Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa
File:                     Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa (raw, json)
Hash identifier:          LBQ+xpSeiwN8qpv/9JSiFSuWZs/iXAB5FveVXGsly9Y=
Subject key identifier:   61:AD:07:22:CB:94:2F:BA:73:84:46:5C:FC:A2:5A:CC:FE:E0:04:6B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AE5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa
Signing time:             Tue 29 Sep 2020 10:07:45 +0000
ROA not before:           Tue 29 Sep 2020 10:07:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.159.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2789 (0xae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=61AD0722CB942FBA7384465CFCA25ACCFEE0046B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:5d:1a:a9:cc:5f:ba:90:bd:9e:d4:10:21:
                    d8:96:0c:df:70:32:65:73:b9:57:77:31:fa:f3:40:
                    67:76:f5:83:6e:4e:5b:0a:be:a4:69:55:d2:0c:78:
                    21:b2:0e:8c:53:3f:bc:49:50:96:3b:40:6f:5d:6a:
                    b3:55:57:c1:43:78:23:2f:2b:44:79:18:6a:20:48:
                    aa:c0:7e:6c:a5:aa:f8:ac:60:38:c5:22:bf:bf:35:
                    cb:88:0a:5d:ac:8b:06:8b:41:cd:33:b4:3f:2e:e3:
                    85:fe:2b:f2:12:f0:73:5a:3e:0a:11:83:34:3b:1d:
                    14:fc:1f:3c:67:72:fd:27:b0:fa:d7:f7:ec:67:dc:
                    b0:be:5b:b1:9d:dc:f1:4e:8f:4a:67:75:21:36:e7:
                    f4:b0:8f:73:8d:a9:24:83:31:84:6f:ed:30:e4:ec:
                    6b:60:c4:07:50:69:41:f5:0e:6f:7b:81:d9:51:66:
                    c2:e9:3d:e6:17:3c:a2:7f:69:3d:6a:dc:8b:e0:cd:
                    10:7e:d2:e8:36:d1:22:d4:06:19:e8:87:03:9d:56:
                    ec:94:4f:90:56:4c:35:e0:31:dd:92:97:52:0f:aa:
                    88:30:89:1c:13:0f:cc:47:2a:27:2f:e1:79:0c:ec:
                    e4:29:73:29:a1:82:da:99:c3:ae:be:8f:74:a9:0f:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AD:07:22:CB:94:2F:BA:73:84:46:5C:FC:A2:5A:CC:FE:E0:04:6B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:a0:46:2b:80:a3:a5:bb:56:13:a3:1c:77:81:e0:17:02:
         54:05:52:46:f5:84:42:21:38:3b:ca:f5:26:b2:d3:11:12:07:
         a0:76:3d:c9:40:1d:a1:b0:bc:93:46:13:66:84:d6:3c:73:5e:
         26:a4:62:b9:6e:ae:c5:e3:97:8f:5c:c6:58:e6:5d:60:9d:6c:
         5c:5b:40:44:86:e8:18:d1:15:24:d5:33:94:ff:41:3f:a3:c9:
         49:e6:c7:eb:79:ad:d5:e6:a3:b9:16:0e:c0:ed:1c:1d:b3:10:
         37:16:4d:f4:27:ac:0d:b3:9c:23:bf:d3:05:fa:86:86:2a:50:
         59:f9:2f:01:05:6b:81:0c:7e:4a:d8:fe:f5:b2:fd:70:98:21:
         0a:94:1d:e4:70:a3:bb:d5:2f:13:17:4b:83:1f:bb:f1:ef:91:
         5b:af:e6:84:f0:c5:6b:38:33:8b:6e:17:f0:19:7f:6f:b4:f8:
         c2:7a:8c:dc:bf:40:54:2d:c2:f2:b8:71:1a:dc:ec:8b:a8:d9:
         47:23:b4:e5:96:8b:9c:54:2b:99:c6:fe:bd:df:b7:3e:9f:53:
         5d:e2:3e:65:a6:01:d3:0a:3f:ff:6e:8e:2e:97:d6:e4:7b:2c:
         85:37:9a:de:2c:3f:38:9b:d8:72:a2:b2:7c:b5:4d:08:ae:a1:
         70:66:e2:b3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYxQUQwNzIyQ0I5NDJG
QkE3Mzg0NDY1Q0ZDQTI1QUNDRkVFMDA0NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw7l0aqcxfupC9ntQQIdiWDN9wMmVzuVd3MfrzQGd29YNuTlsK
vqRpVdIMeCGyDoxTP7xJUJY7QG9darNVV8FDeCMvK0R5GGogSKrAfmylqvisYDjF
Ir+/NcuICl2siwaLQc0ztD8u44X+K/IS8HNaPgoRgzQ7HRT8Hzxncv0nsPrX9+xn
3LC+W7Gd3PFOj0pndSE25/Swj3ONqSSDMYRv7TDk7GtgxAdQaUH1Dm97gdlRZsLp
PeYXPKJ/aT1q3IvgzRB+0ug20SLUBhnohwOdVuyUT5BWTDXgMd2Sl1IPqogwiRwT
D8xHKicv4XkM7OQpcymhgtqZw66+j3SpD/6zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYa0HIsuUL7pzhEZc/KJazP7gBGswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lhMEhJc3VVTDdwemhFWmNf
S0phelA3Z0JHcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n+AwDQYJKoZIhvcNAQELBQADggEBAD1moEYrgKOlu1YToxx3geAXAlQFUkb1hEIh
ODvK9Say0xESB6B2PclAHaGwvJNGE2aE1jxzXiakYrlursXjl49cxljmXWCdbFxb
QESG6BjRFSTVM5T/QT+jyUnmx+t5rdXmo7kWDsDtHB2zEDcWTfQnrA2znCO/0wX6
hoYqUFn5LwEFa4EMfkrY/vWy/XCYIQqUHeRwo7vVLxMXS4Mfu/HvkVuv5oTwxWs4
M4tuF/AZf2+0+MJ6jNy/QFQtwvK4cRrc7Iuo2UcjtOWWi5xUK5nG/r3ftz6fU13i
PmWmAdMKP/9uji6X1uR7LIU3mt4sPzib2HKisny1TQiuoXBm4rM=
-----END CERTIFICATE-----