Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/JJabYG-rwGIQXmf5txWbZ4ohTkM.roa
File:                     JJabYG-rwGIQXmf5txWbZ4ohTkM.roa (raw, json)
Hash identifier:          gRAcPHnZsyE6H8auviA9w2wekfVTad1KB7o+xgsiPS8=
Subject key identifier:   24:96:9B:60:6F:AB:C0:62:10:5E:67:F9:B7:15:9B:67:8A:21:4E:43
Certificate issuer:       /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial:       0AB1
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/JJabYG-rwGIQXmf5txWbZ4ohTkM.roa
Signing time:             Thu 15 Sep 2022 02:41:47 +0000
ROA not before:           Thu 15 Sep 2022 02:41:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        2402:2580::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
        Validity
            Not Before: Sep 15 02:41:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=24969B606FABC062105E67F9B7159B678A214E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:be:88:e7:be:30:50:89:f7:b6:4e:f4:3c:
                    55:2c:ae:c0:76:76:2a:d0:10:3c:3b:f7:7c:30:38:
                    8a:e6:75:78:55:05:61:59:0e:98:2d:63:f7:ae:5b:
                    c5:40:f5:9d:ba:13:a3:37:9d:bd:01:98:f2:a8:ed:
                    2a:03:1c:fb:1f:34:62:d9:32:ba:8b:25:e9:ed:ca:
                    04:58:d9:6a:f7:d0:40:0a:31:9a:65:d0:0a:9a:f4:
                    75:3f:f2:75:a2:df:f0:3e:f0:6b:d6:33:76:40:5f:
                    fb:34:4a:ae:b6:09:26:d5:80:c6:18:0d:53:0f:c7:
                    d0:b4:b8:4d:21:5c:8f:85:a7:01:10:40:b0:73:a0:
                    8a:74:ee:84:a0:ba:df:91:b9:88:ba:0a:be:40:97:
                    03:eb:f9:5d:00:d5:8f:fd:f4:04:7f:a1:65:70:77:
                    fd:54:3e:cc:c5:d0:2d:90:15:4b:53:33:22:a0:82:
                    8d:91:f5:72:0a:64:42:12:04:fb:9a:95:1b:40:b8:
                    06:33:8d:f7:de:40:ae:8f:5d:47:19:06:82:56:e3:
                    4d:49:53:5b:7d:44:04:0d:80:04:9e:9c:84:a4:94:
                    6c:75:5e:9c:26:fb:71:df:7a:8b:2e:67:c7:92:a2:
                    d4:f4:24:83:a3:b9:64:7e:16:86:69:7c:8d:0a:b2:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:9B:60:6F:AB:C0:62:10:5E:67:F9:B7:15:9B:67:8A:21:4E:43
            X509v3 Authority Key Identifier:
                keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/JJabYG-rwGIQXmf5txWbZ4ohTkM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:cc:03:03:2f:1b:9d:bc:11:ed:cf:40:e9:61:4e:6c:3c:
         b2:8b:64:76:d8:9e:cd:c3:b8:c4:53:01:93:b5:7d:86:46:e1:
         1c:52:97:72:17:33:41:40:66:83:b4:4e:b6:79:c8:8c:75:37:
         fa:da:38:b0:45:60:b0:d7:43:5d:ef:6f:03:7b:a0:94:28:d2:
         1e:f2:44:00:1b:b3:79:71:22:ec:7d:13:37:43:e4:1d:85:b7:
         d0:1b:da:2e:fb:25:bd:69:fb:0e:b2:9f:8f:3f:6c:9e:99:38:
         2f:00:b6:d7:c7:0c:85:aa:b7:5e:3f:0f:55:36:c6:03:63:b9:
         17:3c:dc:c7:8e:94:a3:2b:92:09:79:c3:ee:7e:49:fa:ee:d5:
         05:ad:17:a8:31:c0:42:20:c2:ef:b4:7b:32:c9:00:74:e1:5b:
         20:2d:5f:c2:79:5d:78:72:fa:4d:25:44:ba:86:b8:67:bf:f3:
         9b:01:fe:24:94:4a:8c:3a:31:21:45:fa:a0:9b:95:a5:ff:c1:
         47:a6:23:dd:fa:1b:d9:ce:eb:fc:fe:93:0c:7d:9c:a1:88:8d:
         de:51:65:e8:3f:4c:4a:68:11:68:3c:4c:7e:ee:a3:23:de:3b:
         ab:1a:36:b5:2f:c6:40:00:8d:ae:1a:ac:ab:e5:5f:88:35:1f:
         23:45:f7:ff
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yMjA5MTUw
MjQxNDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI0OTY5QjYwNkZBQkMw
NjIxMDVFNjdGOUI3MTU5QjY3OEEyMTRFNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMyL6I574wUIn3tk70PFUsrsB2dirQEDw793wwOIrmdXhVBWFZ
DpgtY/euW8VA9Z26E6M3nb0BmPKo7SoDHPsfNGLZMrqLJentygRY2Wr30EAKMZpl
0Aqa9HU/8nWi3/A+8GvWM3ZAX/s0Sq62CSbVgMYYDVMPx9C0uE0hXI+FpwEQQLBz
oIp07oSgut+RuYi6Cr5AlwPr+V0A1Y/99AR/oWVwd/1UPszF0C2QFUtTMyKggo2R
9XIKZEISBPualRtAuAYzjffeQK6PXUcZBoJW401JU1t9RAQNgASenISklGx1Xpwm
+3HfeosuZ8eSotT0JIOjuWR+FoZpfI0KspGvAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUJJabYG+rwGIQXmf5txWbZ4ohTkMwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9KSmFiWUctcndHSVFYbWY1dHhX
Ylo0b2hUa00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIl
gDANBgkqhkiG9w0BAQsFAAOCAQEAJz/MAwMvG528Ee3PQOlhTmw8sotkdtiezcO4
xFMBk7V9hkbhHFKXchczQUBmg7ROtnnIjHU3+to4sEVgsNdDXe9vA3uglCjSHvJE
ABuzeXEi7H0TN0PkHYW30BvaLvslvWn7DrKfjz9snpk4LwC218cMhaq3Xj8PVTbG
A2O5Fzzcx46UoyuSCXnD7n5J+u7VBa0XqDHAQiDC77R7MskAdOFbIC1fwnldeHL6
TSVEuoa4Z7/zmwH+JJRKjDoxIUX6oJuVpf/BR6Yj3fob2c7r/P6TDH2coYiN3lFl
6D9MSmgRaDxMfu6jI947qxo2tS/GQACNrhqsq+VfiDUfI0X3/w==
-----END CERTIFICATE-----