Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mdMy6t6tlMWO-jyxFyr758AYS54.roa
File:                     mdMy6t6tlMWO-jyxFyr758AYS54.roa (raw, json)
Hash identifier:          ab0vf9Z9lcQH0qC4ZnpW7bUVV24w7CBjpujSE2HV2ss=
Subject key identifier:   99:D3:32:EA:DE:AD:94:C5:8E:FA:3C:B1:17:2A:FB:E7:C0:18:4B:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E53
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mdMy6t6tlMWO-jyxFyr758AYS54.roa
Signing time:             Tue 29 Sep 2020 09:55:36 +0000
ROA not before:           Tue 29 Sep 2020 09:55:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3667 (0xe53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=99D332EADEAD94C58EFA3CB1172AFBE7C0184B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:0a:fa:73:d4:43:6f:da:2a:48:cb:03:12:
                    fb:32:d6:c9:83:ee:02:ea:9b:da:3d:63:2b:5e:e4:
                    d9:3f:fc:b7:90:00:c7:e3:7b:a5:53:7f:2a:59:55:
                    fb:51:6a:2f:d6:4b:e4:6d:93:32:5f:e8:86:8b:00:
                    ec:57:88:a3:2e:62:17:70:a3:81:ae:42:c0:0a:ed:
                    f3:47:63:cc:2c:bb:1e:97:72:fa:03:65:18:8a:bb:
                    f0:5a:6a:5e:b1:38:39:0d:d0:8c:5f:27:4b:44:e1:
                    3c:db:85:18:16:c5:80:7c:f6:8d:98:af:95:0f:9f:
                    d2:5d:7e:bd:f2:11:bf:f2:6d:22:3a:01:5f:47:71:
                    3c:91:fb:ad:d1:81:9a:26:22:31:e4:40:33:e5:55:
                    fd:58:33:5d:e1:7c:dc:c6:f8:4d:de:44:4f:1d:0a:
                    5b:f5:8b:ae:5a:f0:8b:53:69:88:0a:32:04:76:8f:
                    9e:1a:45:df:97:af:ae:3f:35:97:ea:84:4f:59:bd:
                    1c:c8:96:4a:56:4f:53:17:8c:0f:d1:d4:bf:a5:52:
                    aa:e5:9e:06:d2:9f:e0:1b:9b:04:6e:c3:53:1e:25:
                    26:ee:17:13:c8:08:ca:1d:55:2f:1c:0f:f2:b8:fb:
                    78:ff:c2:60:50:3c:13:26:f3:f1:bb:fb:c6:61:f3:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:32:EA:DE:AD:94:C5:8E:FA:3C:B1:17:2A:FB:E7:C0:18:4B:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mdMy6t6tlMWO-jyxFyr758AYS54.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:82:46:bf:4b:26:6b:9e:0e:7f:df:96:e6:9a:26:a8:56:
         7f:f9:b1:07:1e:f0:3f:39:b2:b1:3e:7b:1b:70:1d:23:c4:61:
         06:fc:58:ab:24:57:43:fe:89:91:a4:9f:08:31:c0:a1:ba:13:
         6e:79:88:8c:52:52:56:6b:81:fa:1e:9d:e4:3a:cd:53:d1:23:
         21:4e:b6:9a:11:9e:25:cd:51:ef:0e:ae:1c:d1:86:97:92:0a:
         02:0e:c0:1b:0a:77:d2:84:5e:05:34:72:3b:d2:02:3c:5b:c0:
         5f:f5:1a:1b:df:d2:2d:97:88:22:a5:23:cc:9d:fb:2d:ae:e2:
         5f:02:b5:1a:b5:72:c5:23:65:3c:4b:a6:0d:c6:b9:eb:c9:26:
         a2:b9:58:7f:57:73:46:53:fd:1b:f3:b7:44:26:b6:80:ef:a9:
         02:5b:f1:99:fc:63:ba:d5:2c:05:9b:ce:2a:8d:36:43:5d:74:
         cc:f3:8c:89:c4:ec:78:ea:23:c9:43:81:a7:24:53:09:32:bc:
         22:f0:65:cb:ff:30:09:e0:cc:46:08:3e:c3:0c:2f:21:b7:d3:
         ee:f8:0e:2a:a8:17:83:23:b8:65:98:54:d1:c6:1b:d9:54:cd:
         37:a8:91:40:59:e9:c7:43:59:46:a0:5f:cf:18:c2:f4:b8:25:
         bf:8e:46:77
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MzZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk5RDMzMkVBREVBRDk0
QzU4RUZBM0NCMTE3MkFGQkU3QzAxODRCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkrwr6c9RDb9oqSMsDEvsy1smD7gLqm9o9Yyte5Nk//LeQAMfj
e6VTfypZVftRai/WS+RtkzJf6IaLAOxXiKMuYhdwo4GuQsAK7fNHY8wsux6XcvoD
ZRiKu/Baal6xODkN0IxfJ0tE4TzbhRgWxYB89o2Yr5UPn9Jdfr3yEb/ybSI6AV9H
cTyR+63RgZomIjHkQDPlVf1YM13hfNzG+E3eRE8dClv1i65a8ItTaYgKMgR2j54a
Rd+Xr64/NZfqhE9ZvRzIlkpWT1MXjA/R1L+lUqrlngbSn+AbmwRuw1MeJSbuFxPI
CModVS8cD/K4+3j/wmBQPBMm8/G7+8Zh88iJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmdMy6t6tlMWO+jyxFyr758AYS54wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21kTXk2dDZ0bE1XTy1qeXhG
eXI3NThBWVM1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6dQwDQYJKoZIhvcNAQELBQADggEBACGngka/SyZrng5/35bmmiaoVn/5sQce8D85
srE+extwHSPEYQb8WKskV0P+iZGknwgxwKG6E255iIxSUlZrgfoeneQ6zVPRIyFO
tpoRniXNUe8OrhzRhpeSCgIOwBsKd9KEXgU0cjvSAjxbwF/1Ghvf0i2XiCKlI8yd
+y2u4l8CtRq1csUjZTxLpg3GuevJJqK5WH9Xc0ZT/Rvzt0QmtoDvqQJb8Zn8Y7rV
LAWbziqNNkNddMzzjInE7HjqI8lDgackUwkyvCLwZcv/MAngzEYIPsMMLyG30+74
DiqoF4MjuGWYVNHGG9lUzTeokUBZ6cdDWUagX88YwvS4Jb+ORnc=
-----END CERTIFICATE-----