Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2qpXUTkgV5oe5WOkZ077xlMxpTw.roa
File:                     2qpXUTkgV5oe5WOkZ077xlMxpTw.roa (raw, json)
Hash identifier:          rQCsaMauvcO12Yt3p+CJMlDGVDvHHbNWVaGgY8bmDx4=
Subject key identifier:   DA:AA:57:51:39:20:57:9A:1E:E5:63:A4:67:4E:FB:C6:53:31:A5:3C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1337
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2qpXUTkgV5oe5WOkZ077xlMxpTw.roa
Signing time:             Wed 29 Sep 2021 02:55:29 +0000
ROA not before:           Wed 29 Sep 2021 02:55:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4662
IP address blocks:        61.64.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4919 (0x1337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DAAA57513920579A1EE563A4674EFBC65331A53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:24:2c:80:db:e2:95:c8:cd:6d:d1:ac:d6:
                    1a:c2:f2:61:39:73:61:fe:9a:ba:14:8c:21:3d:56:
                    5c:20:54:e7:1e:53:4e:4f:bf:5a:d3:1b:f0:a6:33:
                    47:0b:bd:ad:88:9c:a3:c1:60:04:7e:bd:fb:f5:24:
                    d9:dd:95:3a:f4:75:cf:33:b2:ab:8c:de:7c:a7:8a:
                    c2:4a:e1:97:0e:f7:c5:27:56:8a:a0:e1:f2:b8:e2:
                    a9:f1:62:7f:05:23:4c:65:e4:b1:9e:6b:b0:c4:3e:
                    0c:7d:ce:6d:16:6a:3e:8b:c0:01:08:b5:6c:cc:98:
                    f7:64:f2:14:49:3d:2a:2b:a2:e1:f9:4b:f9:60:50:
                    34:e7:a4:ed:06:55:46:fa:55:c7:89:1b:85:57:bd:
                    39:c5:11:72:7e:de:2a:8e:9b:45:de:8c:fd:a3:a3:
                    76:31:9e:87:6b:93:70:02:a7:f2:21:07:b4:4d:69:
                    0a:a7:ce:96:e9:12:a7:92:8c:b1:fb:74:2b:e8:ae:
                    35:00:14:dc:a9:a5:23:b1:46:c5:54:73:a8:46:85:
                    66:46:eb:78:13:7d:a0:81:c0:5e:97:95:25:09:fe:
                    8b:1c:c9:70:40:2b:4b:68:21:ca:c2:20:28:fa:9e:
                    fc:db:4f:01:8b:50:8f:92:53:63:9e:f7:71:83:59:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:57:51:39:20:57:9A:1E:E5:63:A4:67:4E:FB:C6:53:31:A5:3C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2qpXUTkgV5oe5WOkZ077xlMxpTw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:e8:54:77:96:a3:9b:22:49:cd:0a:8b:3b:ed:2e:e3:8d:
         7b:3d:bf:f2:0b:d0:2f:d9:4d:27:66:d8:5a:5a:aa:bb:9b:58:
         5a:39:87:eb:c4:e5:9e:61:13:49:d7:cd:a9:93:5a:eb:4e:98:
         6c:33:25:17:8f:c4:70:60:93:db:a4:c7:73:26:74:e3:69:ab:
         6d:bb:8d:99:25:9a:ab:23:1e:88:95:ae:a4:95:48:f4:28:83:
         64:31:f4:85:4b:36:3e:00:24:80:c4:b1:48:92:02:23:a2:8d:
         f7:a9:09:53:c7:84:2a:77:c6:39:d5:11:1a:3d:80:3c:27:ef:
         98:67:02:d9:64:a1:40:cc:21:af:01:49:ab:15:03:01:d0:9b:
         f5:e5:fc:0e:08:50:f9:60:81:44:0d:06:13:27:a1:38:33:00:
         4b:3a:0b:3e:b4:67:6b:38:d0:8d:d1:85:61:db:16:4c:5b:42:
         16:4a:68:48:27:1a:38:30:ac:6f:1d:e6:e7:3a:82:dd:7a:d7:
         b5:7e:b0:ac:34:bd:20:ab:36:ff:c0:df:95:2e:de:27:7f:a9:
         ed:65:c8:d7:63:93:76:70:eb:00:48:1a:07:3e:db:1a:6f:ee:
         ce:46:b8:7a:51:fa:5d:fc:37:1d:06:35:37:dd:52:04:fb:50:
         8c:fb:f7:ad
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MjlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKERBQUE1NzUxMzkyMDU3
OUExRUU1NjNBNDY3NEVGQkM2NTMzMUE1M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSfiQsgNvilcjNbdGs1hrC8mE5c2H+mroUjCE9VlwgVOceU05P
v1rTG/CmM0cLva2InKPBYAR+vfv1JNndlTr0dc8zsquM3nynisJK4ZcO98UnVoqg
4fK44qnxYn8FI0xl5LGea7DEPgx9zm0Waj6LwAEItWzMmPdk8hRJPSorouH5S/lg
UDTnpO0GVUb6VceJG4VXvTnFEXJ+3iqOm0XejP2jo3Yxnodrk3ACp/IhB7RNaQqn
zpbpEqeSjLH7dCvorjUAFNyppSOxRsVUc6hGhWZG63gTfaCBwF6XlSUJ/oscyXBA
K0toIcrCICj6nvzbTwGLUI+SU2Oe93GDWTH/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2qpXUTkgV5oe5WOkZ077xlMxpTwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJxcFhVVGtnVjVvZTVXT2ta
MDc3eGxNeHBUdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9
QAAwDQYJKoZIhvcNAQELBQADggEBAAbl6FR3lqObIknNCos77S7jjXs9v/IL0C/Z
TSdm2FpaqrubWFo5h+vE5Z5hE0nXzamTWutOmGwzJRePxHBgk9ukx3MmdONpq227
jZklmqsjHoiVrqSVSPQog2Qx9IVLNj4AJIDEsUiSAiOijfepCVPHhCp3xjnVERo9
gDwn75hnAtlkoUDMIa8BSasVAwHQm/Xl/A4IUPlggUQNBhMnoTgzAEs6Cz60Z2s4
0I3RhWHbFkxbQhZKaEgnGjgwrG8d5uc6gt1617V+sKw0vSCrNv/A35Uu3id/qe1l
yNdjk3Zw6wBIGgc+2xpv7s5GuHpR+l38Nx0GNTfdUgT7UIz7960=
-----END CERTIFICATE-----