Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y7HCFe2CG8nfGCe6KGQPNDfqUfA.roa
File:                     Y7HCFe2CG8nfGCe6KGQPNDfqUfA.roa (raw, json)
Hash identifier:          10oIVaEXijr+3ogy1vwcA3Ppd+SmmsQWTT72eoiJ7r0=
Subject key identifier:   63:B1:C2:15:ED:82:1B:C9:DF:18:27:BA:28:64:0F:34:37:EA:51:F0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       126F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y7HCFe2CG8nfGCe6KGQPNDfqUfA.roa
Signing time:             Wed 29 Sep 2021 02:54:34 +0000
ROA not before:           Wed 29 Sep 2021 02:54:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        124.6.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4719 (0x126f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:34 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=63B1C215ED821BC9DF1827BA28640F3437EA51F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d9:a2:12:ca:2a:2e:08:be:e8:58:12:84:0a:
                    58:62:cc:3e:85:2e:2b:e8:45:c8:8b:3b:2a:a1:1c:
                    b0:e4:ba:e3:48:55:8d:5d:03:07:44:13:92:5e:eb:
                    ca:52:ec:f3:df:c6:2b:d4:bf:e9:3c:58:56:f1:5c:
                    38:82:2a:f7:0b:33:cc:41:70:84:61:61:d8:b8:11:
                    c6:6e:0b:38:5f:ba:4c:fa:8b:40:ff:ce:33:79:60:
                    d7:a1:68:f7:69:ea:27:2e:a7:9d:b3:ce:76:62:9a:
                    be:b8:ae:bd:9b:8e:88:06:24:a5:5a:48:6b:6f:5a:
                    1e:2d:ee:81:fa:89:fb:11:38:3a:56:48:0b:b4:a0:
                    d0:3c:37:6a:d3:6c:54:5a:7c:47:c8:fc:21:ef:86:
                    e6:09:1b:ba:69:d3:5e:49:80:a7:5d:19:1f:8c:9b:
                    fc:13:a3:1d:3a:23:e7:76:e2:e6:15:b8:a2:e7:20:
                    ef:19:b9:1b:db:9d:df:25:30:ee:fd:3b:79:4d:f8:
                    85:bb:22:46:d4:40:c7:db:a9:d9:08:b8:6e:2c:f1:
                    76:87:13:fd:e2:de:74:ec:b4:ed:6e:39:41:e5:3b:
                    69:78:3e:6c:18:4c:c7:48:b9:be:49:dc:8d:c9:7a:
                    2e:cd:e3:6b:bd:1d:05:2f:04:22:cb:6e:0f:ad:2c:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:C2:15:ED:82:1B:C9:DF:18:27:BA:28:64:0F:34:37:EA:51:F0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y7HCFe2CG8nfGCe6KGQPNDfqUfA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:03:52:39:8f:db:32:6d:fc:10:66:e4:c2:4a:80:06:48:87:
         02:54:90:fe:48:4d:19:a1:f6:ca:b3:21:98:18:0b:97:db:54:
         b6:be:0a:2b:3d:2c:b8:d2:10:2d:84:58:62:4a:17:a3:ec:7e:
         30:5d:e3:6d:89:4d:94:63:68:05:dc:ff:db:ba:0a:ac:12:bf:
         66:da:91:61:7d:29:45:7b:7c:31:c3:ef:b3:6d:54:8e:1a:8a:
         22:26:ac:c4:54:04:1c:65:3d:bd:ca:88:85:55:0c:ba:e3:1e:
         e2:f9:e1:a9:4d:9e:d8:76:9e:e2:08:6b:cd:ce:ce:f8:aa:8b:
         4d:5b:67:ea:6c:38:e1:a0:24:51:2c:8b:47:7d:6e:de:64:8e:
         e4:3a:ba:71:16:93:84:e5:5e:54:45:5b:94:f0:18:12:e3:09:
         8c:4d:24:1e:cc:8a:a0:5a:1e:b1:5d:c4:a6:a3:3f:3e:d3:6a:
         bd:0e:a1:04:b9:d9:78:26:5c:0e:df:df:46:a5:1b:22:29:cd:
         39:15:1f:fa:08:ab:16:93:e5:72:0e:97:39:8b:96:ca:82:73:
         ba:04:0b:8e:69:f6:f9:93:da:f0:56:55:c1:ea:43:4e:ab:fe:
         c3:08:ca:d5:4c:10:a0:65:55:d0:e9:c5:ea:40:37:fd:5e:50:
         1b:84:50:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MzRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDYzQjFDMjE1RUQ4MjFC
QzlERjE4MjdCQTI4NjQwRjM0MzdFQTUxRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD62aISyiouCL7oWBKEClhizD6FLivoRciLOyqhHLDkuuNIVY1d
AwdEE5Je68pS7PPfxivUv+k8WFbxXDiCKvcLM8xBcIRhYdi4EcZuCzhfukz6i0D/
zjN5YNehaPdp6icup52zznZimr64rr2bjogGJKVaSGtvWh4t7oH6ifsRODpWSAu0
oNA8N2rTbFRafEfI/CHvhuYJG7pp015JgKddGR+Mm/wTox06I+d24uYVuKLnIO8Z
uRvbnd8lMO79O3lN+IW7IkbUQMfbqdkIuG4s8XaHE/3i3nTstO1uOUHlO2l4PmwY
TMdIub5J3I3Jei7N42u9HQUvBCLLbg+tLEyHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUY7HCFe2CG8nfGCe6KGQPNDfqUfAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1k3SENGZTJDRzhuZkdDZTZL
R1FQTkRmcVVmQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8
BhAwDQYJKoZIhvcNAQELBQADggEBAA0DUjmP2zJt/BBm5MJKgAZIhwJUkP5ITRmh
9sqzIZgYC5fbVLa+Cis9LLjSEC2EWGJKF6PsfjBd422JTZRjaAXc/9u6CqwSv2ba
kWF9KUV7fDHD77NtVI4aiiImrMRUBBxlPb3KiIVVDLrjHuL54alNnth2nuIIa83O
zviqi01bZ+psOOGgJFEsi0d9bt5kjuQ6unEWk4TlXlRFW5TwGBLjCYxNJB7MiqBa
HrFdxKajPz7Tar0OoQS52XgmXA7f30alGyIpzTkVH/oIqxaT5XIOlzmLlsqCc7oE
C45p9vmT2vBWVcHqQ06r/sMIytVMEKBlVdDpxepAN/1eUBuEUO8=
-----END CERTIFICATE-----