Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1eTD2oi3coqzWsw83ALrcizTR0.roa
File:                     Z1eTD2oi3coqzWsw83ALrcizTR0.roa (raw, json)
Hash identifier:          zlxKkercZJldLt5CUTjLdTpfXRsyyVMO0sVCV3Iyo9o=
Subject key identifier:   67:57:93:0F:6A:22:DD:CA:2A:CD:6B:30:F3:70:0B:AD:C8:B3:4D:1D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B31
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1eTD2oi3coqzWsw83ALrcizTR0.roa
Signing time:             Tue 29 Sep 2020 10:08:07 +0000
ROA not before:           Tue 29 Sep 2020 10:08:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.64.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6757930F6A22DDCA2ACD6B30F3700BADC8B34D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:d3:ba:01:96:50:cc:20:3b:58:64:e9:8e:
                    15:6c:c5:30:2a:42:bc:96:47:85:cc:c1:b4:7b:fc:
                    4c:a3:0f:49:00:8e:83:03:fa:56:fb:e8:8e:12:74:
                    ae:e0:d0:e2:76:df:6b:2e:27:88:63:83:88:f1:b7:
                    0e:50:5e:9e:0d:32:0c:3b:06:38:03:bc:62:b2:1c:
                    4c:e9:82:f0:2c:c5:cd:ef:5e:1c:57:bd:5d:75:80:
                    4c:69:1a:b4:aa:39:02:e0:a3:d2:41:f7:18:75:12:
                    e6:0c:6e:a8:4d:3a:6d:dc:67:9e:10:1b:7f:d9:c2:
                    ab:b0:09:fc:50:6c:8b:c0:cb:30:70:5f:1a:10:a4:
                    f7:b8:f9:b1:cc:cb:28:61:da:1e:a1:17:93:38:39:
                    9b:72:dd:05:a8:3c:72:8e:92:4d:e1:7e:55:bf:56:
                    dc:87:fb:9c:fd:7a:17:22:01:6d:dd:28:20:0b:60:
                    05:72:d8:b8:83:61:a1:22:a3:c9:0a:50:b1:7f:dc:
                    ff:5a:d3:84:70:80:fd:bd:ab:93:40:4d:ac:d6:1a:
                    c4:68:56:08:52:b7:fd:23:46:fc:2e:c8:f8:cb:ce:
                    ae:54:e1:03:52:60:a7:ed:bf:ea:4d:40:b2:2b:2a:
                    79:9c:3e:19:47:4d:29:f7:36:bd:a1:d8:22:ec:59:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:93:0F:6A:22:DD:CA:2A:CD:6B:30:F3:70:0B:AD:C8:B3:4D:1D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z1eTD2oi3coqzWsw83ALrcizTR0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:da:86:9c:0f:0a:88:26:2c:18:83:9b:f3:67:5d:5f:44:ef:
         f0:27:28:4a:f8:4a:17:e8:0a:8d:05:ae:f2:56:97:bb:d3:1e:
         28:98:1f:2c:e0:55:95:ae:60:14:fa:c0:16:7c:36:71:a4:1d:
         da:1d:41:1e:6b:21:d5:f1:43:c5:81:44:1f:52:d9:b0:e0:c1:
         fd:1c:c1:f2:96:2c:1e:5c:e2:d1:8a:ea:3f:fd:63:da:e9:23:
         c9:8e:bc:e0:b3:50:00:81:ad:48:5b:04:63:8b:39:32:99:4d:
         77:09:18:48:a8:82:ab:9d:91:f5:46:c2:15:35:94:36:bd:26:
         d0:a0:29:ea:ce:1d:bb:db:24:2f:87:46:47:ac:82:15:9d:25:
         d1:16:ca:6e:78:37:fd:7e:8a:3f:66:4e:f5:0a:0d:49:39:42:
         fb:5a:5a:f1:43:2c:61:51:97:4b:45:be:eb:3d:51:23:ec:ca:
         56:32:2f:2b:61:31:db:76:7a:47:4a:ac:a2:69:b7:29:23:c3:
         91:7c:36:e0:4a:07:e4:f3:1c:80:74:a7:d7:93:d1:18:7e:dd:
         31:b4:ef:5d:9a:10:f2:bd:e6:b6:03:b5:85:33:f4:d0:64:61:
         44:ac:40:fd:16:54:51:9d:04:ae:c1:43:63:55:2f:44:8c:4d:
         f2:e4:69:5e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY3NTc5MzBGNkEyMkRE
Q0EyQUNENkIzMEYzNzAwQkFEQzhCMzREMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc8NO6AZZQzCA7WGTpjhVsxTAqQryWR4XMwbR7/EyjD0kAjoMD
+lb76I4SdK7g0OJ232suJ4hjg4jxtw5QXp4NMgw7BjgDvGKyHEzpgvAsxc3vXhxX
vV11gExpGrSqOQLgo9JB9xh1EuYMbqhNOm3cZ54QG3/ZwquwCfxQbIvAyzBwXxoQ
pPe4+bHMyyhh2h6hF5M4OZty3QWoPHKOkk3hflW/VtyH+5z9ehciAW3dKCALYAVy
2LiDYaEio8kKULF/3P9a04RwgP29q5NATazWGsRoVghSt/0jRvwuyPjLzq5U4QNS
YKftv+pNQLIrKnmcPhlHTSn3Nr2h2CLsWfiVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZ1eTD2oi3coqzWsw83ALrcizTR0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1oxZVREMm9pM2NvcXpXc3c4
M0FMcmNpelRSMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAAwDQYJKoZIhvcNAQELBQADggEBAJ/ahpwPCogmLBiDm/NnXV9E7/AnKEr4Shfo
Co0FrvJWl7vTHiiYHyzgVZWuYBT6wBZ8NnGkHdodQR5rIdXxQ8WBRB9S2bDgwf0c
wfKWLB5c4tGK6j/9Y9rpI8mOvOCzUACBrUhbBGOLOTKZTXcJGEiogqudkfVGwhU1
lDa9JtCgKerOHbvbJC+HRkesghWdJdEWym54N/1+ij9mTvUKDUk5QvtaWvFDLGFR
l0tFvus9USPsylYyLythMdt2ekdKrKJptykjw5F8NuBKB+TzHIB0p9eT0Rh+3TG0
712aEPK95rYDtYUz9NBkYUSsQP0WVFGdBK7BQ2NVL0SMTfLkaV4=
-----END CERTIFICATE-----