Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/pYALLtMv5Qqg-xWkQrwfh-OyLuQ.roa
File:                     pYALLtMv5Qqg-xWkQrwfh-OyLuQ.roa (raw, json)
Hash identifier:          zU2z4zdCcDxfi47FeyE32VAqe+EyqXZKW8hu4D6EFG0=
Subject key identifier:   A5:80:0B:2E:D3:2F:E5:0A:A0:FB:15:A4:42:BC:1F:87:E3:B2:2E:E4
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       073C
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/pYALLtMv5Qqg-xWkQrwfh-OyLuQ.roa
Signing time:             Tue 29 Sep 2020 10:06:12 +0000
ROA not before:           Tue 29 Sep 2020 10:06:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.129.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Sep 29 10:06:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A5800B2ED32FE50AA0FB15A442BC1F87E3B22EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:a1:70:ba:a5:27:5f:2d:f8:31:b4:d9:b4:
                    02:1d:82:48:ce:cf:9c:6d:9c:7a:f8:e4:63:fd:08:
                    9b:80:4a:f4:f6:44:a6:b8:6a:76:bf:ae:7b:04:ea:
                    d5:53:f2:14:3a:49:24:a8:da:e0:86:0a:4e:a9:ab:
                    cf:0a:80:df:cd:0a:c5:7d:3c:48:7f:f5:d9:07:fa:
                    f0:53:49:00:b5:4b:93:78:4a:fb:ec:2c:25:ef:e1:
                    19:d3:88:d0:e6:93:f0:f8:69:ff:0f:c7:53:93:8c:
                    70:ca:6f:33:48:cc:14:f7:ad:f5:d8:5a:0d:ce:ad:
                    f6:96:38:22:7f:af:f0:88:76:4f:13:a8:3b:ca:3c:
                    a1:66:55:00:2c:f3:9c:f5:e3:a7:f2:0d:15:77:46:
                    47:b3:ef:33:38:b2:51:c5:db:e8:11:ff:1e:3c:db:
                    d3:1f:cc:24:54:28:91:58:59:b5:7f:f6:93:b8:bf:
                    4b:ae:60:08:f4:19:4d:54:68:91:48:f8:49:4d:3e:
                    47:dd:cb:fb:d9:44:87:ab:ab:9e:5f:8f:d5:8a:dc:
                    c0:06:5d:15:4c:cb:db:96:68:9c:ba:c6:51:d4:0b:
                    b9:bc:41:1b:93:cc:b9:36:6b:b7:3e:49:e2:5f:45:
                    48:0b:7a:b8:f9:81:50:1f:57:2e:04:61:cd:07:6b:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:80:0B:2E:D3:2F:E5:0A:A0:FB:15:A4:42:BC:1F:87:E3:B2:2E:E4
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/pYALLtMv5Qqg-xWkQrwfh-OyLuQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:5f:52:16:15:44:f2:a6:dc:58:ed:94:eb:7d:ae:27:cc:
         82:dc:71:c6:d2:be:44:39:ad:6d:a3:a4:1a:7b:c4:0d:42:3a:
         17:ea:0a:54:4a:dd:99:a0:17:f6:48:41:c6:63:5f:3e:c9:69:
         87:cf:a7:e2:74:08:55:29:a3:1c:01:3f:d9:b1:36:5b:c3:1a:
         88:79:77:7c:81:a8:d9:b1:ca:ec:f1:76:2b:e4:18:ba:a8:0d:
         9a:36:26:68:ae:e5:c7:0e:93:cd:d1:0a:ba:4b:7f:8f:c4:2a:
         31:97:94:33:89:50:3f:4f:61:07:1d:97:17:cf:e1:6f:56:4b:
         9e:16:fe:e7:18:34:24:7d:6b:d3:b8:ff:b4:7f:3e:de:e7:f7:
         58:df:dd:6a:40:d9:ce:04:2f:ef:57:02:da:ff:c2:04:4d:54:
         ff:c0:ab:6a:58:64:2a:0b:cd:b1:43:70:ea:da:5c:bf:56:f5:
         56:38:e7:0c:cf:8c:2d:9d:ad:ea:7e:e3:16:55:21:06:da:51:
         d4:43:a9:f1:2a:35:9c:ce:cb:7b:4e:f9:07:b2:e6:4d:f3:07:
         46:3d:48:63:92:a8:cb:c8:5a:b5:6e:f5:14:ee:7e:2d:c1:49:
         36:c2:81:ad:0c:c1:84:73:b4:dc:52:50:84:05:53:54:56:58:
         3b:84:4d:8d
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx
ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yMDA5Mjkx
MDA2MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE1ODAwQjJFRDMyRkU1
MEFBMEZCMTVBNDQyQkMxRjg3RTNCMjJFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQJKFwuqUnXy34MbTZtAIdgkjOz5xtnHr45GP9CJuASvT2RKa4
ana/rnsE6tVT8hQ6SSSo2uCGCk6pq88KgN/NCsV9PEh/9dkH+vBTSQC1S5N4Svvs
LCXv4RnTiNDmk/D4af8Px1OTjHDKbzNIzBT3rfXYWg3OrfaWOCJ/r/CIdk8TqDvK
PKFmVQAs85z146fyDRV3Rkez7zM4slHF2+gR/x4829MfzCRUKJFYWbV/9pO4v0uu
YAj0GU1UaJFI+ElNPkfdy/vZRIerq55fj9WK3MAGXRVMy9uWaJy6xlHUC7m8QRuT
zLk2a7c+SeJfRUgLerj5gVAfVy4EYc0Ha5yZAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUpYALLtMv5Qqg+xWkQrwfh+OyLuQwHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL
+wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP
VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9wWUFMTHRNdjVRcWct
eFdrUXJ3ZmgtT3lMdVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ4GIMA0GCSqGSIb3DQEBCwUAA4IBAQCC6V9SFhVE8qbcWO2U632uJ8yC3HHG
0r5EOa1to6Qae8QNQjoX6gpUSt2ZoBf2SEHGY18+yWmHz6fidAhVKaMcAT/ZsTZb
wxqIeXd8gajZscrs8XYr5Bi6qA2aNiZoruXHDpPN0Qq6S3+PxCoxl5QziVA/T2EH
HZcXz+FvVkueFv7nGDQkfWvTuP+0fz7e5/dY391qQNnOBC/vVwLa/8IETVT/wKtq
WGQqC82xQ3Dq2ly/VvVWOOcMz4wtna3qfuMWVSEG2lHUQ6nxKjWczst7TvkHsuZN
8wdGPUhjkqjLyFq1bvUU7n4twUk2woGtDMGEc7TcUlCEBVNUVlg7hE2N
-----END CERTIFICATE-----