Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CwYzEVzgte0gCfDwpgjVsxjiEKE.roa
File:                     CwYzEVzgte0gCfDwpgjVsxjiEKE.roa (raw, json)
Hash identifier:          aBlrAcHQrDCzivE62VO86fl774+0T7LfgX7SmE6jfdg=
Subject key identifier:   0B:06:33:11:5C:E0:B5:ED:20:09:F0:F0:A6:08:D5:B3:18:E2:10:A1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12DD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CwYzEVzgte0gCfDwpgjVsxjiEKE.roa
Signing time:             Wed 29 Sep 2021 02:55:05 +0000
ROA not before:           Wed 29 Sep 2021 02:55:05 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        61.58.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4829 (0x12dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:05 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0B0633115CE0B5ED2009F0F0A608D5B318E210A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:e3:34:29:bb:d7:1c:58:e2:c2:38:f9:2a:
                    3a:31:d3:aa:66:e9:36:5e:a7:f8:70:2e:63:6e:27:
                    29:d0:a9:4e:48:39:07:49:07:ae:db:68:a1:d9:7d:
                    91:47:b8:71:92:36:7d:a1:5b:7c:73:93:8b:d5:5b:
                    fd:56:e0:0f:92:ab:93:f2:2a:ac:84:ae:fb:e9:95:
                    4e:16:08:a5:25:14:73:89:1e:a1:82:bf:27:06:f9:
                    d5:7f:07:27:f7:18:1e:77:a5:54:9b:d3:91:d7:23:
                    19:7d:5e:04:fc:dd:0b:b9:a8:9a:8d:3a:10:51:62:
                    37:f0:26:35:d3:61:e6:0b:7b:6c:06:8a:06:08:4e:
                    2a:0f:c4:87:77:50:59:e5:dd:81:23:a6:60:5f:c5:
                    ff:f3:0f:0d:5d:c4:82:22:aa:d3:fd:0c:b3:6e:ef:
                    04:f2:db:15:bb:b4:0c:94:85:87:5b:d3:d8:4f:da:
                    2b:b2:e2:65:db:33:99:46:4d:ce:c1:29:57:63:aa:
                    ff:c5:55:ea:e4:b0:cd:e2:35:f4:41:f1:28:43:c3:
                    33:5d:cc:1e:a2:eb:fc:55:10:21:15:d3:c8:ee:42:
                    6f:3a:8e:c2:62:6b:f1:4b:da:76:df:8a:59:4b:cd:
                    ba:53:bd:b3:a1:f8:73:80:f7:8a:a4:13:37:d7:31:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:06:33:11:5C:E0:B5:ED:20:09:F0:F0:A6:08:D5:B3:18:E2:10:A1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CwYzEVzgte0gCfDwpgjVsxjiEKE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:06:c8:c5:9a:51:ae:e0:17:67:1e:51:0d:3a:4a:81:80:0b:
         c5:6d:40:ec:46:55:57:ba:11:64:6f:44:36:ce:ab:29:d0:14:
         be:5d:ed:bb:87:c2:cb:95:2f:cc:08:cf:08:49:28:18:a1:6d:
         b5:d6:d2:b1:22:cc:4d:d5:44:9d:b3:f8:f7:4d:63:f9:f4:d0:
         ec:76:5c:e1:e7:87:d5:63:d3:6e:d5:16:73:db:24:51:a6:cc:
         b2:7f:fc:35:4c:97:b3:a1:08:e9:da:85:15:8e:6c:49:f6:64:
         5d:12:72:f3:da:c9:a3:5c:dc:15:71:38:93:22:14:9a:69:26:
         94:f5:8c:45:86:04:9b:a3:0a:8c:3f:21:78:c5:84:42:ec:ec:
         5e:be:3d:8d:f6:11:b9:20:0d:9e:27:93:9d:e7:91:b0:24:ec:
         6f:56:58:b9:8f:bc:9a:00:30:c5:29:cb:e0:9e:dd:fd:80:5a:
         bc:9c:ed:80:49:0b:a5:d6:a2:4b:d8:de:1c:84:2b:7f:19:5f:
         6a:10:49:1f:72:8a:ba:03:42:db:88:ee:ad:5b:a9:42:43:04:
         94:17:78:cd:bf:dc:04:c5:31:ef:71:07:1e:7f:e5:34:93:15:
         44:e8:d7:9d:06:31:6a:c8:e8:eb:fa:6a:03:e7:8e:4a:0e:6b:
         a1:9b:3b:64
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBCMDYzMzExNUNFMEI1
RUQyMDA5RjBGMEE2MDhENUIzMThFMjEwQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiSuM0KbvXHFjiwjj5Kjox06pm6TZep/hwLmNuJynQqU5IOQdJ
B67baKHZfZFHuHGSNn2hW3xzk4vVW/1W4A+Sq5PyKqyErvvplU4WCKUlFHOJHqGC
vycG+dV/Byf3GB53pVSb05HXIxl9XgT83Qu5qJqNOhBRYjfwJjXTYeYLe2wGigYI
TioPxId3UFnl3YEjpmBfxf/zDw1dxIIiqtP9DLNu7wTy2xW7tAyUhYdb09hP2iuy
4mXbM5lGTc7BKVdjqv/FVerksM3iNfRB8ShDwzNdzB6i6/xVECEV08juQm86jsJi
a/FL2nbfillLzbpTvbOh+HOA94qkEzfXMfenAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCwYzEVzgte0gCfDwpgjVsxjiEKEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0N3WXpFVnpndGUwZ0NmRHdw
Z2pWc3hqaUVLRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OmwwDQYJKoZIhvcNAQELBQADggEBAHkGyMWaUa7gF2ceUQ06SoGAC8VtQOxGVVe6
EWRvRDbOqynQFL5d7buHwsuVL8wIzwhJKBihbbXW0rEizE3VRJ2z+PdNY/n00Ox2
XOHnh9Vj027VFnPbJFGmzLJ//DVMl7OhCOnahRWObEn2ZF0ScvPayaNc3BVxOJMi
FJppJpT1jEWGBJujCow/IXjFhELs7F6+PY32EbkgDZ4nk53nkbAk7G9WWLmPvJoA
MMUpy+Ce3f2AWryc7YBJC6XWokvY3hyEK38ZX2oQSR9yiroDQtuI7q1bqUJDBJQX
eM2/3ATFMe9xBx5/5TSTFUTo150GMWrI6Ov6agPnjkoOa6GbO2Q=
-----END CERTIFICATE-----