Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YhoC4XzuFNtzbu7YGed05MXQYNg.roa
File:                     YhoC4XzuFNtzbu7YGed05MXQYNg.roa (raw, json)
Hash identifier:          4otNCDYucG+0qYW72QZT76IgAd2HH3Ftnhzo5tTFV6Y=
Subject key identifier:   62:1A:02:E1:7C:EE:14:DB:73:6E:EE:D8:19:E7:74:E4:C5:D0:60:D8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B42
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YhoC4XzuFNtzbu7YGed05MXQYNg.roa
Signing time:             Tue 29 Sep 2020 10:08:12 +0000
ROA not before:           Tue 29 Sep 2020 10:08:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=621A02E17CEE14DB736EEED819E774E4C5D060D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:d1:3a:6d:ec:04:a8:67:33:72:73:ae:1d:
                    b8:57:64:74:d5:91:2b:fa:84:63:f2:e4:10:12:c9:
                    cd:17:4a:dd:f0:95:49:3d:30:aa:7b:86:de:b8:65:
                    7c:7a:d9:8a:f8:6b:0f:f1:e2:2b:80:7f:0b:83:5f:
                    fe:43:5c:70:6f:57:66:7f:d1:82:bd:9f:6e:a6:43:
                    c0:97:d7:73:83:11:0f:aa:5b:f3:13:de:fb:ad:b9:
                    d8:69:8d:9c:52:bb:e3:6c:04:23:7d:59:4d:cc:ae:
                    87:4d:28:5a:72:d1:47:dc:dc:fd:d1:67:b5:86:12:
                    2f:01:6b:3f:87:3b:c0:22:be:03:5f:95:82:44:44:
                    99:c3:ca:8a:24:b3:0f:71:bc:8d:d2:58:49:79:40:
                    91:9f:31:39:60:27:8b:ef:9e:a4:dc:07:d0:8b:0b:
                    4b:95:8a:31:e9:bf:5a:e9:a7:2c:63:e2:ae:dd:05:
                    8e:84:ba:33:ce:33:4c:ad:ea:08:46:35:46:5a:53:
                    92:3f:02:9e:6b:da:d7:bb:b1:4c:99:d8:15:3a:02:
                    da:a6:f6:68:bf:87:61:b3:67:35:af:5b:75:b3:0b:
                    55:b4:5a:4e:b7:d4:78:2c:3d:b2:8e:6d:24:f4:ed:
                    43:83:54:04:5e:cf:63:ea:a7:a3:9d:53:bb:47:d6:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1A:02:E1:7C:EE:14:DB:73:6E:EE:D8:19:E7:74:E4:C5:D0:60:D8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YhoC4XzuFNtzbu7YGed05MXQYNg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:be:98:40:8e:16:c3:81:ba:eb:30:cf:02:73:0f:fb:9e:b8:
         21:9f:9e:ed:f2:10:25:b4:7f:8b:82:63:0a:48:52:b6:de:39:
         72:5d:a3:22:a7:e2:a0:a5:f9:6c:54:df:51:39:d0:df:72:c0:
         8d:f2:22:b3:22:81:66:f3:61:e1:7d:6e:8f:b7:23:f3:dd:e0:
         25:b8:7d:96:a3:90:76:e3:cd:25:72:da:b8:02:e2:a8:23:5f:
         ec:92:7f:5c:34:08:ee:8d:36:fa:e4:fd:d6:79:04:3a:14:93:
         57:74:22:95:2c:c4:3c:72:7d:73:42:47:de:5f:65:f4:80:b9:
         b6:76:48:b5:bc:e0:04:c4:43:d9:72:23:da:e8:21:9d:45:37:
         53:9e:1d:2b:eb:b9:5d:52:37:a0:87:1d:83:ef:1b:9a:6a:a2:
         b5:03:51:82:e9:d3:c7:35:84:52:7c:09:63:56:52:63:ac:47:
         26:fa:d0:7a:86:c5:b1:47:21:25:4f:87:34:46:f5:9d:47:9b:
         89:21:ae:a0:0a:d7:5b:7c:32:2f:9f:82:e8:cd:5b:4f:59:32:
         9a:9c:27:2c:79:e8:a5:c3:8a:36:36:fb:9c:bb:45:97:1a:4c:
         eb:2b:45:f1:e5:25:a2:a7:e6:6f:f2:57:a5:06:1e:cf:95:c2:
         b4:11:cf:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYyMUEwMkUxN0NFRTE0
REI3MzZFRUVEODE5RTc3NEU0QzVEMDYwRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCUiNE6bewEqGczcnOuHbhXZHTVkSv6hGPy5BASyc0XSt3wlUk9
MKp7ht64ZXx62Yr4aw/x4iuAfwuDX/5DXHBvV2Z/0YK9n26mQ8CX13ODEQ+qW/MT
3vutudhpjZxSu+NsBCN9WU3MrodNKFpy0Ufc3P3RZ7WGEi8Baz+HO8AivgNflYJE
RJnDyooksw9xvI3SWEl5QJGfMTlgJ4vvnqTcB9CLC0uVijHpv1rppyxj4q7dBY6E
ujPOM0yt6ghGNUZaU5I/Ap5r2te7sUyZ2BU6Atqm9mi/h2GzZzWvW3WzC1W0Wk63
1HgsPbKObST07UODVARez2Pqp6OdU7tH1tTxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYhoC4XzuFNtzbu7YGed05MXQYNgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lob0M0WHp1Rk50emJ1N1lH
ZWQwNU1YUVlOZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJz
pcQwDQYJKoZIhvcNAQELBQADggEBAAm+mECOFsOBuuswzwJzD/ueuCGfnu3yECW0
f4uCYwpIUrbeOXJdoyKn4qCl+WxU31E50N9ywI3yIrMigWbzYeF9bo+3I/Pd4CW4
fZajkHbjzSVy2rgC4qgjX+ySf1w0CO6NNvrk/dZ5BDoUk1d0IpUsxDxyfXNCR95f
ZfSAubZ2SLW84ATEQ9lyI9roIZ1FN1OeHSvruV1SN6CHHYPvG5pqorUDUYLp08c1
hFJ8CWNWUmOsRyb60HqGxbFHISVPhzRG9Z1Hm4khrqAK11t8Mi+fgujNW09ZMpqc
Jyx56KXDijY2+5y7RZcaTOsrRfHlJaKn5m/yV6UGHs+VwrQRz+s=
-----END CERTIFICATE-----