Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KligiVoIoX9SIhEepLCduu05g1Y.roa
File:                     KligiVoIoX9SIhEepLCduu05g1Y.roa (raw, json)
Hash identifier:          arO9SqPhIN74gsANGt9ynDC0S+YZyu+scABorYMdcMA=
Subject key identifier:   2A:58:A0:89:5A:08:A1:7F:52:22:11:1E:A4:B0:9D:BA:ED:39:83:56
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1247
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KligiVoIoX9SIhEepLCduu05g1Y.roa
Signing time:             Wed 29 Sep 2021 02:54:24 +0000
ROA not before:           Wed 29 Sep 2021 02:54:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        49.159.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4679 (0x1247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2A58A0895A08A17F5222111EA4B09DBAED398356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:bf:b8:62:53:2d:8c:1d:d2:cd:5c:39:1a:
                    81:c2:f2:b0:fa:38:7d:3a:00:1f:68:94:ca:93:6f:
                    f5:56:78:b8:8f:76:d0:76:e3:be:1b:38:b7:a3:ae:
                    ad:c3:80:a7:94:5c:f7:07:f6:1b:b3:ab:64:00:88:
                    ac:32:08:0d:d4:58:41:25:b9:d1:4d:6d:cd:34:99:
                    b4:b0:27:2d:15:de:0d:7a:8a:09:f4:a6:fd:83:77:
                    48:13:88:1a:1c:70:9c:9d:ef:fe:ef:27:70:d9:ab:
                    0c:bf:d0:da:dc:69:3a:6b:5a:5a:17:e2:bd:79:1a:
                    56:d9:dc:e8:4e:9f:b4:8c:f7:8b:8f:3b:f4:ae:99:
                    17:e2:df:73:51:e4:9e:00:19:39:44:15:b9:9a:74:
                    0e:b3:1b:10:f6:ea:9c:f0:eb:59:a8:0b:35:da:69:
                    ba:eb:8f:6b:e7:b9:7b:0f:cd:4b:e9:64:9e:17:90:
                    1c:a1:0b:39:26:09:ac:b3:e6:28:6d:e1:a4:39:1b:
                    e2:2a:d8:74:da:4f:05:c4:3f:d8:fa:f9:be:c5:77:
                    fa:d3:fd:47:42:3d:3d:5e:48:89:7c:71:c7:a2:77:
                    f7:ac:78:b1:80:7c:4b:16:fe:36:c2:07:ff:17:dc:
                    1f:b8:ed:11:e0:9f:68:f4:5b:56:53:15:a8:60:16:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:A0:89:5A:08:A1:7F:52:22:11:1E:A4:B0:9D:BA:ED:39:83:56
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KligiVoIoX9SIhEepLCduu05g1Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:78:f2:a8:28:3e:46:c8:a8:06:08:8d:0d:9f:98:e9:27:34:
         08:da:49:4a:cc:bb:3c:07:1d:89:7c:6a:57:70:b2:58:b7:a3:
         51:01:90:54:de:dc:e1:97:dc:95:ee:2f:9a:cf:bb:ce:49:2c:
         db:b8:0c:d3:bd:26:d9:18:8d:79:33:c8:da:c5:47:d7:4d:b6:
         b6:18:55:ea:98:65:09:90:a3:25:08:3f:f9:df:a0:9b:86:c8:
         4c:60:74:24:3f:3b:b8:85:f8:56:ee:f6:d4:c8:10:a5:72:20:
         3e:28:ba:0e:7a:e6:b7:32:4e:12:bc:18:55:97:92:c7:71:f7:
         b4:81:d8:f5:0d:60:7b:13:08:29:4e:15:1b:35:8d:b1:da:50:
         09:c1:5d:ac:45:7f:5f:38:82:cc:2f:2c:32:7b:40:11:6e:76:
         fa:c6:bb:c5:a3:dd:40:c2:98:2b:c5:6c:47:72:cb:4d:2d:90:
         40:c1:48:09:b7:63:33:cb:e0:59:9c:fc:87:96:fe:86:52:c5:
         31:66:e7:48:e2:47:10:d9:b6:bf:d1:02:72:d6:43:1e:2f:4c:
         15:58:d1:be:3a:d2:fc:8c:44:f6:7e:b3:0e:14:4d:2e:0f:dd:
         91:83:4e:f2:6a:36:f0:dc:96:0d:77:ea:ab:af:0a:46:a7:95:
         fd:5e:be:b7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MjRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDJBNThBMDg5NUEwOEEx
N0Y1MjIyMTExRUE0QjA5REJBRUQzOTgzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcRr+4YlMtjB3SzVw5GoHC8rD6OH06AB9olMqTb/VWeLiPdtB2
474bOLejrq3DgKeUXPcH9huzq2QAiKwyCA3UWEEludFNbc00mbSwJy0V3g16ign0
pv2Dd0gTiBoccJyd7/7vJ3DZqwy/0NrcaTprWloX4r15GlbZ3OhOn7SM94uPO/Su
mRfi33NR5J4AGTlEFbmadA6zGxD26pzw61moCzXaabrrj2vnuXsPzUvpZJ4XkByh
CzkmCayz5iht4aQ5G+Iq2HTaTwXEP9j6+b7Fd/rT/UdCPT1eSIl8cceid/eseLGA
fEsW/jbCB/8X3B+47RHgn2j0W1ZTFahgFhr/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKligiVoIoX9SIhEepLCduu05g1YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0tsaWdpVm9Jb1g5U0loRWVw
TENkdXUwNWcxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n2AwDQYJKoZIhvcNAQELBQADggEBAIV48qgoPkbIqAYIjQ2fmOknNAjaSUrMuzwH
HYl8aldwsli3o1EBkFTe3OGX3JXuL5rPu85JLNu4DNO9JtkYjXkzyNrFR9dNtrYY
VeqYZQmQoyUIP/nfoJuGyExgdCQ/O7iF+Fbu9tTIEKVyID4oug565rcyThK8GFWX
ksdx97SB2PUNYHsTCClOFRs1jbHaUAnBXaxFf184gswvLDJ7QBFudvrGu8Wj3UDC
mCvFbEdyy00tkEDBSAm3YzPL4Fmc/IeW/oZSxTFm50jiRxDZtr/RAnLWQx4vTBVY
0b460vyMRPZ+sw4UTS4P3ZGDTvJqNvDclg136quvCkanlf1evrc=
-----END CERTIFICATE-----