Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa
File:                     Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa (raw, json)
Hash identifier:          +kFa9aXbm9H0xNDZiBQpypsRra4uCU6YMg2Y9CNHcyg=
Subject key identifier:   12:08:B0:F0:7C:72:C8:E7:86:48:F9:4E:D4:3F:B9:24:4B:82:92:9F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F4F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa
Signing time:             Sun 07 Feb 2021 12:33:38 +0000
ROA not before:           Sun 07 Feb 2021 12:33:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        122.100.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3919 (0xf4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1208B0F07C72C8E78648F94ED43FB9244B82929F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:ae:52:33:ac:91:a1:ab:e9:dd:67:9b:c7:
                    eb:3a:7d:b1:7b:67:b8:d7:d0:fd:e2:b4:c0:4f:d5:
                    1b:2b:c8:b5:53:b8:80:b2:7b:3a:19:70:55:06:d1:
                    e9:e4:4a:3e:63:64:db:46:bc:a7:8b:15:b9:53:03:
                    aa:ad:96:6d:c3:8a:b6:9a:9e:dc:59:b3:b7:cf:32:
                    97:03:c5:0e:3e:60:7c:ce:9b:1b:c3:97:37:ac:36:
                    43:87:05:88:36:3e:42:c9:c5:75:04:85:a9:bd:ba:
                    85:71:11:c0:4b:19:ab:e6:e6:a9:f7:32:51:b8:79:
                    28:27:d0:72:32:49:c4:d9:6b:97:a1:fd:63:ab:3d:
                    f1:84:18:56:82:a0:94:9f:21:27:86:54:24:a7:36:
                    39:51:fb:da:8c:79:eb:15:ae:41:7c:ec:d0:cc:cd:
                    28:15:30:5f:ba:61:94:b1:ab:bd:71:47:ba:e4:41:
                    bd:e6:60:04:cc:12:aa:a0:17:bf:ae:2b:64:f7:44:
                    13:d7:06:21:5d:fb:ee:27:78:c7:64:2f:d3:1c:9c:
                    d1:49:06:3d:fb:f3:32:7c:89:b6:a9:ce:9f:7d:0c:
                    64:94:fc:58:1c:d2:18:e4:a7:12:bc:37:5b:35:70:
                    2e:4c:6f:99:d1:75:86:b4:32:be:bd:07:e3:29:71:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:B0:F0:7C:72:C8:E7:86:48:F9:4E:D4:3F:B9:24:4B:82:92:9F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:3d:8f:79:a4:46:96:a2:65:af:19:c6:79:26:29:53:38:81:
         51:a0:33:00:af:1f:3c:d5:ee:c2:35:4d:10:63:29:a5:c8:90:
         8f:35:ad:fd:89:c2:21:4f:a0:c2:d8:6c:d6:d3:35:dc:99:75:
         4f:67:60:73:80:7b:43:69:d5:63:8b:8e:fa:59:95:34:c6:e0:
         ff:27:e8:37:fd:c8:29:d0:c0:5b:63:f6:9b:29:40:42:1a:25:
         34:73:0e:d3:51:d3:52:c0:46:bb:eb:ae:bb:76:29:35:ae:1d:
         26:59:82:9c:8c:30:dd:e2:76:87:85:af:b2:bf:11:68:e8:b4:
         93:b2:76:72:c9:72:22:e6:d5:bc:fc:b2:aa:57:c4:f4:aa:ee:
         0d:d6:86:2e:f8:1d:0f:5b:d0:68:e1:e0:77:70:de:b3:e5:b2:
         13:ad:3c:af:fa:6a:87:1a:51:9d:25:30:99:7c:c9:85:05:9e:
         ed:8d:fc:bd:31:0c:17:ce:4e:fb:f4:cc:3d:b9:a9:6f:92:1f:
         0a:15:e6:1a:3b:69:52:5b:ba:9e:c7:f0:4e:e6:23:c1:b3:b2:
         3a:24:4a:e5:72:94:4b:50:91:8a:0c:6b:ca:bc:c1:33:50:51:
         50:da:05:99:37:f1:74:36:d0:5d:83:b0:a6:3c:27:11:11:45:
         6f:b8:1d:f4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzMzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEyMDhCMEYwN0M3MkM4
RTc4NjQ4Rjk0RUQ0M0ZCOTI0NEI4MjkyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqZa5SM6yRoavp3Webx+s6fbF7Z7jX0P3itMBP1RsryLVTuICy
ezoZcFUG0enkSj5jZNtGvKeLFblTA6qtlm3DiraantxZs7fPMpcDxQ4+YHzOmxvD
lzesNkOHBYg2PkLJxXUEham9uoVxEcBLGavm5qn3MlG4eSgn0HIyScTZa5eh/WOr
PfGEGFaCoJSfISeGVCSnNjlR+9qMeesVrkF87NDMzSgVMF+6YZSxq71xR7rkQb3m
YATMEqqgF7+uK2T3RBPXBiFd++4neMdkL9McnNFJBj378zJ8ibapzp99DGSU/Fgc
0hjkpxK8N1s1cC5Mb5nRdYa0Mr69B+MpcVuvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEgiw8HxyyOeGSPlO1D+5JEuCkp8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VnaXc4SHh5eU9lR1NQbE8x
RC01SkV1Q2twOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6
ZEwwDQYJKoZIhvcNAQELBQADggEBACc9j3mkRpaiZa8ZxnkmKVM4gVGgMwCvHzzV
7sI1TRBjKaXIkI81rf2JwiFPoMLYbNbTNdyZdU9nYHOAe0Np1WOLjvpZlTTG4P8n
6Df9yCnQwFtj9pspQEIaJTRzDtNR01LARrvrrrt2KTWuHSZZgpyMMN3idoeFr7K/
EWjotJOydnLJciLm1bz8sqpXxPSq7g3Whi74HQ9b0Gjh4Hdw3rPlshOtPK/6aoca
UZ0lMJl8yYUFnu2N/L0xDBfOTvv0zD25qW+SHwoV5ho7aVJbup7H8E7mI8Gzsjok
SuVylEtQkYoMa8q8wTNQUVDaBZk38XQ20F2DsKY8JxERRW+4HfQ=
-----END CERTIFICATE-----