Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ym-_w9GHFp-kSOKVucoNgE5RkBQ.roa
File:                     Ym-_w9GHFp-kSOKVucoNgE5RkBQ.roa (raw, json)
Hash identifier:          gdKhq1Xzlrwxvz6HRYMz9NokL6d80koz/A7I9lH3ksY=
Subject key identifier:   62:6F:BF:C3:D1:87:16:9F:A4:48:E2:95:B9:CA:0D:80:4E:51:90:14
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AEA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ym-_w9GHFp-kSOKVucoNgE5RkBQ.roa
Signing time:             Tue 29 Sep 2020 10:07:46 +0000
ROA not before:           Tue 29 Sep 2020 10:07:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.159.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2794 (0xaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=626FBFC3D187169FA448E295B9CA0D804E519014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:97:bb:c3:07:d9:4e:4a:f3:20:cd:0a:22:
                    72:fc:85:e4:bf:b6:19:e1:b7:fd:c2:35:43:33:29:
                    b9:be:ae:36:4d:99:a0:89:91:91:0b:57:18:59:bd:
                    c9:03:11:03:8f:9e:72:f7:4d:c0:4e:0f:ff:4e:f9:
                    18:34:59:0b:97:3a:0c:d7:87:f0:9a:eb:7d:c0:8e:
                    d9:c0:9c:6b:62:d8:57:35:ec:6d:6c:8b:eb:54:37:
                    2d:3a:0c:18:2b:90:18:ca:4e:e9:c3:64:52:61:02:
                    87:68:bb:80:07:74:49:90:5c:ad:98:0c:72:7f:f5:
                    d4:03:50:ad:2b:7d:8b:16:bb:4d:6c:62:73:04:cd:
                    60:30:f7:fb:b9:85:3d:c9:3a:8c:66:97:f2:a7:96:
                    84:5b:38:e2:38:b4:9d:8b:35:42:dd:5c:7b:73:38:
                    1b:1d:3f:4c:ca:09:61:f6:71:16:d9:ce:5c:8c:ae:
                    18:b3:42:ff:63:75:1a:ea:96:b9:94:c9:37:f7:e3:
                    3f:fb:c2:95:e6:67:8c:05:e5:33:3d:7e:8c:47:3d:
                    39:4f:de:cc:a7:f9:8f:2a:77:32:c0:82:a3:7d:21:
                    b3:97:a7:8a:76:a2:e7:42:d8:93:96:cb:21:69:50:
                    fc:a9:83:a0:e6:33:85:8c:23:91:9b:3b:36:aa:3c:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:BF:C3:D1:87:16:9F:A4:48:E2:95:B9:CA:0D:80:4E:51:90:14
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ym-_w9GHFp-kSOKVucoNgE5RkBQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:a4:f7:1e:c9:e3:75:37:02:d2:a3:c8:c8:ef:b8:71:66:
         cb:42:3f:13:1b:5f:76:f6:29:36:fc:1c:22:5a:93:f5:81:5b:
         55:3c:bf:b9:e5:fa:ed:98:f8:7c:1f:bf:d8:eb:8a:72:2c:91:
         8a:91:37:b0:50:25:7c:42:a4:71:68:9c:b1:eb:c5:1d:e8:b4:
         b1:28:82:8d:3e:5c:e8:ff:79:df:cb:96:ed:08:02:72:b2:a7:
         12:f6:43:92:2d:e4:a7:32:17:f8:a7:2b:49:a1:49:b1:27:42:
         47:7b:30:88:5a:67:a1:a7:83:62:b6:f5:1f:74:b0:e0:4d:62:
         d8:18:b5:ad:c8:2a:1a:be:d5:81:81:8e:bf:1a:f3:87:00:a9:
         d9:28:62:cd:a8:fb:47:45:5f:42:f7:c0:79:a3:f4:19:26:30:
         86:e5:9e:63:2e:55:7f:95:95:38:40:44:ff:7a:40:48:a4:7d:
         61:be:08:9f:f0:94:05:02:a6:9f:bd:05:58:cc:71:7c:bd:7a:
         24:ab:41:2c:77:6f:99:41:f5:45:1c:56:a2:75:a6:cf:2c:17:
         53:62:e3:8d:8e:8a:5e:01:35:2d:10:07:5c:45:2a:2e:2f:78:
         a6:85:05:8c:76:61:cf:32:54:2a:0d:eb:63:3d:91:e4:85:24:
         c0:3c:2a:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYyNkZCRkMzRDE4NzE2
OUZBNDQ4RTI5NUI5Q0EwRDgwNEU1MTkwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHspe7wwfZTkrzIM0KInL8heS/thnht/3CNUMzKbm+rjZNmaCJ
kZELVxhZvckDEQOPnnL3TcBOD/9O+Rg0WQuXOgzXh/Ca633AjtnAnGti2Fc17G1s
i+tUNy06DBgrkBjKTunDZFJhAodou4AHdEmQXK2YDHJ/9dQDUK0rfYsWu01sYnME
zWAw9/u5hT3JOoxml/KnloRbOOI4tJ2LNULdXHtzOBsdP0zKCWH2cRbZzlyMrhiz
Qv9jdRrqlrmUyTf34z/7wpXmZ4wF5TM9foxHPTlP3syn+Y8qdzLAgqN9IbOXp4p2
oudC2JOWyyFpUPypg6DmM4WMI5GbOzaqPDm7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYm+/w9GHFp+kSOKVucoNgE5RkBQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ltLV93OUdIRnAta1NPS1Z1
Y29OZ0U1UmtCUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n/wwDQYJKoZIhvcNAQELBQADggEBACx9pPceyeN1NwLSo8jI77hxZstCPxMbX3b2
KTb8HCJak/WBW1U8v7nl+u2Y+Hwfv9jrinIskYqRN7BQJXxCpHFonLHrxR3otLEo
go0+XOj/ed/Llu0IAnKypxL2Q5It5KcyF/inK0mhSbEnQkd7MIhaZ6Gng2K29R90
sOBNYtgYta3IKhq+1YGBjr8a84cAqdkoYs2o+0dFX0L3wHmj9BkmMIblnmMuVX+V
lThARP96QEikfWG+CJ/wlAUCpp+9BVjMcXy9eiSrQSx3b5lB9UUcVqJ1ps8sF1Ni
442Oil4BNS0QB1xFKi4veKaFBYx2Yc8yVCoN62M9keSFJMA8KuY=
-----END CERTIFICATE-----