Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONWgDnd_hcXM8vrASin7mEf2aIs.roa
File:                     ONWgDnd_hcXM8vrASin7mEf2aIs.roa (raw, json)
Hash identifier:          7hyQsBHPLPuvv2HXuml0g3ksCuii6LKG2fUTw4A80cQ=
Subject key identifier:   38:D5:A0:0E:77:7F:85:C5:CC:F2:FA:C0:4A:29:FB:98:47:F6:68:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BB9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONWgDnd_hcXM8vrASin7mEf2aIs.roa
Signing time:             Tue 29 Sep 2020 10:08:46 +0000
ROA not before:           Tue 29 Sep 2020 10:08:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.194.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001 (0xbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=38D5A00E777F85C5CCF2FAC04A29FB9847F6688B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:3e:44:0f:2d:da:90:85:89:d6:d1:f1:21:
                    e7:9b:13:11:79:7c:c5:70:26:9c:64:c3:42:71:a1:
                    99:f3:bc:92:55:b2:19:bc:9d:f8:a7:14:1a:d1:90:
                    1d:f8:33:7a:79:47:24:c0:24:6a:cd:d4:60:d2:c1:
                    f7:ec:01:46:4f:ae:33:f2:94:40:f5:ed:da:91:5d:
                    fc:e0:e9:96:a7:e5:08:47:7f:23:ac:09:fb:69:13:
                    6b:47:a2:cf:bf:20:eb:87:b1:f9:54:1c:a9:f3:71:
                    63:c3:5b:88:f3:1c:dc:03:84:23:fa:18:4b:74:b8:
                    5b:27:81:3f:bf:bd:a7:0f:39:59:53:3f:7d:5b:ea:
                    19:bb:34:99:7e:a8:a8:78:f0:41:cc:c6:0c:a8:25:
                    fb:48:fa:da:96:42:18:01:8e:4a:a8:be:b3:3e:6f:
                    b3:00:97:2c:2e:cb:22:02:20:55:1a:9b:0f:ee:40:
                    de:a1:94:f3:21:f2:0a:c1:8a:81:aa:71:ee:60:a2:
                    6f:30:4c:28:3b:52:86:65:51:65:0e:9d:72:ab:d3:
                    fb:9c:bb:65:5c:c9:8c:e7:ed:3c:2e:fa:d3:05:26:
                    51:8c:dd:e6:e6:f9:fc:24:04:16:77:b4:05:77:0c:
                    10:8a:b5:e6:f1:74:0a:e1:9c:93:4e:94:74:51:0a:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D5:A0:0E:77:7F:85:C5:CC:F2:FA:C0:4A:29:FB:98:47:F6:68:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ONWgDnd_hcXM8vrASin7mEf2aIs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:f7:29:c2:c5:d8:f9:ae:13:9d:a1:66:e1:2a:a6:0e:e2:
         27:8d:d7:b9:de:56:7e:2b:21:3f:b4:0f:83:31:db:c9:57:1a:
         9b:dc:bc:27:d4:72:90:01:b4:50:80:2e:42:68:e7:9b:72:d0:
         72:ba:45:28:53:75:58:a6:92:fd:b8:ed:64:0e:ec:50:02:1b:
         f8:3e:84:dd:ff:04:23:9b:0b:52:c3:a5:87:b7:df:ee:f0:a2:
         88:ca:87:00:8c:e6:80:3f:ed:fe:e1:12:d5:cc:c7:98:7d:1f:
         22:33:ef:ec:d6:e7:d9:b9:91:57:86:bd:03:b1:fc:a9:17:9a:
         be:3d:17:41:e7:a5:12:aa:46:87:08:85:08:68:28:8d:33:db:
         47:a9:12:0e:1d:31:f4:c7:c6:e1:87:1e:e8:28:80:42:6a:23:
         09:4f:f5:dc:1b:da:12:d1:f9:a4:c0:33:5b:58:b6:c2:41:6a:
         93:50:68:35:ac:70:94:26:46:1c:33:9f:b1:29:85:a4:34:03:
         87:11:74:e4:b3:c8:dc:23:5c:03:dc:a5:0c:43:e6:02:f1:64:
         e5:4a:9c:39:49:a6:32:8a:0b:d4:da:0a:c6:27:0a:2a:79:68:
         a9:3b:1b:56:a4:21:af:2e:cb:45:5a:4e:07:fe:e4:38:64:5a:
         0f:51:46:05
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM4RDVBMDBFNzc3Rjg1
QzVDQ0YyRkFDMDRBMjlGQjk4NDdGNjY4OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8sz5EDy3akIWJ1tHxIeebExF5fMVwJpxkw0JxoZnzvJJVshm8
nfinFBrRkB34M3p5RyTAJGrN1GDSwffsAUZPrjPylED17dqRXfzg6Zan5QhHfyOs
CftpE2tHos+/IOuHsflUHKnzcWPDW4jzHNwDhCP6GEt0uFsngT+/vacPOVlTP31b
6hm7NJl+qKh48EHMxgyoJftI+tqWQhgBjkqovrM+b7MAlywuyyICIFUamw/uQN6h
lPMh8grBioGqce5gom8wTCg7UoZlUWUOnXKr0/ucu2VcyYzn7Twu+tMFJlGM3ebm
+fwkBBZ3tAV3DBCKtebxdArhnJNOlHRRCjZpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUONWgDnd/hcXM8vrASin7mEf2aIswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09OV2dEbmRfaGNYTTh2ckFT
aW43bUVmMmFJcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF3
TcIwDQYJKoZIhvcNAQELBQADggEBADyE9ynCxdj5rhOdoWbhKqYO4ieN17neVn4r
IT+0D4Mx28lXGpvcvCfUcpABtFCALkJo55ty0HK6RShTdVimkv247WQO7FACG/g+
hN3/BCObC1LDpYe33+7woojKhwCM5oA/7f7hEtXMx5h9HyIz7+zW59m5kVeGvQOx
/KkXmr49F0HnpRKqRocIhQhoKI0z20epEg4dMfTHxuGHHugogEJqIwlP9dwb2hLR
+aTAM1tYtsJBapNQaDWscJQmRhwzn7EphaQ0A4cRdOSzyNwjXAPcpQxD5gLxZOVK
nDlJpjKKC9TaCsYnCip5aKk7G1akIa8uy0VaTgf+5DhkWg9RRgU=
-----END CERTIFICATE-----