Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XHZ_aSxQzwO59E2-q9P4UfRUx0c.roa
File:                     XHZ_aSxQzwO59E2-q9P4UfRUx0c.roa (raw, json)
Hash identifier:          OSXPuObakU0XoFdwQ+dp0WkamcGVcEb6LeQsvUczQw0=
Subject key identifier:   5C:76:7F:69:2C:50:CF:03:B9:F4:4D:BE:AB:D3:F8:51:F4:54:C7:47
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BB2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XHZ_aSxQzwO59E2-q9P4UfRUx0c.roa
Signing time:             Tue 29 Sep 2020 10:08:43 +0000
ROA not before:           Tue 29 Sep 2020 10:08:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        103.225.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2994 (0xbb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5C767F692C50CF03B9F44DBEABD3F851F454C747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:28:de:a5:ef:73:ee:00:79:8c:82:2f:7e:
                    00:dd:87:88:b3:4f:16:55:f4:12:e3:f7:de:ae:ec:
                    f0:b1:13:a9:b5:00:d8:65:a3:a8:17:04:56:f9:d0:
                    e8:a6:31:82:eb:50:86:30:d3:3c:0b:5d:66:cf:54:
                    00:99:49:c6:fd:82:7d:64:7a:2d:e8:09:7a:63:d0:
                    78:3c:70:52:c7:dd:18:59:18:b8:2c:2c:d9:7a:44:
                    f0:21:41:d7:25:d2:18:df:59:d4:69:6a:c7:ac:47:
                    85:6c:f3:b6:7e:81:ab:28:03:4a:8c:5b:24:d5:37:
                    5b:ad:19:e8:ad:b7:c6:c5:b3:9f:1a:42:f9:32:64:
                    0c:a3:ee:53:9f:ad:98:9b:b5:1c:e4:7b:af:80:fe:
                    17:a7:08:a4:16:18:62:08:c4:ab:47:17:03:4e:ac:
                    4b:de:63:6a:63:c9:5d:05:57:32:94:a0:85:42:a9:
                    cf:b0:51:32:df:7a:10:ee:42:30:4a:47:a0:b3:07:
                    dd:5d:ea:44:c2:1a:36:22:d3:c5:de:66:13:4d:c8:
                    59:84:98:23:f8:bd:b9:bc:c2:ff:5a:6c:a8:3d:60:
                    9c:20:cc:82:a3:0c:53:98:a0:65:6d:1e:fd:99:70:
                    96:85:cf:4a:59:0f:23:ca:ce:f6:d0:f0:09:52:7b:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:7F:69:2C:50:CF:03:B9:F4:4D:BE:AB:D3:F8:51:F4:54:C7:47
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XHZ_aSxQzwO59E2-q9P4UfRUx0c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e1:c5:cf:31:83:09:f6:06:0e:4f:44:99:24:1b:e2:81:b3:
         0f:eb:99:ed:ce:97:79:83:5d:7c:18:9a:17:6c:0b:00:8a:27:
         ff:d9:d7:93:62:56:6c:56:ad:e6:d8:d5:94:12:f5:34:a6:b0:
         2f:36:04:f5:43:34:ed:b1:6b:36:b9:29:75:ec:f5:55:d0:86:
         a8:b6:97:ca:a1:68:23:2d:79:d9:23:79:7b:2c:4e:a8:02:81:
         be:b9:9b:eb:70:c7:e0:e6:43:1f:01:2a:0d:cf:d8:70:6d:bc:
         1b:12:6f:c4:1f:62:4e:1d:1b:a1:4e:bf:b5:38:1b:dd:75:7b:
         3d:68:1b:37:0d:48:7a:40:aa:02:6f:c7:84:c2:89:ef:09:b7:
         f1:71:54:66:47:53:7c:05:b0:43:18:ed:d2:04:99:af:0c:0a:
         3c:a5:f8:7a:31:be:6b:a3:6c:0b:83:b1:3a:47:98:9c:be:af:
         26:c1:88:74:1d:32:3a:8c:c0:28:7b:56:2c:0e:c6:43:24:dd:
         df:f5:78:ec:ed:00:b1:c5:e2:96:50:5d:fd:c0:5b:eb:19:73:
         68:27:75:c2:54:cb:92:8a:a8:29:97:e0:c0:cc:0d:68:f8:b1:
         99:f7:d0:2d:15:ea:30:cf:11:a0:c1:c2:a0:bb:45:a5:31:1f:
         63:07:05:97
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVDNzY3RjY5MkM1MENG
MDNCOUY0NERCRUFCRDNGODUxRjQ1NEM3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDpyjepe9z7gB5jIIvfgDdh4izTxZV9BLj996u7PCxE6m1ANhl
o6gXBFb50OimMYLrUIYw0zwLXWbPVACZScb9gn1kei3oCXpj0Hg8cFLH3RhZGLgs
LNl6RPAhQdcl0hjfWdRpasesR4Vs87Z+gasoA0qMWyTVN1utGeitt8bFs58aQvky
ZAyj7lOfrZibtRzke6+A/henCKQWGGIIxKtHFwNOrEveY2pjyV0FVzKUoIVCqc+w
UTLfehDuQjBKR6CzB91d6kTCGjYi08XeZhNNyFmEmCP4vbm8wv9abKg9YJwgzIKj
DFOYoGVtHv2ZcJaFz0pZDyPKzvbQ8AlSe2axAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXHZ/aSxQzwO59E2+q9P4UfRUx0cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1hIWl9hU3hRendPNTlFMi1x
OVA0VWZSVXgwYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
4QMwDQYJKoZIhvcNAQELBQADggEBAAThxc8xgwn2Bg5PRJkkG+KBsw/rme3Ol3mD
XXwYmhdsCwCKJ//Z15NiVmxWrebY1ZQS9TSmsC82BPVDNO2xaza5KXXs9VXQhqi2
l8qhaCMtedkjeXssTqgCgb65m+twx+DmQx8BKg3P2HBtvBsSb8QfYk4dG6FOv7U4
G911ez1oGzcNSHpAqgJvx4TCie8Jt/FxVGZHU3wFsEMY7dIEma8MCjyl+Hoxvmuj
bAuDsTpHmJy+rybBiHQdMjqMwCh7ViwOxkMk3d/1eOztALHF4pZQXf3AW+sZc2gn
dcJUy5KKqCmX4MDMDWj4sZn30C0V6jDPEaDBwqC7RaUxH2MHBZc=
-----END CERTIFICATE-----