Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7rKt_IDqdTBPJwSBCGrVldEyAt4.roa
File:                     7rKt_IDqdTBPJwSBCGrVldEyAt4.roa (raw, json)
Hash identifier:          W8Bpex7no7LNYfaaJAPQjoKtXW2JIic0AIWlfwslk38=
Subject key identifier:   EE:B2:AD:FC:80:EA:75:30:4F:27:04:81:08:6A:D5:95:D1:32:02:DE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AC8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7rKt_IDqdTBPJwSBCGrVldEyAt4.roa
Signing time:             Tue 29 Sep 2020 10:07:37 +0000
ROA not before:           Tue 29 Sep 2020 10:07:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2760 (0xac8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EEB2ADFC80EA75304F270481086AD595D13202DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:c9:35:59:13:f6:8a:eb:26:1d:92:32:02:
                    23:25:75:18:3c:e7:09:0c:be:e6:c6:a3:cd:85:b9:
                    53:72:86:b6:e1:36:9d:10:47:d2:9e:be:69:7d:06:
                    28:37:5a:97:5e:cd:84:6d:1a:fb:81:e3:10:c7:d6:
                    25:b4:4f:b5:23:fd:a0:5d:77:8c:c9:e7:53:a5:b5:
                    b5:33:9a:25:5e:21:84:b6:e6:7b:2c:b3:b0:66:ad:
                    8d:dd:07:87:af:d3:52:0d:80:70:76:67:6c:fb:4c:
                    74:4d:9f:01:22:86:4a:e6:48:3d:d3:d7:09:c3:0f:
                    98:d4:3f:a4:fe:12:3e:9b:68:eb:bb:85:cd:88:4d:
                    31:3a:68:38:70:b4:99:92:7b:60:4c:24:6e:0f:79:
                    fb:9a:c2:c3:3a:0d:92:b6:0a:2d:a1:ba:c7:bc:de:
                    3f:61:6a:25:7b:6d:d0:2c:b5:c2:bc:66:3f:cd:d3:
                    61:bd:cc:3a:39:70:8c:5e:a7:95:62:4a:97:9b:1b:
                    41:45:26:85:4d:ea:e6:3e:23:7f:b6:a5:2c:63:99:
                    11:19:ce:88:6d:ea:95:c0:eb:99:a0:59:78:4f:f6:
                    ac:be:5c:47:e8:a5:1e:6c:51:b2:86:d2:d6:b8:54:
                    7f:bf:6e:fd:65:86:55:78:7b:fe:18:b0:2d:24:55:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B2:AD:FC:80:EA:75:30:4F:27:04:81:08:6A:D5:95:D1:32:02:DE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7rKt_IDqdTBPJwSBCGrVldEyAt4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:45:6f:9e:43:56:33:22:0b:ac:c4:f5:75:78:a4:4f:18:c7:
         2d:e6:3c:8c:e0:fe:51:28:32:ba:ae:e4:60:bf:0a:e9:c4:5c:
         9d:08:e8:24:94:27:ef:41:47:8f:62:94:68:f1:50:44:f9:c3:
         fb:17:1c:bc:18:38:df:ed:69:c5:9e:00:8d:cf:d0:ed:f8:ee:
         b1:f5:a1:11:c6:a4:b4:21:a1:ce:1d:f1:82:73:53:52:f4:29:
         88:3f:14:89:06:d7:ad:5f:1c:ad:59:df:5d:84:4d:78:a1:26:
         97:e2:8c:1f:e3:33:d0:61:a7:0d:31:43:e0:85:16:4a:30:a0:
         66:74:7d:24:ec:09:76:f0:06:63:81:97:57:fb:f5:99:9b:ff:
         3d:64:e7:0b:ae:bf:ab:99:f7:c8:63:99:51:e0:51:c4:18:97:
         89:e9:72:fd:67:40:8f:ae:94:be:b0:7b:4a:39:9e:c7:23:b5:
         a7:7b:88:2f:47:d7:95:e3:92:90:43:8f:58:1b:fd:6d:0a:38:
         df:4c:b9:cf:6f:77:ab:1d:e8:5c:12:96:ed:e9:08:1c:85:90:
         11:a5:ab:1c:03:71:d6:4c:1f:ad:df:45:ee:47:95:a3:10:ab:
         57:e6:81:8f:73:36:38:8e:96:d0:eb:d8:57:a3:73:e6:f2:88:
         9d:c4:87:9e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCsgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3MzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVFQjJBREZDODBFQTc1
MzA0RjI3MDQ4MTA4NkFENTk1RDEzMjAyREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSick1WRP2iusmHZIyAiMldRg85wkMvubGo82FuVNyhrbhNp0Q
R9Kevml9Big3WpdezYRtGvuB4xDH1iW0T7Uj/aBdd4zJ51OltbUzmiVeIYS25nss
s7BmrY3dB4ev01INgHB2Z2z7THRNnwEihkrmSD3T1wnDD5jUP6T+Ej6baOu7hc2I
TTE6aDhwtJmSe2BMJG4PefuawsM6DZK2Ci2huse83j9haiV7bdAstcK8Zj/N02G9
zDo5cIxep5ViSpebG0FFJoVN6uY+I3+2pSxjmREZzoht6pXA65mgWXhP9qy+XEfo
pR5sUbKG0ta4VH+/bv1lhlV4e/4YsC0kVQDhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7rKt/IDqdTBPJwSBCGrVldEyAt4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdyS3RfSURxZFRCUEp3U0JD
R3JWbGRFeUF0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
niwwDQYJKoZIhvcNAQELBQADggEBAAVFb55DVjMiC6zE9XV4pE8Yxy3mPIzg/lEo
Mrqu5GC/CunEXJ0I6CSUJ+9BR49ilGjxUET5w/sXHLwYON/tacWeAI3P0O347rH1
oRHGpLQhoc4d8YJzU1L0KYg/FIkG161fHK1Z312ETXihJpfijB/jM9Bhpw0xQ+CF
FkowoGZ0fSTsCXbwBmOBl1f79Zmb/z1k5wuuv6uZ98hjmVHgUcQYl4npcv1nQI+u
lL6we0o5nscjtad7iC9H15XjkpBDj1gb/W0KON9Muc9vd6sd6FwSlu3pCByFkBGl
qxwDcdZMH63fRe5HlaMQq1fmgY9zNjiOltDr2Fejc+byiJ3Eh54=
-----END CERTIFICATE-----