Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hS1trgJWI3xthp43OQJ9hpV39o.roa
File:                     7hS1trgJWI3xthp43OQJ9hpV39o.roa (raw, json)
Hash identifier:          i/CIfqzqIiTgM3LmOqbeZ/N1HzyLU4KGSUMvXkTb9WU=
Subject key identifier:   EE:14:B5:B6:B8:09:58:8D:F1:B6:1A:78:DC:E4:09:F6:1A:55:DF:DA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F43
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hS1trgJWI3xthp43OQJ9hpV39o.roa
Signing time:             Sun 07 Feb 2021 12:33:28 +0000
ROA not before:           Sun 07 Feb 2021 12:33:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3907 (0xf43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE14B5B6B809588DF1B61A78DCE409F61A55DFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:ce:60:49:a8:d0:e0:52:61:68:f6:3a:2b:
                    55:5f:c9:62:10:48:c3:26:73:ff:2d:65:b5:93:fc:
                    d0:e4:87:be:9e:57:b9:a6:bc:2e:26:d4:02:99:8c:
                    88:9d:d4:f6:d3:8a:93:f8:85:e3:66:9b:cd:74:36:
                    0c:32:57:6a:ed:86:04:d4:0a:56:8f:53:89:ef:31:
                    1f:97:47:8c:33:3c:4f:7b:9e:a9:8b:5c:45:84:aa:
                    fc:2b:c6:27:68:c2:fd:0f:9f:ec:16:18:a0:15:f6:
                    a9:5d:27:41:fb:f6:80:5a:dc:e7:4c:32:6e:e2:54:
                    d8:f0:81:13:56:f4:d0:1e:3a:ad:50:24:56:a6:df:
                    58:b1:71:3a:8a:7d:05:bf:e1:ab:96:fc:4b:58:a3:
                    04:64:ae:c0:b4:44:01:5b:69:e2:e0:74:36:dd:e0:
                    65:66:ac:80:da:6d:cc:54:98:40:c5:51:99:ce:6c:
                    59:d5:5c:cc:31:85:76:05:e7:ff:8e:3d:43:13:95:
                    9d:35:36:48:e2:45:ca:77:91:af:d1:c0:5e:53:8b:
                    f5:1b:aa:6a:9a:90:a4:35:1b:2b:75:da:a2:99:df:
                    47:40:c7:28:f4:4f:36:d5:a8:c6:be:fc:42:56:91:
                    87:5d:4c:74:76:2b:b0:80:b3:b6:85:d9:65:42:f6:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:B5:B6:B8:09:58:8D:F1:B6:1A:78:DC:E4:09:F6:1A:55:DF:DA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hS1trgJWI3xthp43OQJ9hpV39o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:76:b1:8e:b4:11:3f:83:dc:0d:62:67:e0:3a:78:f8:3b:
         2d:fc:ae:d6:63:f9:a8:82:ad:bc:da:ff:20:2b:bf:c7:26:3a:
         a2:df:7d:7a:c9:4b:85:22:77:49:38:df:74:24:9c:05:5b:3f:
         83:fd:c5:6c:50:de:d1:c1:7e:ce:a6:62:31:e2:77:cb:5c:2e:
         60:44:f2:fb:d6:5b:ae:87:57:14:9e:af:95:31:a7:8b:af:c1:
         7a:c1:8a:c7:37:9f:90:04:ff:14:a8:70:31:62:ea:97:58:09:
         a4:d0:88:ae:cd:69:19:ff:f4:c6:67:15:16:7a:16:a5:b4:f7:
         0b:85:50:73:48:53:fc:68:75:31:a8:96:eb:11:47:53:f5:d0:
         48:e3:94:52:6f:f7:b4:6c:f2:84:72:f6:3f:c2:57:43:7e:cc:
         98:00:86:e2:5c:12:ad:0a:22:c0:4f:a4:d9:30:46:4e:b0:79:
         97:c5:ba:80:50:95:b5:33:81:ec:13:a1:30:b0:2a:a9:65:fc:
         cd:fb:a7:04:ac:33:22:7a:d2:91:f3:ab:6c:c9:cc:47:75:d7:
         ff:e2:e7:88:d4:16:03:98:68:19:25:2e:f0:de:a9:ee:95:4f:
         c6:da:f3:4d:28:41:8c:4e:d3:20:65:db:56:a5:a4:d2:93:79:
         1f:1d:b3:b2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD0MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzMjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVFMTRCNUI2QjgwOTU4
OERGMUI2MUE3OERDRTQwOUY2MUE1NURGREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg8c5gSajQ4FJhaPY6K1VfyWIQSMMmc/8tZbWT/NDkh76eV7mm
vC4m1AKZjIid1PbTipP4heNmm810NgwyV2rthgTUClaPU4nvMR+XR4wzPE97nqmL
XEWEqvwrxidowv0Pn+wWGKAV9qldJ0H79oBa3OdMMm7iVNjwgRNW9NAeOq1QJFam
31ixcTqKfQW/4auW/EtYowRkrsC0RAFbaeLgdDbd4GVmrIDabcxUmEDFUZnObFnV
XMwxhXYF5/+OPUMTlZ01NkjiRcp3ka/RwF5Ti/UbqmqakKQ1Gyt12qKZ30dAxyj0
TzbVqMa+/EJWkYddTHR2K7CAs7aF2WVC9p/nAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7hS1trgJWI3xthp43OQJ9hpV39owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdoUzF0cmdKV0kzeHRocDQz
T1FKOWhwVjM5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TfgwDQYJKoZIhvcNAQELBQADggEBAArQdrGOtBE/g9wNYmfgOnj4Oy38rtZj+aiC
rbza/yArv8cmOqLffXrJS4Uid0k433QknAVbP4P9xWxQ3tHBfs6mYjHid8tcLmBE
8vvWW66HVxSer5Uxp4uvwXrBisc3n5AE/xSocDFi6pdYCaTQiK7NaRn/9MZnFRZ6
FqW09wuFUHNIU/xodTGolusRR1P10EjjlFJv97Rs8oRy9j/CV0N+zJgAhuJcEq0K
IsBPpNkwRk6weZfFuoBQlbUzgewToTCwKqll/M37pwSsMyJ60pHzq2zJzEd11//i
54jUFgOYaBklLvDeqe6VT8ba800oQYxO0yBl21alpNKTeR8ds7I=
-----END CERTIFICATE-----