Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/Manda_p7jvdOpNbWZcAVNc_HDvA.roa
File:                     Manda_p7jvdOpNbWZcAVNc_HDvA.roa (raw, json)
Hash identifier:          cUfszNp6NRK9NcjCWw5kBZMVuKYsW37D0lBwJC5cHkQ=
Subject key identifier:   31:A9:DD:6B:FA:7B:8E:F7:4E:A4:D6:D6:65:C0:15:35:CF:C7:0E:F0
Certificate issuer:       /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial:       08
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/Manda_p7jvdOpNbWZcAVNc_HDvA.roa
Signing time:             Wed 22 Jul 2020 12:01:11 +0000
ROA not before:           Wed 22 Jul 2020 12:01:11 +0000
ROA not after:            Thu 22 Jul 2021 06:22:36 +0000
asID:                     9678
IP address blocks:        2406:3040::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
        Validity
            Not Before: Jul 22 12:01:11 2020 GMT
            Not After : Jul 22 06:22:36 2021 GMT
        Subject: CN=31A9DD6BFA7B8EF74EA4D6D665C01535CFC70EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:f8:b6:e0:25:44:c7:ad:ef:a1:73:f3:38:
                    ff:7c:ca:37:a2:9a:e1:42:90:13:66:0d:5c:95:20:
                    e5:06:7b:2a:9e:49:de:ed:af:0f:a3:7e:44:26:58:
                    7a:b6:e8:a7:0f:35:60:86:f4:b4:18:69:d2:b6:ef:
                    0b:07:07:fc:46:04:2c:37:04:e5:d6:97:bb:f6:14:
                    2b:1b:ed:1c:51:a6:1d:7c:29:d6:00:55:2b:77:87:
                    71:55:07:f6:4e:6c:4b:7d:75:12:43:a0:2e:d5:7c:
                    0e:d5:77:cc:9d:e2:21:60:22:d7:82:30:b8:f2:34:
                    5d:fa:87:98:7a:63:51:00:bf:da:ee:4b:b2:44:0a:
                    76:23:60:64:f1:da:6a:c2:76:ed:41:ec:a6:49:03:
                    9a:e5:05:c0:0f:3a:68:7e:62:b1:05:fd:43:a5:1f:
                    b3:91:f2:19:d0:86:f6:7e:3a:12:f6:00:89:a0:5e:
                    75:e9:75:66:f6:56:4e:0b:d7:a0:27:cf:f2:53:93:
                    ff:03:86:1e:a9:32:88:b8:f5:1f:ea:a5:d2:15:13:
                    6a:1f:fb:9d:5f:92:9e:2c:97:f3:ec:4e:78:d7:8c:
                    70:65:90:16:fd:51:15:b1:f9:eb:30:59:16:64:1f:
                    38:18:b8:72:0f:78:11:14:7b:c7:1c:da:0e:97:97:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:DD:6B:FA:7B:8E:F7:4E:A4:D6:D6:65:C0:15:35:CF:C7:0E:F0
            X509v3 Authority Key Identifier:
                keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/Manda_p7jvdOpNbWZcAVNc_HDvA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:a9:fc:33:a8:79:d7:b7:af:52:ff:e9:8d:ce:8b:ea:2f:
         44:7f:fa:05:12:57:7e:ef:cf:51:e4:af:5a:f5:21:e4:d7:86:
         46:91:fc:64:b3:a4:5b:a5:d2:0a:23:47:13:73:6a:36:83:64:
         e2:69:81:4a:fe:d8:d5:05:af:0f:60:d7:9e:7a:1a:c0:8d:5c:
         0a:69:0f:8e:5d:5a:c8:96:2d:d9:4e:18:e7:c8:88:28:10:2e:
         5e:d6:87:e6:99:89:5e:9e:ee:fa:0a:76:e1:86:e4:23:42:5d:
         a6:02:1a:0e:6e:97:0e:72:25:e6:41:04:ae:b4:c8:1d:52:8d:
         e2:bf:2b:3e:9d:cb:06:79:f4:26:20:91:24:7f:cd:7d:38:15:
         34:f4:16:11:9a:c7:84:64:c1:2e:27:bc:53:11:30:54:41:68:
         c1:83:d9:b3:d0:19:ec:5c:8c:9d:b2:fa:5b:39:77:11:49:87:
         ab:57:1d:35:c0:88:a8:45:3c:95:e9:1e:f0:d6:04:f0:35:71:
         ec:ee:88:21:e1:36:74:56:69:0e:5c:5c:89:43:93:ae:99:af:
         4c:47:e9:05:86:f8:0b:b9:24:e3:f2:55:57:21:43:d4:97:c0:
         60:da:17:5e:b1:a1:5f:c0:ff:c3:1f:1c:c8:2e:29:dd:53:c0:
         e3:2f:ee:88
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMjgz
OUJGN0E2QzZCMTdFN0NGQ0IzNzM0QTM2QzBFOThDMzdBMUI3MB4XDTIwMDcyMjEy
MDExMVoXDTIxMDcyMjA2MjIzNlowMzExMC8GA1UEAxMoMzFBOURENkJGQTdCOEVG
NzRFQTRENkQ2NjVDMDE1MzVDRkM3MEVGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMYP+LbgJUTHre+hc/M4/3zKN6Ka4UKQE2YNXJUg5QZ7Kp5J3u2v
D6N+RCZYerbopw81YIb0tBhp0rbvCwcH/EYELDcE5daXu/YUKxvtHFGmHXwp1gBV
K3eHcVUH9k5sS311EkOgLtV8DtV3zJ3iIWAi14IwuPI0XfqHmHpjUQC/2u5LskQK
diNgZPHaasJ27UHspkkDmuUFwA86aH5isQX9Q6Ufs5HyGdCG9n46EvYAiaBedel1
ZvZWTgvXoCfP8lOT/wOGHqkyiLj1H+ql0hUTah/7nV+SniyX8+xOeNeMcGWQFv1R
FbH56zBZFmQfOBi4cg94ERR7xxzaDpeXffUCAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBQxqd1r+nuO906k1tZlwBU1z8cO8DAfBgNVHSMEGDAWgBSyg5v3psaxfnz8s3NK
NsDpjDehtzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TVU1BVFJB
L3NvT2I5NmJHc1g1OF9MTnpTamJBNll3M29iYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0Evc29PYjk2YkdzWDU4X0xOelNqYkE2WXczb2JjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VNQVRSQS9NYW5kYV9wN2p2ZE9wTmJX
WmNBVk5jX0hEdkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
JAYwQDANBgkqhkiG9w0BAQsFAAOCAQEAAwup/DOoede3r1L/6Y3Oi+ovRH/6BRJX
fu/PUeSvWvUh5NeGRpH8ZLOkW6XSCiNHE3NqNoNk4mmBSv7Y1QWvD2DXnnoawI1c
CmkPjl1ayJYt2U4Y58iIKBAuXtaH5pmJXp7u+gp24YbkI0JdpgIaDm6XDnIl5kEE
rrTIHVKN4r8rPp3LBnn0JiCRJH/NfTgVNPQWEZrHhGTBLie8UxEwVEFowYPZs9AZ
7FyMnbL6Wzl3EUmHq1cdNcCIqEU8leke8NYE8DVx7O6IIeE2dFZpDlxciUOTrpmv
TEfpBYb4C7kk4/JVVyFD1JfAYNoXXrGhX8D/wx8cyC4p3VPA4y/uiA==
-----END CERTIFICATE-----