Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Orv6FdsvOhdjplNyH6KQcdFN5ds.roa
File:                     Orv6FdsvOhdjplNyH6KQcdFN5ds.roa (raw, json)
Hash identifier:          sgMLLdti0YOJpOmLR+nfYI9rWSbEWszzqMpmUdnsVHk=
Subject key identifier:   3A:BB:FA:15:DB:2F:3A:17:63:A6:53:72:1F:A2:90:71:D1:4D:E5:DB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AD0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Orv6FdsvOhdjplNyH6KQcdFN5ds.roa
Signing time:             Tue 29 Sep 2020 10:07:40 +0000
ROA not before:           Tue 29 Sep 2020 10:07:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.96.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3ABBFA15DB2F3A1763A653721FA29071D14DE5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:8b:68:63:e5:c7:80:d1:30:6f:18:79:76:
                    dc:ad:65:40:f6:00:5b:ce:04:47:6e:c1:9b:3a:c4:
                    c6:7c:26:f0:17:39:2c:e8:a2:22:44:16:3f:89:13:
                    5e:8b:bf:10:5d:63:3b:13:85:11:12:4a:fb:56:85:
                    41:41:82:7f:41:7a:28:be:39:70:4a:2a:96:b8:80:
                    8f:f9:ae:09:bd:0d:55:37:88:f4:ba:07:5c:23:cb:
                    c7:1b:ec:a7:01:42:a9:72:79:15:9d:ba:f5:23:0c:
                    1d:32:38:1f:06:91:cc:7d:f7:4e:f2:37:78:55:51:
                    79:65:fa:b9:7f:77:57:8d:89:46:89:26:ae:35:60:
                    98:a1:56:32:9a:0a:b2:a4:50:83:5a:52:d4:16:b1:
                    c5:1f:2a:c6:8b:e9:e4:00:51:14:72:25:7a:ef:7f:
                    ee:ed:82:d6:a1:9b:9d:56:b8:be:e1:57:40:f1:4e:
                    ea:1b:f0:d4:70:cd:79:4e:c4:9d:20:fd:09:6f:60:
                    cf:71:97:5e:28:1b:9e:aa:de:dd:f5:d3:de:c9:5f:
                    6f:4f:65:ab:39:4f:b5:df:25:65:ad:9f:97:0c:e6:
                    22:36:b3:3c:fd:c6:3f:78:e6:68:5f:3b:77:f7:70:
                    82:7c:71:9b:fb:1e:36:bc:06:0e:44:90:71:c2:e1:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BB:FA:15:DB:2F:3A:17:63:A6:53:72:1F:A2:90:71:D1:4D:E5:DB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Orv6FdsvOhdjplNyH6KQcdFN5ds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:9c:69:d9:75:5a:e2:95:20:79:9d:d9:a3:ce:53:b4:b9:
         fb:ac:68:68:88:a6:ba:cf:a6:25:46:6a:1e:cc:09:c7:43:48:
         f8:0a:d5:f1:3e:d6:4e:80:e5:1f:c7:f6:29:86:48:05:f5:b2:
         31:91:d9:e6:87:61:7a:ef:3f:d4:df:2a:fb:51:a1:12:6f:dc:
         c4:f7:35:17:7d:0a:3d:c9:3c:6a:aa:bb:d1:91:41:be:9c:37:
         6b:cc:6e:1d:3d:ab:02:c0:85:c9:44:13:f1:8c:c1:ea:0a:27:
         bf:35:d0:27:1f:bc:75:3f:c9:e2:2d:28:45:a3:5c:4c:61:6a:
         c6:57:f6:d9:a2:ca:43:6c:37:b5:cd:15:0d:7a:21:04:be:df:
         ee:c9:2e:38:54:3d:cb:35:3c:a1:31:cc:f8:19:fb:a0:e0:81:
         ab:9c:4f:25:fd:4f:ca:e6:c5:83:5a:3e:ae:92:d4:9c:43:e0:
         68:e4:06:ad:41:5c:91:7c:aa:d0:be:a4:09:f0:2a:ba:f1:9a:
         72:16:b2:a7:37:d2:3c:ec:08:86:fe:fb:d1:c7:be:a1:b2:68:
         31:f3:e5:eb:7e:5a:84:f1:5b:6c:b7:e0:1d:a4:fd:4e:37:92:
         58:91:7c:a3:dd:0b:5f:17:0f:38:c1:af:b5:dc:e0:23:b7:ca:
         7d:ac:89:ac
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNBQkJGQTE1REIyRjNB
MTc2M0E2NTM3MjFGQTI5MDcxRDE0REU1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCf1otoY+XHgNEwbxh5dtytZUD2AFvOBEduwZs6xMZ8JvAXOSzo
oiJEFj+JE16LvxBdYzsThRESSvtWhUFBgn9Beii+OXBKKpa4gI/5rgm9DVU3iPS6
B1wjy8cb7KcBQqlyeRWduvUjDB0yOB8Gkcx9907yN3hVUXll+rl/d1eNiUaJJq41
YJihVjKaCrKkUINaUtQWscUfKsaL6eQAURRyJXrvf+7tgtahm51WuL7hV0DxTuob
8NRwzXlOxJ0g/QlvYM9xl14oG56q3t31097JX29PZas5T7XfJWWtn5cM5iI2szz9
xj945mhfO3f3cIJ8cZv7Hja8Bg5EkHHC4edLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOrv6FdsvOhdjplNyH6KQcdFN5dswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09ydjZGZHN2T2hkanBsTnlI
NktRY2RGTjVkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nmAwDQYJKoZIhvcNAQELBQADggEBADJqnGnZdVrilSB5ndmjzlO0ufusaGiIprrP
piVGah7MCcdDSPgK1fE+1k6A5R/H9imGSAX1sjGR2eaHYXrvP9TfKvtRoRJv3MT3
NRd9Cj3JPGqqu9GRQb6cN2vMbh09qwLAhclEE/GMweoKJ7810CcfvHU/yeItKEWj
XExhasZX9tmiykNsN7XNFQ16IQS+3+7JLjhUPcs1PKExzPgZ+6DggaucTyX9T8rm
xYNaPq6S1JxD4GjkBq1BXJF8qtC+pAnwKrrxmnIWsqc30jzsCIb++9HHvqGyaDHz
5et+WoTxW2y34B2k/U43kliRfKPdC18XDzjBr7Xc4CO3yn2siaw=
-----END CERTIFICATE-----