Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-q62CYIq0qzzbS4zGWe53XXW4T8.roa
File:                     -q62CYIq0qzzbS4zGWe53XXW4T8.roa (raw, json)
Hash identifier:          gsUyXOjbjp9ehyds9OGI2GRvLg0XGl0UT13/zlMjkzI=
Subject key identifier:   FA:AE:B6:09:82:2A:D2:AC:F3:6D:2E:33:19:67:B9:DD:75:D6:E1:3F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B39
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-q62CYIq0qzzbS4zGWe53XXW4T8.roa
Signing time:             Tue 29 Sep 2020 10:08:10 +0000
ROA not before:           Tue 29 Sep 2020 10:08:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        124.6.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2873 (0xb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FAAEB609822AD2ACF36D2E331967B9DD75D6E13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:09:b3:c1:2e:ca:08:9a:88:86:34:d6:4f:
                    bb:b0:ce:4a:c4:5d:c5:1f:3f:48:d2:45:08:6f:7b:
                    59:1f:bc:13:64:35:6c:ce:83:b8:bc:06:2b:ec:5d:
                    ff:05:55:dd:4f:b4:7a:d0:11:00:30:e7:71:88:c0:
                    b2:51:f6:99:42:7a:72:29:3f:d7:44:dd:86:f0:f9:
                    f3:ec:e0:e0:db:d0:6b:13:ad:b4:a5:e7:52:b2:21:
                    b7:e1:e9:86:21:33:98:04:26:16:29:b9:fd:a4:ad:
                    0a:12:c9:ee:64:0c:5b:5f:21:9d:3c:d6:30:fc:60:
                    ce:22:5b:51:99:2e:79:03:e8:dc:7b:5a:62:c2:d7:
                    0e:cd:bd:3b:76:22:8d:3c:70:2b:b4:b4:39:7b:c4:
                    4f:ca:a0:da:b8:9f:60:08:41:5b:69:d8:e3:ee:59:
                    b0:04:fe:a6:5d:66:57:a6:d6:f3:d1:7b:11:ac:a7:
                    b3:96:00:85:2e:aa:a7:bd:ad:56:bb:4a:d9:b7:2b:
                    01:48:0c:56:08:4c:67:f7:63:49:f4:89:f9:1b:2b:
                    56:37:4b:f3:8c:58:12:fd:1c:e1:fd:a7:1f:10:d7:
                    32:ba:43:e7:13:4e:40:59:ed:7b:f5:28:f4:4a:7c:
                    ee:c5:4e:b4:1e:3d:98:d8:14:98:2b:96:b6:39:02:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:B6:09:82:2A:D2:AC:F3:6D:2E:33:19:67:B9:DD:75:D6:E1:3F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-q62CYIq0qzzbS4zGWe53XXW4T8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:db:fa:45:ee:5f:9a:fb:73:f8:e3:58:03:77:5e:39:e7:97:
         1a:64:a4:47:44:8d:85:f3:0d:4b:1b:a1:b6:3c:79:18:6f:d2:
         8c:f2:18:a4:fb:b3:14:34:fe:9a:49:41:b5:e8:6a:4e:7b:45:
         3b:e6:57:ac:d8:49:db:23:06:d4:e9:2f:72:d8:af:95:60:b4:
         ca:e4:26:48:db:4c:f2:02:24:f3:9d:81:ef:4a:cc:61:b7:a9:
         ec:63:c4:35:e5:b4:0d:6a:b4:70:e2:bb:9d:2c:7d:ee:8b:de:
         04:67:b4:2b:29:f7:7a:68:0a:e3:af:52:ff:a0:ba:0a:07:55:
         56:68:8a:68:f7:27:4a:fb:8d:fd:52:52:32:1a:50:f6:f5:4b:
         b1:fa:00:58:7c:14:a9:b3:33:25:05:cd:a7:29:1c:0a:f0:f2:
         3f:da:a0:9c:e3:d9:00:8c:fd:da:6c:ef:20:e9:30:1a:67:f9:
         a9:0d:f4:51:19:d2:1b:71:da:05:f9:dc:01:6b:66:dc:01:ce:
         c5:18:51:a2:38:6c:aa:13:02:b4:9f:5b:1b:57:a9:59:0c:ce:
         f2:95:b0:34:ca:22:cc:0c:5e:11:47:07:8c:86:21:5c:1c:7b:
         cf:f3:ce:8e:9c:17:b4:f7:d3:80:eb:5e:b5:7b:9e:64:23:da:
         e1:25:6d:d0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZBQUVCNjA5ODIyQUQy
QUNGMzZEMkUzMzE5NjdCOURENzVENkUxM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtHwmzwS7KCJqIhjTWT7uwzkrEXcUfP0jSRQhve1kfvBNkNWzO
g7i8BivsXf8FVd1PtHrQEQAw53GIwLJR9plCenIpP9dE3Ybw+fPs4ODb0GsTrbSl
51KyIbfh6YYhM5gEJhYpuf2krQoSye5kDFtfIZ081jD8YM4iW1GZLnkD6Nx7WmLC
1w7NvTt2Io08cCu0tDl7xE/KoNq4n2AIQVtp2OPuWbAE/qZdZlem1vPRexGsp7OW
AIUuqqe9rVa7Stm3KwFIDFYITGf3Y0n0ifkbK1Y3S/OMWBL9HOH9px8Q1zK6Q+cT
TkBZ7Xv1KPRKfO7FTrQePZjYFJgrlrY5AmihAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+q62CYIq0qzzbS4zGWe53XXW4T8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy1xNjJDWUlxMHF6emJTNHpH
V2U1M1hYVzRUOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8
BhQwDQYJKoZIhvcNAQELBQADggEBACPb+kXuX5r7c/jjWAN3XjnnlxpkpEdEjYXz
DUsbobY8eRhv0ozyGKT7sxQ0/ppJQbXoak57RTvmV6zYSdsjBtTpL3LYr5VgtMrk
JkjbTPICJPOdge9KzGG3qexjxDXltA1qtHDiu50sfe6L3gRntCsp93poCuOvUv+g
ugoHVVZoimj3J0r7jf1SUjIaUPb1S7H6AFh8FKmzMyUFzacpHArw8j/aoJzj2QCM
/dps7yDpMBpn+akN9FEZ0htx2gX53AFrZtwBzsUYUaI4bKoTArSfWxtXqVkMzvKV
sDTKIswMXhFHB4yGIVwce8/zzo6cF7T304DrXrV7nmQj2uElbdA=
-----END CERTIFICATE-----