Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa
File:                     rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa (raw, json)
Hash identifier:          M5KiUsrKUk+ncsSXnjuM5/Rhh0C0zNpMAWCSWzrdjgs=
Subject key identifier:   AD:DC:CC:CC:FE:69:47:43:26:94:E6:5E:BB:86:D9:E6:5F:6D:34:4D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       13D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa
Signing time:             Sun 07 Feb 2021 11:56:22 +0000
ROA not before:           Sun 07 Feb 2021 11:56:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.84.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5075 (0x13d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:56:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ADDCCCCCFE6947432694E65EBB86D9E65F6D344D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:38:aa:61:5a:e8:5d:66:8d:a8:d5:e0:76:
                    1d:5a:fd:67:2d:3d:f4:a7:48:10:60:c4:ae:b8:92:
                    53:d1:b1:45:a0:86:23:bd:11:f7:a6:3e:f3:a6:88:
                    3f:3c:b3:28:65:7b:3b:21:cd:af:fe:a9:18:8f:6d:
                    18:3f:30:5a:f4:c1:30:62:e4:6b:bb:d8:b9:3c:7a:
                    05:08:82:d1:16:03:73:93:02:3f:bd:76:a8:0b:7f:
                    20:86:8f:26:b5:0e:0c:04:75:e1:76:c6:17:86:84:
                    07:4a:a6:08:f5:26:4c:23:9a:45:05:5e:7f:d4:f6:
                    cc:e6:55:3f:fe:97:05:66:9f:26:d0:c3:ed:34:95:
                    2b:30:f3:11:be:2d:40:1c:f2:11:7f:07:8a:5b:ef:
                    03:d4:b7:d4:9a:07:9a:ef:6f:92:50:96:75:90:00:
                    6d:70:6d:55:e4:34:48:b4:54:3f:bd:d2:8a:53:7f:
                    6b:0e:77:85:c9:cc:89:79:67:56:d6:7f:d7:81:85:
                    f8:c2:89:8e:4c:14:2e:57:bb:f9:81:a8:06:81:6f:
                    39:e0:fc:6f:06:34:af:af:38:cd:3c:79:a8:d0:cd:
                    dc:2c:6d:77:51:79:7c:15:b7:f6:36:99:dd:9c:09:
                    3e:b4:cc:7e:d6:b3:02:47:32:e9:19:f9:ac:d6:61:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DC:CC:CC:FE:69:47:43:26:94:E6:5E:BB:86:D9:E6:5F:6D:34:4D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:11:28:55:53:69:cb:84:3a:48:a1:11:69:31:5a:f0:25:5a:
         6f:d4:54:98:93:05:4f:f9:fd:2f:9d:c1:a7:b3:e4:89:fb:12:
         da:1c:20:70:df:44:3f:7a:8e:dc:48:f6:07:d0:c4:50:af:aa:
         8f:75:4a:fc:83:d0:db:db:6a:e3:0c:5a:98:bf:bb:08:6f:74:
         d8:6f:03:41:dc:83:26:83:5c:95:5f:64:e9:6d:cb:45:24:1d:
         e9:dd:1e:9e:74:50:63:7b:3a:8c:bf:a9:7a:a1:4d:11:ed:77:
         ce:19:f2:28:0f:eb:97:62:a0:07:01:97:bb:41:42:c9:61:64:
         71:13:9e:47:d5:81:db:ad:43:9f:aa:03:87:c5:7a:57:4f:ad:
         bb:c4:93:86:cc:ab:77:d9:8e:c4:a9:16:92:c0:27:76:24:05:
         4b:17:ba:90:e0:d0:7d:d5:22:fa:20:03:50:09:25:0d:ef:b8:
         8e:a5:e5:2e:0a:89:80:5c:ef:a0:df:e0:79:05:b1:47:5e:f0:
         cd:05:5f:69:87:40:a1:e9:35:5f:90:c8:fc:f9:28:69:7b:fa:
         bd:25:88:c9:62:58:61:47:58:95:31:eb:c2:62:1d:cb:d1:1a:
         83:f9:e3:55:d3:a8:8a:40:fb:b6:ac:54:d0:8d:2a:33:96:07:
         44:0c:2d:43
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE9MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFERENDQ0NDRkU2OTQ3
NDMyNjk0RTY1RUJCODZEOUU2NUY2RDM0NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOgDiqYVroXWaNqNXgdh1a/WctPfSnSBBgxK64klPRsUWghiO9
EfemPvOmiD88syhlezshza/+qRiPbRg/MFr0wTBi5Gu72Lk8egUIgtEWA3OTAj+9
dqgLfyCGjya1DgwEdeF2xheGhAdKpgj1JkwjmkUFXn/U9szmVT/+lwVmnybQw+00
lSsw8xG+LUAc8hF/B4pb7wPUt9SaB5rvb5JQlnWQAG1wbVXkNEi0VD+90opTf2sO
d4XJzIl5Z1bWf9eBhfjCiY5MFC5Xu/mBqAaBbzng/G8GNK+vOM08eajQzdwsbXdR
eXwVt/Y2md2cCT60zH7WswJHMukZ+azWYUoPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrdzMzP5pR0MmlOZeu4bZ5l9tNE0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Jkek16UDVwUjBNbWxPWmV1
NGJaNWw5dE5FMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6VQwDQYJKoZIhvcNAQELBQADggEBABMRKFVTacuEOkihEWkxWvAlWm/UVJiTBU/5
/S+dwaez5In7EtocIHDfRD96jtxI9gfQxFCvqo91SvyD0NvbauMMWpi/uwhvdNhv
A0HcgyaDXJVfZOlty0UkHendHp50UGN7Ooy/qXqhTRHtd84Z8igP65dioAcBl7tB
QslhZHETnkfVgdutQ5+qA4fFeldPrbvEk4bMq3fZjsSpFpLAJ3YkBUsXupDg0H3V
IvogA1AJJQ3vuI6l5S4KiYBc76Df4HkFsUde8M0FX2mHQKHpNV+QyPz5KGl7+r0l
iMliWGFHWJUx68JiHcvRGoP541XTqIpA+7asVNCNKjOWB0QMLUM=
-----END CERTIFICATE-----