Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/XcS_6fA4OueNY1xKUlykQ41zA-E.roa
File:                     XcS_6fA4OueNY1xKUlykQ41zA-E.roa (raw, json)
Hash identifier:          0CpodT4CWqg3w64/37VvRdapgQ1i0J4rSdwrwORWU90=
Subject key identifier:   5D:C4:BF:E9:F0:38:3A:E7:8D:63:5C:4A:52:5C:A4:43:8D:73:03:E1
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0C84
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/XcS_6fA4OueNY1xKUlykQ41zA-E.roa
Signing time:             Mon 16 Nov 2020 06:13:49 +0000
ROA not before:           Mon 16 Nov 2020 06:13:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:21::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:13:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5DC4BFE9F0383AE78D635C4A525CA4438D7303E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:b5:2e:d9:7f:cf:5f:ac:5f:5e:1a:e4:56:
                    55:5f:33:8a:2f:33:01:e2:94:52:2f:c0:02:cb:10:
                    df:f7:fb:ba:c3:b2:6a:df:a9:4a:8c:a7:21:4a:01:
                    2d:7e:13:c4:be:53:d5:9c:d4:5f:43:73:76:ef:03:
                    85:72:71:8c:84:55:7b:67:33:bc:b7:62:fb:33:36:
                    f5:33:5c:e0:43:83:9f:5d:49:18:fb:7b:99:05:b3:
                    81:d9:49:3d:8f:ac:35:66:f5:c8:bc:63:3c:31:41:
                    d0:98:ee:c7:7b:1b:a6:b0:3c:84:d3:a2:a0:cb:83:
                    24:cc:cb:6a:6b:cb:4f:2a:fc:41:4c:11:ae:73:bd:
                    fc:e9:38:36:cd:3e:d1:6f:dc:f5:fe:a4:df:36:f3:
                    a9:ca:8e:6f:5a:f4:f5:91:ac:e9:4f:33:16:9c:83:
                    e3:48:e7:da:00:a0:db:9c:e3:c7:4c:12:0b:b4:12:
                    45:62:77:d5:f6:be:c0:3b:b2:5f:2f:f6:05:3b:d6:
                    17:e3:32:24:9e:20:bc:58:70:7f:30:66:4a:0a:b8:
                    7d:2b:7c:d1:93:1a:45:db:a7:58:6b:18:96:ae:7c:
                    ee:d4:79:d2:63:47:b1:53:04:41:a0:35:d6:d1:ce:
                    f9:97:bf:02:1c:9f:54:ba:0e:cd:78:99:4b:b2:cf:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C4:BF:E9:F0:38:3A:E7:8D:63:5C:4A:52:5C:A4:43:8D:73:03:E1
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/XcS_6fA4OueNY1xKUlykQ41zA-E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:ae:cb:05:fa:4f:c5:d2:ed:d0:34:7c:26:e5:43:ca:bd:75:
         52:b3:b6:5e:fc:46:d8:7e:4b:c0:3f:18:1c:da:54:40:ac:68:
         46:33:b9:fe:6a:36:e9:11:3e:7e:50:08:92:cd:c7:9c:8f:48:
         9f:9e:7d:6e:68:0b:76:26:3a:24:26:f7:dd:ea:df:84:9e:03:
         ae:c6:78:47:8d:81:fb:e9:50:34:78:ac:58:9c:29:82:3e:c8:
         7e:22:d8:2c:fd:ce:21:9c:36:ea:bb:4f:f9:6c:91:b9:01:e0:
         62:d5:27:7d:17:90:2c:ae:7f:73:73:a7:ca:45:31:b6:13:5b:
         c9:b9:03:48:b8:a5:14:2f:7d:e7:db:70:81:2c:15:35:6f:08:
         d6:ec:39:ac:1f:4f:0b:d9:2b:e3:c0:01:da:77:70:43:32:c6:
         b3:79:84:fe:85:4d:2b:fc:14:9e:d8:2b:72:40:bd:d2:76:5e:
         c3:ed:ec:75:e8:bf:64:46:47:a8:c0:ed:10:9d:a6:8b:b4:54:
         36:9b:43:59:bc:fd:40:e5:38:6e:2b:92:34:10:f4:af:35:27:
         0b:2c:65:33:9c:c2:d0:63:bc:ea:a1:f0:9c:6e:64:3d:0c:8e:
         34:9b:3c:5a:63:7a:c8:e2:fb:7f:de:7e:ad:f7:b8:c7:82:b6:
         12:60:d9:77
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMDExMTYw
NjEzNDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVEQzRCRkU5RjAzODNB
RTc4RDYzNUM0QTUyNUNBNDQzOEQ3MzAzRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvCbUu2X/PX6xfXhrkVlVfM4ovMwHilFIvwALLEN/3+7rDsmrf
qUqMpyFKAS1+E8S+U9Wc1F9Dc3bvA4VycYyEVXtnM7y3YvszNvUzXOBDg59dSRj7
e5kFs4HZST2PrDVm9ci8YzwxQdCY7sd7G6awPITToqDLgyTMy2pry08q/EFMEa5z
vfzpODbNPtFv3PX+pN8286nKjm9a9PWRrOlPMxacg+NI59oAoNuc48dMEgu0EkVi
d9X2vsA7sl8v9gU71hfjMiSeILxYcH8wZkoKuH0rfNGTGkXbp1hrGJaufO7UedJj
R7FTBEGgNdbRzvmXvwIcn1S6Ds14mUuyz6LvAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUXcS/6fA4OueNY1xKUlykQ41zA+EwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9YY1NfNmZBNE91ZU5ZMXhLVWx5
a1E0MXpBLUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQB
eAAhMA0GCSqGSIb3DQEBCwUAA4IBAQBWrssF+k/F0u3QNHwm5UPKvXVSs7Ze/EbY
fkvAPxgc2lRArGhGM7n+ajbpET5+UAiSzcecj0ifnn1uaAt2JjokJvfd6t+EngOu
xnhHjYH76VA0eKxYnCmCPsh+Itgs/c4hnDbqu0/5bJG5AeBi1Sd9F5Asrn9zc6fK
RTG2E1vJuQNIuKUUL33n23CBLBU1bwjW7DmsH08L2SvjwAHad3BDMsazeYT+hU0r
/BSe2CtyQL3Sdl7D7ex16L9kRkeowO0QnaaLtFQ2m0NZvP1A5ThuK5I0EPSvNScL
LGUznMLQY7zqofCcbmQ9DI40mzxaY3rI4vt/3n6t97jHgrYSYNl3
-----END CERTIFICATE-----