Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WQTfP-Z46WAMvmPBUsB7smcZaFg.roa
File:                     WQTfP-Z46WAMvmPBUsB7smcZaFg.roa (raw, json)
Hash identifier:          VxZbf9P3nb2cclSjtTBQl+gAXbiJXiniRvNt+gSWanY=
Subject key identifier:   59:04:DF:3F:E6:78:E9:60:0C:BE:63:C1:52:C0:7B:B2:67:19:68:58
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0CC0
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WQTfP-Z46WAMvmPBUsB7smcZaFg.roa
Signing time:             Mon 16 Nov 2020 06:51:22 +0000
ROA not before:           Mon 16 Nov 2020 06:51:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:51::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:51:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5904DF3FE678E9600CBE63C152C07BB267196858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:45:c5:5b:a8:2a:89:71:01:26:77:72:7e:
                    7e:5a:c2:e6:b8:db:9b:7b:ba:a7:c4:a7:1b:e1:c2:
                    ad:37:ac:73:e7:6f:f4:a7:27:1b:90:7a:5d:78:6b:
                    99:4e:9b:f7:fe:e3:94:0d:fe:2a:c4:c5:5c:aa:ef:
                    f5:0c:d8:fd:f2:a5:f1:86:51:e1:d0:52:5e:b4:84:
                    5c:c0:23:aa:b7:ef:15:b5:fa:ea:18:f0:01:8c:99:
                    63:ab:1e:64:c2:7c:de:c3:61:4e:c9:76:39:3f:f0:
                    a1:30:b3:ce:bf:78:91:50:0e:71:61:99:5e:8b:ad:
                    00:96:b8:23:82:f3:d6:ba:53:42:ae:9e:c5:29:33:
                    11:ff:92:ab:62:71:33:65:ac:7a:99:aa:e7:d8:58:
                    bb:f8:a6:83:49:15:90:0d:7e:cc:40:fc:ac:b5:4d:
                    5c:24:2e:f0:bf:01:96:a0:65:9d:41:2a:3e:a8:f3:
                    f8:81:df:8f:5c:c4:78:9c:49:49:20:77:be:dd:1b:
                    98:53:35:06:c5:c5:0f:00:9d:76:10:c6:d1:d0:6d:
                    2a:39:1c:3f:8a:38:68:e5:ee:1d:8a:dc:d7:91:70:
                    be:bc:23:90:e2:ee:28:c8:c8:99:34:30:6d:26:3c:
                    3d:27:ca:ff:0e:1d:69:ff:82:f3:3f:79:81:6c:33:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:DF:3F:E6:78:E9:60:0C:BE:63:C1:52:C0:7B:B2:67:19:68:58
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WQTfP-Z46WAMvmPBUsB7smcZaFg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:51::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:4e:4c:d8:5a:1c:42:82:00:1f:b4:86:69:24:5a:08:ca:
         58:18:03:49:2c:d0:08:0d:fb:b6:3b:c0:da:08:ad:09:cf:3b:
         64:53:bb:71:f2:f2:01:e8:30:a7:1c:09:7a:fa:4f:dc:73:ac:
         d6:d8:7e:97:da:c3:8c:c0:c5:2c:f5:51:d5:f6:97:01:5a:aa:
         05:50:47:dd:d7:5b:87:9a:d9:1c:49:f0:66:d9:d2:28:12:a9:
         43:11:f4:cf:10:4b:25:f2:d0:4f:c7:7e:68:a6:b4:6d:61:e9:
         dd:71:b8:df:66:3e:47:74:4f:51:c6:17:85:c4:77:d5:af:ac:
         6f:fb:a7:91:6c:fd:af:70:cc:e9:24:32:2d:44:b5:08:f1:88:
         74:88:2a:45:86:6b:cd:df:61:6b:c5:b4:41:7f:d4:62:76:10:
         4c:a9:17:35:80:42:4e:20:0a:73:10:a9:d3:46:37:c3:16:32:
         f3:db:ad:93:60:8b:8d:05:a1:97:1c:b3:5e:be:60:ff:84:2c:
         eb:86:4f:79:01:2a:20:5e:1e:cc:f6:7b:81:38:9f:ce:12:dd:
         82:f8:bd:cf:47:81:fc:51:69:72:a9:50:00:f4:23:0f:6d:ec:
         02:93:58:a7:11:6e:f9:2a:db:c9:a6:ef:48:7f:e9:81:2e:1c:
         d6:a5:cd:f9
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDExMTYw
NjUxMjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU5MDRERjNGRTY3OEU5
NjAwQ0JFNjNDMTUyQzA3QkIyNjcxOTY4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj5EXFW6gqiXEBJndyfn5awua425t7uqfEpxvhwq03rHPnb/Sn
JxuQel14a5lOm/f+45QN/irExVyq7/UM2P3ypfGGUeHQUl60hFzAI6q37xW1+uoY
8AGMmWOrHmTCfN7DYU7Jdjk/8KEws86/eJFQDnFhmV6LrQCWuCOC89a6U0KunsUp
MxH/kqticTNlrHqZqufYWLv4poNJFZANfsxA/Ky1TVwkLvC/AZagZZ1BKj6o8/iB
349cxHicSUkgd77dG5hTNQbFxQ8AnXYQxtHQbSo5HD+KOGjl7h2K3NeRcL68I5Di
7ijIyJk0MG0mPD0nyv8OHWn/gvM/eYFsM+A9AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUWQTfP+Z46WAMvmPBUsB7smcZaFgwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9XUVRmUC1aNDZXQU12bVBCVXNC
N3NtY1phRmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQB
eABRMA0GCSqGSIb3DQEBCwUAA4IBAQAOMU5M2FocQoIAH7SGaSRaCMpYGANJLNAI
Dfu2O8DaCK0JzztkU7tx8vIB6DCnHAl6+k/cc6zW2H6X2sOMwMUs9VHV9pcBWqoF
UEfd11uHmtkcSfBm2dIoEqlDEfTPEEsl8tBPx35oprRtYendcbjfZj5HdE9RxheF
xHfVr6xv+6eRbP2vcMzpJDItRLUI8Yh0iCpFhmvN32FrxbRBf9RidhBMqRc1gEJO
IApzEKnTRjfDFjLz262TYIuNBaGXHLNevmD/hCzrhk95ASogXh7M9nuBOJ/OEt2C
+L3PR4H8UWlyqVAA9CMPbewCk1inEW75KtvJpu9If+mBLhzWpc35
-----END CERTIFICATE-----