Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqWESqcgtMAfsjVBukbBtQAxo2Y.roa
File:                     EqWESqcgtMAfsjVBukbBtQAxo2Y.roa (raw, json)
Hash identifier:          ETfg7z+5RRdYaW8WMo1USC8V+uA9kpOe3hKnj2Xh2fw=
Subject key identifier:   12:A5:84:4A:A7:20:B4:C0:1F:B2:35:41:BA:46:C1:B5:00:31:A3:66
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1015
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqWESqcgtMAfsjVBukbBtQAxo2Y.roa
Signing time:             Sun 07 Feb 2021 12:37:32 +0000
ROA not before:           Sun 07 Feb 2021 12:37:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.58.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:37:32 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=12A5844AA720B4C01FB23541BA46C1B50031A366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:07:84:73:01:6b:b0:4a:ae:c9:21:d5:6c:
                    66:aa:e8:86:57:1f:2d:ac:75:a7:16:fc:7b:0e:ac:
                    68:41:81:6f:1d:41:cd:d2:ba:73:eb:47:7c:d5:53:
                    80:85:55:c0:34:ac:9b:e4:61:64:f6:df:d8:a5:c2:
                    12:27:6f:06:ae:0c:a1:b0:b2:7c:77:03:7f:64:db:
                    b9:07:54:bd:01:7f:dc:c4:7e:b0:11:6a:ad:77:7d:
                    e8:c2:85:8a:82:2d:85:1a:a0:a4:81:35:a1:21:84:
                    86:10:e5:8f:55:4f:39:41:aa:11:a3:77:ec:20:2e:
                    6a:60:87:91:e8:e9:25:73:91:12:f8:ae:44:0d:a7:
                    fb:94:38:38:0d:61:02:99:c8:48:31:05:26:19:45:
                    e8:d7:21:a0:a0:7d:38:20:1e:82:71:25:0e:e9:ec:
                    c1:3d:8d:a8:fd:81:9b:de:91:52:f2:a4:f8:2f:49:
                    14:41:3c:b9:0a:5c:f3:18:81:1e:6e:9d:41:cf:c3:
                    38:4d:d2:cd:5a:60:e9:15:81:3e:e3:3e:70:1b:8c:
                    a7:99:b0:68:03:e7:c6:f5:1d:5e:ca:9c:13:5a:66:
                    67:16:51:dc:9b:7a:5e:81:ef:1c:00:e2:d4:57:1b:
                    85:fc:51:75:41:17:82:77:fe:69:98:86:16:c0:49:
                    3e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A5:84:4A:A7:20:B4:C0:1F:B2:35:41:BA:46:C1:B5:00:31:A3:66
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqWESqcgtMAfsjVBukbBtQAxo2Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:61:f2:2c:29:21:8c:fc:f6:11:0a:b2:c7:dc:f7:e4:2b:56:
         86:27:72:37:11:ca:61:3f:12:e9:a1:3a:46:58:be:12:b5:53:
         9c:d9:2f:a2:c5:83:97:54:8c:b9:7a:3a:41:ae:66:b2:92:5d:
         2e:97:90:25:b4:a9:74:54:1b:9d:8b:86:7c:90:1f:64:c6:9d:
         1f:26:90:ee:8c:a5:cb:d5:82:87:40:4d:f0:76:33:bd:01:c5:
         d7:b1:51:1a:a6:6d:2b:ab:78:56:50:ea:1d:40:4b:9b:3c:6f:
         f4:01:86:e2:e7:0b:b5:29:5d:a5:93:7c:41:a0:2d:f9:9d:64:
         e8:93:6c:a0:23:20:29:40:2e:cf:27:d8:27:6c:48:69:72:56:
         a2:f7:49:5e:ef:70:6b:6b:5a:52:7f:99:b7:c0:fe:6c:74:fb:
         2e:fc:aa:bb:4b:51:b9:80:f4:c4:8c:aa:51:92:38:08:4a:43:
         6d:d8:93:12:10:da:2d:ea:e0:cd:85:3b:53:1e:28:0f:d3:e2:
         d8:05:c3:df:5f:4f:5d:cf:43:ae:cb:2b:d9:5f:84:d7:fb:1d:
         2e:d2:70:0b:dd:2c:83:23:d4:d2:5e:3d:8b:64:63:aa:f5:31:
         74:d6:e8:3d:d8:17:79:11:0c:b0:8c:6c:88:00:9c:cf:c3:5e:
         51:47:9a:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM3MzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDEyQTU4NDRBQTcyMEI0
QzAxRkIyMzU0MUJBNDZDMUI1MDAzMUEzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqLweEcwFrsEquySHVbGaq6IZXHy2sdacW/HsOrGhBgW8dQc3S
unPrR3zVU4CFVcA0rJvkYWT239ilwhInbwauDKGwsnx3A39k27kHVL0Bf9zEfrAR
aq13fejChYqCLYUaoKSBNaEhhIYQ5Y9VTzlBqhGjd+wgLmpgh5Ho6SVzkRL4rkQN
p/uUODgNYQKZyEgxBSYZRejXIaCgfTggHoJxJQ7p7ME9jaj9gZvekVLypPgvSRRB
PLkKXPMYgR5unUHPwzhN0s1aYOkVgT7jPnAbjKeZsGgD58b1HV7KnBNaZmcWUdyb
el6B7xwA4tRXG4X8UXVBF4J3/mmYhhbAST6bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEqWESqcgtMAfsjVBukbBtQAxo2YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VxV0VTcWNndE1BZnNqVkJ1
a2JCdFFBeG8yWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OmgwDQYJKoZIhvcNAQELBQADggEBAIFh8iwpIYz89hEKssfc9+QrVoYncjcRymE/
EumhOkZYvhK1U5zZL6LFg5dUjLl6OkGuZrKSXS6XkCW0qXRUG52LhnyQH2TGnR8m
kO6MpcvVgodATfB2M70BxdexURqmbSureFZQ6h1AS5s8b/QBhuLnC7UpXaWTfEGg
LfmdZOiTbKAjIClALs8n2CdsSGlyVqL3SV7vcGtrWlJ/mbfA/mx0+y78qrtLUbmA
9MSMqlGSOAhKQ23YkxIQ2i3q4M2FO1MeKA/T4tgFw99fT13PQ67LK9lfhNf7HS7S
cAvdLIMj1NJePYtkY6r1MXTW6D3YF3kRDLCMbIgAnM/DXlFHmjo=
-----END CERTIFICATE-----