Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/P4TL-DO7GECsaoPC07SOvLv6pJ4.roa
File:                     P4TL-DO7GECsaoPC07SOvLv6pJ4.roa (raw, json)
Hash identifier:          H/k12BhzWw4heJp8Wil8IagJdWY6aSCx0giQA8pdWLo=
Subject key identifier:   3F:84:CB:F8:33:BB:18:40:AC:6A:83:C2:D3:B4:8E:BC:BB:FA:A4:9E
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0FAE
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/P4TL-DO7GECsaoPC07SOvLv6pJ4.roa
Signing time:             Thu 19 May 2022 06:08:12 +0000
ROA not before:           Thu 19 May 2022 06:08:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18180
IP address blocks:        182.173.0.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4014 (0xfae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: May 19 06:08:12 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3F84CBF833BB1840AC6A83C2D3B48EBCBBFAA49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:84:a4:a3:13:21:0f:7a:19:30:c4:54:71:
                    f4:0e:83:fb:77:50:c2:91:b1:35:7e:95:45:e4:39:
                    c4:84:c8:a6:1d:a6:82:f6:78:bd:e6:6b:6a:29:99:
                    a5:50:43:c3:90:04:5d:29:bc:a0:f1:81:f0:dd:32:
                    81:9b:d8:46:d6:aa:76:bd:51:3f:c7:62:56:83:70:
                    4b:ee:45:20:67:45:b4:71:30:ac:1a:0e:3a:39:1c:
                    5a:58:59:dd:ee:e3:37:c8:02:3a:1e:02:44:82:64:
                    84:02:54:f1:33:9c:6a:10:c9:8b:f3:ea:97:59:cf:
                    1b:1b:50:98:26:f3:4b:37:9e:a6:8d:4f:2a:9f:a1:
                    82:7d:2f:1e:a8:2c:80:d1:4f:51:ee:3b:1b:c3:4c:
                    f4:a4:2a:62:a7:fc:0f:ac:b5:51:60:7b:c2:9d:9d:
                    e8:40:00:e8:8c:81:cc:cd:c9:0d:87:05:cb:bf:1c:
                    d7:c4:b7:c6:e6:2d:0b:ab:6f:c2:bc:1a:80:29:c9:
                    bc:de:c1:05:a9:52:c4:1d:cb:b8:52:1a:cd:e3:18:
                    25:e0:90:f2:c5:d3:fd:7e:64:5a:ed:7e:d5:b0:8f:
                    7d:ae:26:72:a9:21:bb:2c:48:8c:45:d5:47:99:f2:
                    9a:f3:75:af:df:f9:1d:15:90:1d:32:10:bd:bb:52:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:84:CB:F8:33:BB:18:40:AC:6A:83:C2:D3:B4:8E:BC:BB:FA:A4:9E
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/P4TL-DO7GECsaoPC07SOvLv6pJ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.173.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:dd:b5:c7:d1:1d:07:24:8c:b8:cc:e7:95:db:de:e5:36:
         7b:18:8b:e6:db:10:27:c9:8f:e2:ea:55:f6:28:f3:be:35:e9:
         c9:c3:13:b0:c4:26:e5:4f:9d:c9:e8:48:7c:07:f9:15:67:ee:
         3a:10:13:a6:4c:ca:cd:45:5a:11:bb:14:e6:a7:c1:4c:b2:fe:
         9f:ab:b4:e8:30:49:87:11:ce:6c:b2:9d:c0:0b:91:e0:37:2b:
         41:c2:3c:bc:9a:44:4f:7d:d9:d4:11:a0:5b:df:ca:0c:ef:d5:
         1e:a3:3d:7c:84:09:10:c2:ef:0c:03:51:82:c3:e0:88:39:57:
         e3:de:53:a9:5c:80:70:f5:5e:3d:88:ee:e3:a4:47:f5:b7:7f:
         6a:d0:bf:5a:f9:f1:b8:ea:99:43:71:0e:3c:8d:a2:aa:a5:de:
         7d:b7:bc:f6:e0:c0:0a:42:84:42:26:9f:d7:95:30:84:7b:4a:
         5b:45:eb:42:9d:69:f5:fc:52:dc:20:a6:b2:8c:55:32:bb:0f:
         90:8a:cd:e7:c8:46:02:82:5f:ce:64:6a:da:be:da:4a:86:a5:
         63:9b:0d:40:f1:91:dd:29:c6:e1:94:30:c0:ea:33:1d:d3:15:
         38:ad:52:a3:52:06:45:a4:c2:99:9b:aa:84:5f:8e:45:55:b0:
         c0:9f:1e:2e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMjA1MTkw
NjA4MTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNGODRDQkY4MzNCQjE4
NDBBQzZBODNDMkQzQjQ4RUJDQkJGQUE0OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIWYSkoxMhD3oZMMRUcfQOg/t3UMKRsTV+lUXkOcSEyKYdpoL2
eL3ma2opmaVQQ8OQBF0pvKDxgfDdMoGb2EbWqna9UT/HYlaDcEvuRSBnRbRxMKwa
Djo5HFpYWd3u4zfIAjoeAkSCZIQCVPEznGoQyYvz6pdZzxsbUJgm80s3nqaNTyqf
oYJ9Lx6oLIDRT1HuOxvDTPSkKmKn/A+stVFge8KdnehAAOiMgczNyQ2HBcu/HNfE
t8bmLQurb8K8GoApybzewQWpUsQdy7hSGs3jGCXgkPLF0/1+ZFrtftWwj32uJnKp
IbssSIxF1UeZ8przda/f+R0VkB0yEL27UiUvAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUP4TL+DO7GECsaoPC07SOvLv6pJ4wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9QNFRMLURPN0dFQ3Nhb1BDMDdT
T3ZMdjZwSjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtq0A
MA0GCSqGSIb3DQEBCwUAA4IBAQALGN21x9EdBySMuMznldve5TZ7GIvm2xAnyY/i
6lX2KPO+NenJwxOwxCblT53J6Eh8B/kVZ+46EBOmTMrNRVoRuxTmp8FMsv6fq7To
MEmHEc5ssp3AC5HgNytBwjy8mkRPfdnUEaBb38oM79Ueoz18hAkQwu8MA1GCw+CI
OVfj3lOpXIBw9V49iO7jpEf1t39q0L9a+fG46plDcQ48jaKqpd59t7z24MAKQoRC
Jp/XlTCEe0pbRetCnWn1/FLcIKayjFUyuw+Qis3nyEYCgl/OZGravtpKhqVjmw1A
8ZHdKcbhlDDA6jMd0xU4rVKjUgZFpMKZm6qEX45FVbDAnx4u
-----END CERTIFICATE-----