Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa
File:                     BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa (raw, json)
Hash identifier:          jYWM2v7f+6ucLqaLysIyDtnH9QEfp/Q2YgJoe0m8/5A=
Subject key identifier:   05:82:04:AA:D8:CF:43:3B:B4:BF:40:0A:45:48:50:63:4C:15:34:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E72
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa
Signing time:             Tue 29 Sep 2020 09:55:44 +0000
ROA not before:           Tue 29 Sep 2020 09:55:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3698 (0xe72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=058204AAD8CF433BB4BF400A454850634C15346A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:ba:65:d8:09:e9:42:19:5a:f5:0c:22:e9:
                    42:8d:25:e6:da:6f:c6:ac:8d:b6:f2:37:57:7e:26:
                    87:58:df:9e:3f:84:c9:18:14:2c:4f:20:7a:50:77:
                    f4:64:26:1b:22:9d:4f:69:11:88:5b:30:31:d7:78:
                    19:25:d3:71:44:6e:68:e2:3a:cd:36:3a:dd:bf:5e:
                    70:c4:24:17:09:7e:83:af:0f:99:71:70:26:95:db:
                    5c:c7:32:aa:f9:b6:96:92:0d:ed:27:00:55:16:91:
                    cf:bb:ec:b5:b5:78:51:7b:05:dd:fc:f3:e8:b2:60:
                    40:b2:9c:5b:d5:63:fe:23:5e:97:52:6f:2c:c6:67:
                    01:a6:c5:7f:d1:45:e5:31:37:bd:36:42:77:78:0d:
                    59:f6:5c:6f:71:e3:b5:77:52:66:2d:31:d3:7b:36:
                    74:93:bf:41:56:0a:a7:eb:a3:43:58:2d:30:e8:7d:
                    0a:4e:a9:0c:fe:f0:0e:f0:15:99:55:46:03:1c:8a:
                    29:33:7d:1e:da:fc:ac:2b:c2:bb:eb:e6:11:50:8c:
                    04:0a:01:c2:c9:bc:14:f0:de:4a:84:7a:3b:e8:97:
                    56:b5:fb:3d:bc:70:e0:6e:2b:2a:3b:24:60:d3:be:
                    be:d4:09:2d:54:db:d0:3c:46:0f:e8:5c:b0:6b:3b:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:82:04:AA:D8:CF:43:3B:B4:BF:40:0A:45:48:50:63:4C:15:34:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:28:7a:c3:be:5a:8f:a7:59:da:00:87:a1:d6:8b:87:25:
         48:87:0b:c7:53:55:9c:ec:f8:d4:28:d0:e7:64:b9:6c:f9:d1:
         58:b8:2e:3a:07:e8:92:2f:29:60:b2:89:12:6a:ee:96:a8:59:
         34:c3:13:18:c1:98:fd:e9:2f:d1:88:76:60:89:2d:00:25:6e:
         ee:d8:ec:d4:16:48:b6:07:20:53:87:78:a8:6a:97:f7:95:e1:
         2b:87:b8:5c:96:1e:97:61:1d:cc:43:1f:e1:9f:3a:52:07:9a:
         d5:5c:90:1f:97:27:43:a7:81:14:a4:3a:5d:8b:5a:a1:0b:24:
         83:5d:54:5d:6e:a8:7e:79:94:aa:19:1c:38:af:5c:04:0f:80:
         86:fa:a9:10:c4:a2:65:42:ff:6e:2f:52:e7:9a:d3:7e:d9:fa:
         49:1f:9e:87:1d:9a:ea:cb:0c:72:77:3c:3e:a2:74:b4:34:cc:
         4d:76:be:b5:71:36:4d:64:92:89:91:01:0c:05:12:eb:32:30:
         65:95:3c:fe:0b:72:2c:23:cc:a3:e8:99:97:ad:8a:ce:a8:f0:
         5f:64:bb:48:96:39:b3:b2:22:c7:34:73:bd:72:2c:ff:7e:9d:
         1b:08:4d:9c:d7:14:0f:63:ec:50:a4:64:09:57:38:5a:7b:50:
         ca:74:3c:70
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA1ODIwNEFBRDhDRjQz
M0JCNEJGNDAwQTQ1NDg1MDYzNEMxNTM0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPrrpl2AnpQhla9Qwi6UKNJebab8asjbbyN1d+JodY354/hMkY
FCxPIHpQd/RkJhsinU9pEYhbMDHXeBkl03FEbmjiOs02Ot2/XnDEJBcJfoOvD5lx
cCaV21zHMqr5tpaSDe0nAFUWkc+77LW1eFF7Bd388+iyYECynFvVY/4jXpdSbyzG
ZwGmxX/RReUxN702Qnd4DVn2XG9x47V3UmYtMdN7NnSTv0FWCqfro0NYLTDofQpO
qQz+8A7wFZlVRgMciikzfR7a/Kwrwrvr5hFQjAQKAcLJvBTw3kqEejvol1a1+z28
cOBuKyo7JGDTvr7UCS1U29A8Rg/oXLBrOwmTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBYIEqtjPQzu0v0AKRUhQY0wVNGowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JZSUVxdGpQUXp1MHYwQUtS
VWhRWTB3Vk5Hby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sOAwDQYJKoZIhvcNAQELBQADggEBAKS5KHrDvlqPp1naAIeh1ouHJUiHC8dTVZzs
+NQo0OdkuWz50Vi4LjoH6JIvKWCyiRJq7paoWTTDExjBmP3pL9GIdmCJLQAlbu7Y
7NQWSLYHIFOHeKhql/eV4SuHuFyWHpdhHcxDH+GfOlIHmtVckB+XJ0OngRSkOl2L
WqELJINdVF1uqH55lKoZHDivXAQPgIb6qRDEomVC/24vUuea037Z+kkfnocdmurL
DHJ3PD6idLQ0zE12vrVxNk1kkomRAQwFEusyMGWVPP4LciwjzKPomZetis6o8F9k
u0iWObOyIsc0c71yLP9+nRsITZzXFA9j7FCkZAlXOFp7UMp0PHA=
-----END CERTIFICATE-----