Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IlwdCqZqlj4bgiU1J8SAxPIE7xs.roa
File:                     IlwdCqZqlj4bgiU1J8SAxPIE7xs.roa (raw, json)
Hash identifier:          v4JWY/J77LxRaaUdec5SZRSz0kSOyUqWpM/kKfIerNs=
Subject key identifier:   22:5C:1D:0A:A6:6A:96:3E:1B:82:25:35:27:C4:80:C4:F2:04:EF:1B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1442
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IlwdCqZqlj4bgiU1J8SAxPIE7xs.roa
Signing time:             Wed 04 May 2022 01:51:30 +0000
ROA not before:           Wed 04 May 2022 01:51:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        49.159.192.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5186 (0x1442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: May  4 01:51:30 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=225C1D0AA66A963E1B82253527C480C4F204EF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:07:d4:ff:9b:25:68:92:75:cb:f0:06:0f:
                    f9:65:c4:26:0d:1d:e8:b7:11:d1:b2:83:97:4e:2f:
                    cc:cb:88:d5:74:c0:b9:0e:49:f8:da:ba:50:3c:98:
                    cc:3c:8b:c1:e0:f0:08:11:b4:0c:a6:d2:33:cd:f8:
                    b8:3e:68:ef:86:57:d4:98:e4:9d:11:88:5b:bb:4f:
                    bd:92:99:34:ab:49:58:b7:9a:05:c8:67:a7:86:39:
                    3a:f5:5f:80:e3:c4:62:bb:90:82:7f:84:7b:07:07:
                    61:1f:f1:31:87:71:02:57:1d:ae:37:b2:51:8e:f8:
                    e5:d1:2c:d9:2e:ce:44:f6:44:96:5d:98:88:ff:54:
                    0f:a5:bc:b1:54:35:ac:e1:7c:b4:f0:50:40:88:8b:
                    cd:14:ab:05:4d:c9:a2:ec:f8:5f:a9:92:e8:a6:57:
                    a0:7d:c7:54:a3:a1:15:05:d4:d9:16:05:89:7b:d2:
                    5d:38:49:71:40:f5:53:b2:cf:b8:e7:b4:aa:76:b9:
                    c4:e9:b4:5b:f9:88:7a:9a:db:52:d4:a9:4b:0a:7f:
                    30:fa:7d:bc:13:c3:14:c9:b5:fa:9c:f3:a4:95:8c:
                    4b:58:6b:a0:4d:fc:b3:c5:d0:df:d6:bc:e4:0b:9d:
                    61:57:3d:95:50:0c:8c:9c:c3:c8:16:99:a2:8e:22:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:1D:0A:A6:6A:96:3E:1B:82:25:35:27:C4:80:C4:F2:04:EF:1B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IlwdCqZqlj4bgiU1J8SAxPIE7xs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:77:de:da:5e:11:4e:1c:f9:4d:ec:a6:08:dd:d5:89:38:
         65:21:33:7d:7a:ea:78:c4:47:56:b1:d6:f2:6c:df:5d:37:fa:
         35:53:ad:6c:b4:57:d2:6a:a6:60:bf:c6:50:c3:aa:a7:e8:84:
         84:fd:c0:26:a2:a3:44:80:81:2c:56:0f:26:58:c9:a7:77:45:
         9d:39:43:b8:fd:16:b3:46:12:55:aa:8f:45:63:20:df:34:fd:
         30:8a:e3:f0:db:6f:8a:e7:93:d3:b4:93:df:74:21:9e:30:6d:
         c1:77:c9:be:03:53:78:18:e4:59:42:9e:c3:00:e3:5d:b7:a9:
         8a:60:3a:d1:18:c1:3e:37:3b:52:35:67:9d:96:d3:39:6d:07:
         2a:af:54:f7:79:79:74:e1:c2:51:2e:fc:9a:eb:dd:e4:1c:18:
         f7:31:cd:d2:ed:70:92:10:0a:58:ea:52:25:61:ee:3f:70:c5:
         c6:79:b9:3d:18:a7:cc:1d:13:93:23:2f:a9:aa:1d:1c:e1:6b:
         a7:3e:e1:72:9c:4c:ae:66:56:de:71:fe:ca:e7:9b:48:19:9c:
         3c:06:e1:1b:8b:fb:59:61:ef:ff:7d:07:9e:cd:93:f1:5d:8c:
         8f:33:24:28:96:81:f5:a2:df:01:01:9c:84:16:6e:33:29:5e:
         af:da:81:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA1MDQw
MTUxMzBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDIyNUMxRDBBQTY2QTk2
M0UxQjgyMjUzNTI3QzQ4MEM0RjIwNEVGMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqAAfU/5slaJJ1y/AGD/llxCYNHei3EdGyg5dOL8zLiNV0wLkO
SfjaulA8mMw8i8Hg8AgRtAym0jPN+Lg+aO+GV9SY5J0RiFu7T72SmTSrSVi3mgXI
Z6eGOTr1X4DjxGK7kIJ/hHsHB2Ef8TGHcQJXHa43slGO+OXRLNkuzkT2RJZdmIj/
VA+lvLFUNazhfLTwUECIi80UqwVNyaLs+F+pkuimV6B9x1SjoRUF1NkWBYl70l04
SXFA9VOyz7jntKp2ucTptFv5iHqa21LUqUsKfzD6fbwTwxTJtfqc86SVjEtYa6BN
/LPF0N/WvOQLnWFXPZVQDIycw8gWmaKOInTTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIlwdCqZqlj4bgiU1J8SAxPIE7xswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0lsd2RDcVpxbGo0YmdpVTFK
OFNBeFBJRTd4cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx
n8AwDQYJKoZIhvcNAQELBQADggEBAF6Bd97aXhFOHPlN7KYI3dWJOGUhM3166njE
R1ax1vJs3103+jVTrWy0V9JqpmC/xlDDqqfohIT9wCaio0SAgSxWDyZYyad3RZ05
Q7j9FrNGElWqj0VjIN80/TCK4/Dbb4rnk9O0k990IZ4wbcF3yb4DU3gY5FlCnsMA
4123qYpgOtEYwT43O1I1Z52W0zltByqvVPd5eXThwlEu/Jrr3eQcGPcxzdLtcJIQ
CljqUiVh7j9wxcZ5uT0Yp8wdE5MjL6mqHRzha6c+4XKcTK5mVt5x/srnm0gZnDwG
4RuL+1lh7/99B57Nk/FdjI8zJCiWgfWi3wEBnIQWbjMpXq/agTE=
-----END CERTIFICATE-----