Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N4p15p6S0fN505E4rpcOTPGlDdE.roa
File:                     N4p15p6S0fN505E4rpcOTPGlDdE.roa (raw, json)
Hash identifier:          IeLiGNZaTWLwOSTX0qhYadvOuPMFn0ik/9BrA31K2nk=
Subject key identifier:   37:8A:75:E6:9E:92:D1:F3:79:D3:91:38:AE:97:0E:4C:F1:A5:0D:D1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BBB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N4p15p6S0fN505E4rpcOTPGlDdE.roa
Signing time:             Tue 29 Sep 2020 10:08:47 +0000
ROA not before:           Tue 29 Sep 2020 10:08:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3003 (0xbbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=378A75E69E92D1F379D39138AE970E4CF1A50DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:f5:08:03:a1:c2:34:de:72:f6:71:ca:c4:
                    80:58:3b:cf:00:d4:68:5b:07:68:f0:d3:80:e8:8e:
                    d1:89:be:1a:94:e7:a4:de:21:e4:51:4b:cd:07:cc:
                    bd:a0:60:4b:b2:33:f7:e4:3a:a8:12:e5:53:20:cf:
                    e5:b7:b5:c7:8f:1b:9c:16:7e:fc:46:e6:54:a8:24:
                    64:91:d2:72:bd:00:0c:1f:13:47:dc:3d:da:2a:cb:
                    e5:f7:aa:2c:e4:bc:d0:8c:f4:09:6a:ec:83:74:7a:
                    f3:f6:c8:83:24:49:1e:0e:89:52:77:a2:1f:31:61:
                    f8:49:0e:cd:ce:0d:71:c8:90:d6:99:90:1e:50:dd:
                    64:8f:b7:3a:ef:a8:da:10:f4:5e:32:6d:d3:69:15:
                    5d:f4:ca:c0:39:6a:07:a5:21:a3:bf:68:39:21:f8:
                    5f:65:19:b4:66:c9:e7:44:84:6f:e6:c5:cf:e6:b8:
                    62:5a:ea:ea:fb:19:ad:7c:7f:76:da:cd:82:0d:dc:
                    6a:b0:d2:9a:ce:77:14:87:96:51:68:dd:91:59:89:
                    1b:15:04:f2:51:ed:af:61:fb:01:0c:ce:bc:90:b5:
                    eb:2a:08:29:20:0c:40:33:65:af:48:1e:9c:c1:9b:
                    d7:7d:2c:13:90:10:d2:b1:a4:21:bc:cb:c0:14:ef:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8A:75:E6:9E:92:D1:F3:79:D3:91:38:AE:97:0E:4C:F1:A5:0D:D1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N4p15p6S0fN505E4rpcOTPGlDdE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:76:ac:65:c0:b8:1f:86:8f:d5:e3:1e:4a:ed:dd:3a:40:cc:
         01:eb:b8:20:00:65:d9:87:32:8d:09:10:a0:21:02:08:0e:22:
         20:94:79:8e:e1:de:b7:b2:68:ca:1e:88:c4:eb:fe:f4:15:93:
         71:74:4a:e0:f3:42:fb:0e:91:fa:52:34:1a:9a:f7:4a:d4:54:
         a5:a4:2f:fc:55:7f:fa:12:ce:0e:7a:03:93:c0:c1:86:9a:1c:
         a9:d1:67:26:18:7c:7d:30:5f:37:f6:57:ce:3a:c7:18:41:e5:
         8c:1a:31:14:5e:f4:ab:2e:81:ef:e4:1c:40:b0:c6:7d:50:42:
         73:ba:97:48:52:d6:53:71:7a:67:02:cc:db:22:9e:b9:9a:fc:
         28:80:08:2f:46:ab:db:a8:38:10:ec:39:9a:27:22:8d:7e:00:
         04:cd:3c:56:2a:c3:44:a5:c7:eb:05:93:dc:63:6e:18:26:52:
         5f:93:2f:8d:2b:7f:51:17:9e:51:23:f0:2c:eb:27:85:71:e5:
         b0:1e:53:85:57:90:00:72:02:36:2b:a8:46:a3:69:f5:89:75:
         8b:c2:bd:4b:af:71:79:4f:3f:37:e8:9d:11:f6:39:a5:61:b7:
         34:c6:36:a1:d7:1d:16:74:f0:cd:b9:81:34:8d:d2:97:9d:2c:
         3b:66:ff:b4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM3OEE3NUU2OUU5MkQx
RjM3OUQzOTEzOEFFOTcwRTRDRjFBNTBERDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd6fUIA6HCNN5y9nHKxIBYO88A1GhbB2jw04DojtGJvhqU56Te
IeRRS80HzL2gYEuyM/fkOqgS5VMgz+W3tcePG5wWfvxG5lSoJGSR0nK9AAwfE0fc
Pdoqy+X3qizkvNCM9Alq7IN0evP2yIMkSR4OiVJ3oh8xYfhJDs3ODXHIkNaZkB5Q
3WSPtzrvqNoQ9F4ybdNpFV30ysA5agelIaO/aDkh+F9lGbRmyedEhG/mxc/muGJa
6ur7Ga18f3bazYIN3Gqw0prOdxSHllFo3ZFZiRsVBPJR7a9h+wEMzryQtesqCCkg
DEAzZa9IHpzBm9d9LBOQENKxpCG8y8AU74DHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUN4p15p6S0fN505E4rpcOTPGlDdEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL040cDE1cDZTMGZONTA1RTRy
cGNPVFBHbERkRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3
TcYwDQYJKoZIhvcNAQELBQADggEBADV2rGXAuB+Gj9XjHkrt3TpAzAHruCAAZdmH
Mo0JEKAhAggOIiCUeY7h3reyaMoeiMTr/vQVk3F0SuDzQvsOkfpSNBqa90rUVKWk
L/xVf/oSzg56A5PAwYaaHKnRZyYYfH0wXzf2V846xxhB5YwaMRRe9Ksuge/kHECw
xn1QQnO6l0hS1lNxemcCzNsinrma/CiACC9Gq9uoOBDsOZonIo1+AATNPFYqw0Sl
x+sFk9xjbhgmUl+TL40rf1EXnlEj8CzrJ4Vx5bAeU4VXkAByAjYrqEajafWJdYvC
vUuvcXlPPzfonRH2OaVhtzTGNqHXHRZ08M25gTSN0pedLDtm/7Q=
-----END CERTIFICATE-----