Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/OoaEmP8yNF0x1OYy9-RpdW3Sq6g.roa
File:                     OoaEmP8yNF0x1OYy9-RpdW3Sq6g.roa (raw, json)
Hash identifier:          KiPoJVMPOLo8wpkda+8XHlE5LOyMPHuoP2LfOKe7q9k=
Subject key identifier:   3A:86:84:98:FF:32:34:5D:31:D4:E6:32:F7:E4:69:75:6D:D2:AB:A8
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       078A
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/OoaEmP8yNF0x1OYy9-RpdW3Sq6g.roa
Signing time:             Tue 29 Sep 2020 10:06:25 +0000
ROA not before:           Tue 29 Sep 2020 10:06:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        124.29.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930 (0x78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3A868498FF32345D31D4E632F7E469756DD2ABA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4c:96:52:d5:73:cf:0c:22:93:4d:59:f9:e4:
                    b2:4c:78:28:f1:05:c0:85:d3:61:1f:06:80:10:af:
                    6a:b4:a8:43:ab:f5:a1:25:07:ce:19:f6:26:4a:f4:
                    48:44:fe:7d:2a:bb:58:4e:76:e7:21:30:45:6d:3c:
                    a4:56:b6:53:1f:69:c5:98:54:78:e9:d2:ba:70:7a:
                    e2:53:8b:4b:6c:44:b8:72:cd:98:35:eb:c5:24:25:
                    84:1d:d1:f5:ab:5f:28:c6:e6:80:9e:89:80:1b:88:
                    32:72:2e:c3:7f:45:d1:43:2f:a7:6d:28:47:27:fc:
                    c6:29:12:85:8d:dc:17:f7:0e:23:02:dc:61:c3:db:
                    d5:9a:f8:34:f0:11:ef:7b:a7:9e:3b:56:14:3c:6e:
                    96:ef:56:90:26:22:c1:66:07:1d:41:13:e4:9d:b4:
                    f6:18:6f:04:5c:4b:af:c2:a4:e0:67:e4:fa:65:ed:
                    bf:dc:1b:b1:84:30:58:63:e1:71:90:81:60:24:ac:
                    b0:2f:fa:81:05:fa:02:dc:a6:67:43:9b:5a:1f:37:
                    2b:08:33:81:c9:b7:21:0a:e4:fe:85:d7:f3:8e:d0:
                    cd:a6:c2:f3:d2:d2:d1:a9:de:0b:bc:7d:5b:e4:6c:
                    ea:88:35:5e:8f:34:98:ca:01:a8:12:11:4c:7a:56:
                    ca:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:84:98:FF:32:34:5D:31:D4:E6:32:F7:E4:69:75:6D:D2:AB:A8
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/OoaEmP8yNF0x1OYy9-RpdW3Sq6g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:ec:ef:28:e8:8a:9e:7f:84:49:9a:7e:30:3d:d5:dc:a1:61:
         47:66:1c:73:95:5b:2b:2e:40:1a:58:75:9b:94:79:15:95:31:
         8c:b4:e6:26:0d:f5:54:78:00:17:e4:e0:ae:48:76:c8:39:c6:
         30:2b:d2:78:ab:e9:ae:0e:4b:66:40:87:d7:a9:fe:d1:d2:83:
         cf:9b:1b:22:a8:cd:3d:53:2d:5f:59:90:7c:aa:23:16:a7:c0:
         a9:9b:83:d5:f0:77:70:31:03:d1:38:d3:ff:19:22:2b:94:3e:
         08:9c:77:82:6a:0b:03:4b:cd:f2:03:6c:f2:fc:d7:52:45:90:
         0a:80:ba:61:e5:ac:01:6b:03:36:8c:61:16:6a:a2:30:a8:bd:
         e5:0e:d6:e0:5e:c9:eb:b0:c6:6d:16:13:f2:e5:cf:72:d8:74:
         e7:df:a6:95:63:3f:96:cb:45:e1:b3:31:68:be:72:13:c0:3d:
         4e:2c:29:95:47:48:f4:99:90:8f:71:d9:d5:3a:6e:6b:57:a8:
         cf:ce:b1:78:10:63:c8:11:5c:80:6f:a1:2a:14:be:ce:18:92:
         58:d8:56:4a:7b:42:2d:1f:ed:4c:0b:81:c2:9a:7f:22:3e:45:
         01:07:c4:40:c7:cc:e3:27:06:32:43:c6:67:36:f8:4e:0a:55:
         8e:f3:65:34
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICB4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMDA5Mjkx
MDA2MjVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNBODY4NDk4RkYzMjM0
NUQzMUQ0RTYzMkY3RTQ2OTc1NkREMkFCQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtTJZS1XPPDCKTTVn55LJMeCjxBcCF02EfBoAQr2q0qEOr9aEl
B84Z9iZK9EhE/n0qu1hOduchMEVtPKRWtlMfacWYVHjp0rpweuJTi0tsRLhyzZg1
68UkJYQd0fWrXyjG5oCeiYAbiDJyLsN/RdFDL6dtKEcn/MYpEoWN3Bf3DiMC3GHD
29Wa+DTwEe97p547VhQ8bpbvVpAmIsFmBx1BE+SdtPYYbwRcS6/CpOBn5Ppl7b/c
G7GEMFhj4XGQgWAkrLAv+oEF+gLcpmdDm1ofNysIM4HJtyEK5P6F1/OO0M2mwvPS
0tGp3gu8fVvkbOqINV6PNJjKAagSEUx6Vsr/AgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUOoaEmP8yNF0x1OYy9+RpdW3Sq6gwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL09vYUVt
UDh5TkYweDFPWXk5LVJwZFczU3E2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAV8HaAwDQYJKoZIhvcNAQELBQADggEBAMXs7yjoip5/hEmafjA9
1dyhYUdmHHOVWysuQBpYdZuUeRWVMYy05iYN9VR4ABfk4K5Idsg5xjAr0nir6a4O
S2ZAh9ep/tHSg8+bGyKozT1TLV9ZkHyqIxanwKmbg9Xwd3AxA9E40/8ZIiuUPgic
d4JqCwNLzfIDbPL811JFkAqAumHlrAFrAzaMYRZqojCoveUO1uBeyeuwxm0WE/Ll
z3LYdOffppVjP5bLReGzMWi+chPAPU4sKZVHSPSZkI9x2dU6bmtXqM/OsXgQY8gR
XIBvoSoUvs4YkljYVkp7Qi0f7UwLgcKafyI+RQEHxEDHzOMnBjJDxmc2+E4KVY7z
ZTQ=
-----END CERTIFICATE-----