Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tjyTeQo17DO-1kl9u9MhbLVaGeU.roa
File:                     tjyTeQo17DO-1kl9u9MhbLVaGeU.roa (raw, json)
Hash identifier:          UqJWj09rvpCnr3nHOmoh8AEAwhgDGPaZis392tOZ3r8=
Subject key identifier:   B6:3C:93:79:0A:35:EC:33:BE:D6:49:7D:BB:D3:21:6C:B5:5A:19:E5
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       08FA
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tjyTeQo17DO-1kl9u9MhbLVaGeU.roa
Signing time:             Sun 07 Feb 2021 11:37:14 +0000
ROA not before:           Sun 07 Feb 2021 11:37:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        180.204.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2298 (0x8fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Feb  7 11:37:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B63C93790A35EC33BED6497DBBD3216CB55A19E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5f:bc:12:66:a8:fb:be:7d:a9:c6:bd:ca:22:
                    00:41:76:d0:23:f5:1f:7b:91:5e:5f:ec:56:b9:34:
                    55:b6:41:b9:7a:50:2d:79:8e:30:76:9b:10:f8:e3:
                    e8:a7:4e:fc:33:b9:31:da:9a:cd:9b:c4:f2:b4:11:
                    09:5d:d6:15:3a:f2:57:ff:80:fb:0b:e2:c6:3e:73:
                    60:50:29:3f:2d:5e:01:d5:dd:b3:c7:f4:21:1d:6f:
                    2f:09:bc:8a:7f:32:b1:03:6d:23:5a:95:60:63:75:
                    fb:2f:9c:cc:78:23:6f:e4:43:1b:0e:be:70:87:92:
                    f3:16:4f:0f:10:f4:b9:96:dd:cb:90:c8:6a:8d:7b:
                    56:74:8d:27:f5:10:a5:32:87:f3:3a:f7:d8:99:1a:
                    b1:1e:0f:67:df:5b:24:f6:e9:7d:2e:d3:57:ed:1d:
                    1a:a2:69:d4:bb:de:b9:e1:b5:fc:56:fd:ae:d5:76:
                    ac:01:4f:51:38:c7:2e:72:da:19:17:fe:1b:d3:3c:
                    49:5e:98:c9:45:f8:33:4a:a0:54:40:29:2a:6f:92:
                    bb:e1:d7:ac:9f:22:0e:30:50:bf:e9:a6:f1:93:28:
                    10:d2:54:cd:d5:fe:6f:d3:ff:c6:42:da:bc:c1:92:
                    8a:33:f8:5f:fe:78:7d:a5:cc:66:26:7f:57:d1:0e:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:93:79:0A:35:EC:33:BE:D6:49:7D:BB:D3:21:6C:B5:5A:19:E5
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tjyTeQo17DO-1kl9u9MhbLVaGeU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         42:32:1f:d7:56:df:83:1a:d1:bc:3a:93:57:80:50:49:75:21:
         40:8d:77:e0:1d:04:99:34:74:02:87:d5:8f:0a:c1:76:20:52:
         a5:56:e8:98:ce:5e:89:63:48:41:1f:54:c6:e2:51:c1:36:3f:
         a3:aa:83:12:c6:a8:ba:20:aa:b5:84:01:42:ea:4f:6a:e2:da:
         f4:ba:f2:b2:65:1c:fa:87:b8:4f:66:59:18:ce:64:64:d8:b9:
         cc:10:8c:e3:98:55:4d:d6:62:04:ef:fd:13:f4:fe:b3:c6:d3:
         53:95:df:1f:3e:57:7a:7f:89:55:80:0a:d1:4c:a5:42:97:fc:
         0d:e2:c5:8c:53:d5:2c:9e:0e:14:7c:7a:60:05:e8:94:bf:d3:
         7d:6b:e1:c3:80:92:54:2d:e9:0a:6e:c7:52:5d:ed:2d:01:40:
         d0:28:b3:b6:00:f6:fe:54:67:28:a8:b4:a8:08:22:99:b7:d1:
         c1:d9:fa:bf:21:44:7e:7d:f1:61:9f:20:a8:95:e5:cf:57:76:
         92:26:80:c5:04:66:33:b2:7f:e2:30:c9:ac:c4:fc:6c:f8:0f:
         b1:aa:af:4f:f6:29:ea:fa:7e:ee:f2:b8:e3:e1:a5:09:25:2d:
         75:85:95:c7:d6:72:8b:7e:a6:ab:7f:01:c1:fa:ef:ca:89:94:
         71:5d:56:4d
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICCPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMTAyMDcx
MTM3MTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI2M0M5Mzc5MEEzNUVD
MzNCRUQ2NDk3REJCRDMyMTZDQjU1QTE5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfX7wSZqj7vn2pxr3KIgBBdtAj9R97kV5f7Fa5NFW2Qbl6UC15
jjB2mxD44+inTvwzuTHams2bxPK0EQld1hU68lf/gPsL4sY+c2BQKT8tXgHV3bPH
9CEdby8JvIp/MrEDbSNalWBjdfsvnMx4I2/kQxsOvnCHkvMWTw8Q9LmW3cuQyGqN
e1Z0jSf1EKUyh/M699iZGrEeD2ffWyT26X0u01ftHRqiadS73rnhtfxW/a7VdqwB
T1E4xy5y2hkX/hvTPElemMlF+DNKoFRAKSpvkrvh16yfIg4wUL/ppvGTKBDSVM3V
/m/T/8ZC2rzBkooz+F/+eH2lzGYmf1fRDvuHAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUtjyTeQo17DO+1kl9u9MhbLVaGeUwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3RqeVRl
UW8xN0RPLTFrbDl1OU1oYkxWYUdlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN
MAsEAgABMAUDAwK0zDANBgkqhkiG9w0BAQsFAAOCAQEAQjIf11bfgxrRvDqTV4BQ
SXUhQI134B0EmTR0AofVjwrBdiBSpVbomM5eiWNIQR9UxuJRwTY/o6qDEsaouiCq
tYQBQupPauLa9LrysmUc+oe4T2ZZGM5kZNi5zBCM45hVTdZiBO/9E/T+s8bTU5Xf
Hz5Xen+JVYAK0UylQpf8DeLFjFPVLJ4OFHx6YAXolL/TfWvhw4CSVC3pCm7HUl3t
LQFA0CiztgD2/lRnKKi0qAgimbfRwdn6vyFEfn3xYZ8gqJXlz1d2kiaAxQRmM7J/
4jDJrMT8bPgPsaqvT/Yp6vp+7vK44+GlCSUtdYWVx9Zyi36mq38BwfrvyomUcV1W
TQ==
-----END CERTIFICATE-----