IP address blocks:        103.130.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4112 (0x1010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958B346FB031A83DA2F43F761FA02042D523F50D
        Validity
            Not Before: Sep 29 02:40:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BED0BF76DF53E3D4F130C81F3C3D5395D44C5546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:0d:d2:c5:e9:ae:6d:b2:96:f2:d9:07:31:
                    ff:19:1c:69:8c:39:13:b1:25:d5:cf:67:a0:22:5f:
                    50:98:02:e3:48:ad:0a:bb:6d:2c:50:4e:5a:85:cf:
                    f4:d4:31:e2:88:22:d9:e8:8d:ea:6d:ef:58:94:12:
                    41:3b:7d:02:72:b8:2e:6d:e8:72:c1:9e:5e:24:08:
                    78:3a:14:74:23:41:b6:03:47:be:32:d0:2b:3d:aa:
                    2a:63:bf:a4:20:84:22:4a:48:f4:78:56:42:38:e5:
                    0b:ff:18:e1:7f:67:89:24:ed:75:ab:fb:9f:8d:a7:
                    b8:d6:74:08:77:16:24:4d:34:0b:5c:56:77:61:52:
                    3e:f0:8d:e8:f9:56:f4:de:ce:9d:ec:58:69:4b:9a:
                    16:96:b6:18:51:ab:d7:40:e3:e6:fe:57:4f:8f:43:
                    c8:ad:f4:ee:10:8f:23:de:38:98:d9:3d:67:8c:0b:
                    f9:54:80:11:19:28:53:19:2f:c9:50:05:63:16:75:
                    bf:bb:4a:10:da:f5:75:0e:d1:74:f4:62:eb:a2:6d:
                    f3:06:e2:ea:6d:6c:70:cf:60:0c:e1:38:96:db:53:
                    a5:b9:43:91:ad:99:5f:95:07:42:08:2c:19:bb:05:
                    eb:19:dd:83:7d:ee:d6:98:9a:cc:37:c7:53:81:80:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D0:BF:76:DF:53:E3:D4:F1:30:C8:1F:3C:3D:53:95:D4:4C:55:46
            X509v3 Authority Key Identifier:
                keyid:95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/lYs0b7AxqD2i9D92H6AgQtUj9Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/vtC_dt9T49TxMMgfPD1TldRMVUY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:79:ee:b6:ae:41:1e:01:7a:f6:e7:2f:6c:61:42:18:8c:6a:
         7f:be:f7:a3:c7:b4:55:03:ab:1d:8c:d6:57:a3:3c:1f:46:35:
         ff:55:3f:f0:01:ac:37:3b:65:54:db:f2:87:ae:e5:ae:73:b4:
         18:56:0f:09:c8:c1:31:d9:b4:7a:de:b0:c1:02:52:88:27:2e:
         5d:e8:58:d6:2b:0d:93:09:28:9b:fd:91:5d:44:88:f0:21:44:
         11:fa:a8:bf:c2:98:d7:65:4a:a7:f0:0b:93:97:0e:e8:c2:8a:
         84:e4:77:6c:63:21:dd:5a:07:10:6c:28:3b:23:d8:2c:b2:52:
         21:24:e3:2b:af:90:f6:91:26:24:56:02:9a:b9:b0:d0:0d:7d:
         c0:7b:e2:17:69:9a:8b:cf:1a:0c:2b:28:93:72:47:fe:42:90:
         20:d4:a5:a3:5f:dc:d4:4e:da:43:e1:a2:a2:86:b6:04:c0:5e:
         b5:39:d6:af:1c:bd:8e:3b:cc:89:0a:97:cf:42:22:9b:28:8d:
         e3:46:0a:70:23:0b:f6:47:1b:bc:00:88:40:2d:8f:19:87:d8:
         63:0c:7d:5d:53:b3:06:97:1a:43:09:98:8f:f2:5e:d1:b7:b4:
         09:a4:05:76:49:05:01:f7:a7:97:b0:9b:91:da:1c:f8:5c:e1:
         79:b4:30:de
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTU4
QjM0NkZCMDMxQTgzREEyRjQzRjc2MUZBMDIwNDJENTIzRjUwRDAeFw0yMTA5Mjkw
MjQwNDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJFRDBCRjc2REY1M0Uz
RDRGMTMwQzgxRjNDM0Q1Mzk1RDQ0QzU1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr7A3SxemubbKW8tkHMf8ZHGmMOROxJdXPZ6AiX1CYAuNIrQq7
bSxQTlqFz/TUMeKIItnojept71iUEkE7fQJyuC5t6HLBnl4kCHg6FHQjQbYDR74y
0Cs9qipjv6QghCJKSPR4VkI45Qv/GOF/Z4kk7XWr+5+Np7jWdAh3FiRNNAtcVndh
Uj7wjej5VvTezp3sWGlLmhaWthhRq9dA4+b+V0+PQ8it9O4QjyPeOJjZPWeMC/lU
gBEZKFMZL8lQBWMWdb+7ShDa9XUO0XT0YuuibfMG4uptbHDPYAzhOJbbU6W5Q5Gt
mV+VB0IILBm7BesZ3YN97taYmsw3x1OBgMovAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUvtC/dt9T49TxMMgfPD1TldRMVUYwHwYDVR0jBBgwFoAUlYs0b7AxqD2i9D92
H6AgQtUj9Q0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdX
QU5HL2xZczBiN0F4cUQyaTlEOTJINkFnUXRVajlRMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvbFlzMGI3QXhxRDJpOUQ5Mkg2QWdRdFVqOVEwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdXQU5HL3Z0Q19kdDlUNDlU
eE1NZ2ZQRDFUbGRSTVZVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnggAwDQYJKoZIhvcNAQELBQADggEBACB57rauQR4BevbnL2xhQhiMan++
96PHtFUDqx2M1lejPB9GNf9VP/ABrDc7ZVTb8oeu5a5ztBhWDwnIwTHZtHresMEC
UognLl3oWNYrDZMJKJv9kV1EiPAhRBH6qL/CmNdlSqfwC5OXDujCioTkd2xjId1a
BxBsKDsj2CyyUiEk4yuvkPaRJiRWApq5sNANfcB74hdpmovPGgwrKJNyR/5CkCDU
paNf3NRO2kPhoqKGtgTAXrU51q8cvY47zIkKl89CIpsojeNGCnAjC/ZHG7wAiEAt
jxmH2GMMfV1TswaXGkMJmI/yXtG3tAmkBXZJBQH3p5ewm5HaHPhc4Xm0MN4=
-----END CERTIFICATE-----