Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5dFCuXjG_rc0D9dKb6_FDGF1mjU.roa
File:                     5dFCuXjG_rc0D9dKb6_FDGF1mjU.roa (raw, json)
Hash identifier:          glz0xvxQAL8a3KV9rgfafdPDZyEP2XwolO4jYCPOOMY=
Subject key identifier:   E5:D1:42:B9:78:C6:FE:B7:34:0F:D7:4A:6F:AF:C5:0C:61:75:9A:35
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1236
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5dFCuXjG_rc0D9dKb6_FDGF1mjU.roa
Signing time:             Wed 29 Sep 2021 02:54:20 +0000
ROA not before:           Wed 29 Sep 2021 02:54:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4662 (0x1236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:20 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E5D142B978C6FEB7340FD74A6FAFC50C61759A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:11:8c:a7:f5:9e:58:4e:41:a3:5b:70:c6:
                    d4:2e:48:5b:f1:3c:a2:50:f7:47:13:f5:94:0d:93:
                    84:4d:a5:e9:95:8d:98:18:5d:e9:35:6a:6e:3b:97:
                    85:b9:58:c7:9a:17:ec:62:27:c1:54:6a:98:e9:e7:
                    96:b1:e1:5a:5f:8c:6e:73:86:51:f3:6c:b0:4b:75:
                    03:12:33:42:1e:77:a3:e3:50:ba:87:ad:d6:c8:68:
                    59:3a:01:b8:7a:ff:cf:75:d9:89:1e:a4:5d:a6:2d:
                    c2:84:7f:38:3a:20:bd:d3:92:5a:f7:cf:9b:c5:3a:
                    48:8f:f1:ea:da:78:5f:fe:d6:2d:c3:50:7c:62:81:
                    78:40:04:25:25:13:73:ee:93:e8:36:ef:55:86:76:
                    96:74:89:fc:4e:b4:39:16:45:d5:03:c4:3d:81:0e:
                    d4:04:c2:f7:49:b1:94:c0:c1:83:3b:62:57:c7:43:
                    7d:dd:df:7a:bd:fe:0a:c0:3b:92:79:6f:f5:65:4e:
                    04:f9:65:94:fb:42:0d:d5:59:36:cd:ac:24:6c:8d:
                    72:b6:1b:60:15:4e:b2:c9:a9:73:59:8f:35:25:45:
                    16:f1:f5:ba:7b:fc:a4:6d:b3:b3:ab:df:8e:28:4b:
                    5d:ee:f8:25:81:c7:fe:d4:5b:dd:cf:19:90:12:69:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D1:42:B9:78:C6:FE:B7:34:0F:D7:4A:6F:AF:C5:0C:61:75:9A:35
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5dFCuXjG_rc0D9dKb6_FDGF1mjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:96:02:6c:60:96:84:81:08:68:b4:8d:ec:c6:2a:2d:94:c9:
         a3:ba:70:c2:8d:dc:36:0b:f8:d9:57:4e:c2:8c:dd:63:bc:a4:
         6a:ec:6c:96:1f:4b:e6:b1:67:54:3a:eb:1c:f0:8c:b7:3c:b1:
         cb:02:ac:21:89:bd:81:5a:f1:04:47:a3:d2:47:f4:49:d7:7a:
         e3:e9:f8:e9:d2:72:b4:52:77:af:a4:42:a6:30:b5:4f:12:73:
         a7:e8:8f:1a:70:c8:9e:a6:ba:3c:05:43:db:51:10:17:09:77:
         06:8d:93:02:83:e0:78:6c:f9:ac:dd:0c:91:76:95:e4:95:52:
         3f:00:8a:a0:4f:de:ed:96:ad:1e:10:78:03:f3:1c:81:f5:53:
         fb:64:a5:6f:2b:97:fc:24:3c:67:4e:d9:2d:10:2c:51:c0:83:
         07:1f:40:97:53:a6:e0:ed:2a:f2:bd:d2:0d:ad:aa:6d:21:66:
         aa:81:38:6b:0b:cb:cb:3d:66:f3:be:78:ea:c0:4f:32:6b:e1:
         76:e2:d9:b9:db:7d:b3:aa:02:e6:fd:f5:eb:da:69:1b:48:1c:
         c5:71:79:d5:90:49:be:9a:c2:6e:1f:06:0b:8b:9e:8c:a7:a6:
         fa:82:b5:ba:68:da:8d:2f:a9:bb:68:f5:46:c0:4b:40:db:bf:
         52:e7:f3:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU1RDE0MkI5NzhDNkZF
QjczNDBGRDc0QTZGQUZDNTBDNjE3NTlBMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/uhGMp/WeWE5Bo1twxtQuSFvxPKJQ90cT9ZQNk4RNpemVjZgY
Xek1am47l4W5WMeaF+xiJ8FUapjp55ax4VpfjG5zhlHzbLBLdQMSM0Ied6PjULqH
rdbIaFk6Abh6/8912YkepF2mLcKEfzg6IL3Tklr3z5vFOkiP8eraeF/+1i3DUHxi
gXhABCUlE3Puk+g271WGdpZ0ifxOtDkWRdUDxD2BDtQEwvdJsZTAwYM7YlfHQ33d
33q9/grAO5J5b/VlTgT5ZZT7Qg3VWTbNrCRsjXK2G2AVTrLJqXNZjzUlRRbx9bp7
/KRts7Or344oS13u+CWBx/7UW93PGZASaWDLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5dFCuXjG/rc0D9dKb6/FDGF1mjUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVkRkN1WGpHX3JjMEQ5ZEti
Nl9GREdGMW1qVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUx
nyAwDQYJKoZIhvcNAQELBQADggEBADmWAmxgloSBCGi0jezGKi2UyaO6cMKN3DYL
+NlXTsKM3WO8pGrsbJYfS+axZ1Q66xzwjLc8scsCrCGJvYFa8QRHo9JH9EnXeuPp
+OnScrRSd6+kQqYwtU8Sc6fojxpwyJ6mujwFQ9tREBcJdwaNkwKD4Hhs+azdDJF2
leSVUj8AiqBP3u2WrR4QeAPzHIH1U/tkpW8rl/wkPGdO2S0QLFHAgwcfQJdTpuDt
KvK90g2tqm0hZqqBOGsLy8s9ZvO+eOrATzJr4Xbi2bnbfbOqAub99evaaRtIHMVx
edWQSb6awm4fBguLnoynpvqCtbpo2o0vqbto9UbAS0Dbv1Ln85s=
-----END CERTIFICATE-----