Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bUg8YyHV70MKXbcTrqvIpouiwsY.roa
File:                     bUg8YyHV70MKXbcTrqvIpouiwsY.roa (raw, json)
Hash identifier:          vJX6+SZdzP/rmlfsMSYk0ebDDOhmF772NQ3lJWwrO7A=
Subject key identifier:   6D:48:3C:63:21:D5:EF:43:0A:5D:B7:13:AE:AB:C8:A6:8B:A2:C2:C6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B67
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bUg8YyHV70MKXbcTrqvIpouiwsY.roa
Signing time:             Tue 29 Sep 2020 10:08:22 +0000
ROA not before:           Tue 29 Sep 2020 10:08:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        180.218.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2919 (0xb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6D483C6321D5EF430A5DB713AEABC8A68BA2C2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:75:97:8a:7a:f1:f6:e0:c2:c4:c4:d9:e3:
                    3a:79:de:8b:b5:22:d3:ab:8c:a1:c5:41:bc:c6:bb:
                    0e:35:50:46:5c:59:a3:6a:38:2d:ce:11:e9:d3:76:
                    f2:c3:c9:3f:be:2f:10:53:05:f6:9a:39:2c:a2:75:
                    02:0a:9a:b8:86:07:0e:ce:06:a9:ea:5a:8d:f3:04:
                    59:ef:2b:3b:72:1c:0e:a1:bb:54:73:59:b5:da:87:
                    36:d3:7d:4c:89:c7:45:9d:67:40:17:b0:d4:b6:a3:
                    3e:be:bb:01:32:18:85:25:f2:06:93:94:48:aa:de:
                    d2:f6:b2:54:b2:05:ed:2c:83:f1:d5:b9:44:61:57:
                    1c:c3:97:12:af:c5:09:f0:2c:63:cd:dc:da:a0:ba:
                    05:e6:f4:ef:d1:1c:43:d6:be:47:3f:e3:86:63:1a:
                    ab:88:95:6e:26:a2:6b:94:f4:0b:e9:0c:6b:ba:44:
                    99:4f:9e:d2:e8:cd:d0:78:b3:1c:26:51:b0:9f:b1:
                    d5:18:54:6d:2d:87:1c:bb:37:b7:92:a3:7a:b1:c7:
                    70:62:96:5a:7b:a5:27:e1:d6:2c:4e:8d:ab:07:9e:
                    dd:6a:b2:7b:05:c4:38:c7:d3:fa:4e:97:21:2b:1f:
                    67:fa:a1:18:40:49:4e:e0:34:cd:35:57:1a:a0:7d:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:48:3C:63:21:D5:EF:43:0A:5D:B7:13:AE:AB:C8:A6:8B:A2:C2:C6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bUg8YyHV70MKXbcTrqvIpouiwsY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:75:ab:29:f4:b7:08:1a:2f:ef:a2:a8:0e:35:40:0e:db:
         c0:e2:c3:eb:b0:c5:64:c7:b5:d4:ec:3a:96:80:98:21:c2:a0:
         73:f8:d8:59:d9:87:11:c9:d4:3e:d8:ef:af:1b:25:a8:49:3c:
         aa:28:0e:1c:35:07:73:50:fa:87:38:ad:bb:c8:5e:ca:26:51:
         a7:bc:a0:80:81:a4:e5:78:f4:10:19:68:5f:2a:35:b3:06:63:
         f7:6b:8a:c3:63:4d:32:38:67:f0:89:49:cb:2b:b5:bd:76:78:
         c0:99:77:ea:28:65:5f:b5:39:9b:5a:f4:6a:4d:35:8a:28:af:
         27:a7:b0:2b:c7:b3:ad:4f:60:be:c8:de:76:3f:ff:46:4e:ed:
         5c:7c:ef:09:5f:7b:d8:a0:79:a4:30:47:3c:d3:e2:18:83:e3:
         e3:4c:2c:28:c3:ba:b5:68:23:10:be:26:23:93:d2:7d:3c:ce:
         3b:22:3d:b0:9a:e4:80:59:85:45:d6:fb:18:ff:f8:aa:ca:01:
         cf:08:17:87:cf:40:9a:0a:37:3b:2d:ce:8b:d6:61:e9:70:88:
         22:42:d5:db:9a:d0:72:75:14:5e:43:f4:b3:b0:3f:e0:dd:ee:
         2d:aa:4e:97:b9:7e:60:13:a2:18:ec:10:29:56:8c:0c:b6:30:
         9e:f9:e9:a6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZENDgzQzYzMjFENUVG
NDMwQTVEQjcxM0FFQUJDOEE2OEJBMkMyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnc3WXinrx9uDCxMTZ4zp53ou1ItOrjKHFQbzGuw41UEZcWaNq
OC3OEenTdvLDyT++LxBTBfaaOSyidQIKmriGBw7OBqnqWo3zBFnvKztyHA6hu1Rz
WbXahzbTfUyJx0WdZ0AXsNS2oz6+uwEyGIUl8gaTlEiq3tL2slSyBe0sg/HVuURh
VxzDlxKvxQnwLGPN3NqgugXm9O/RHEPWvkc/44ZjGquIlW4momuU9AvpDGu6RJlP
ntLozdB4sxwmUbCfsdUYVG0thxy7N7eSo3qxx3Billp7pSfh1ixOjasHnt1qsnsF
xDjH0/pOlyErH2f6oRhASU7gNM01VxqgfWCTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbUg8YyHV70MKXbcTrqvIpouiwsYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2JVZzhZeUhWNzBNS1hiY1Ry
cXZJcG91aXdzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2uIwDQYJKoZIhvcNAQELBQADggEBAIg6dasp9LcIGi/voqgONUAO28Diw+uwxWTH
tdTsOpaAmCHCoHP42FnZhxHJ1D7Y768bJahJPKooDhw1B3NQ+oc4rbvIXsomUae8
oICBpOV49BAZaF8qNbMGY/drisNjTTI4Z/CJScsrtb12eMCZd+ooZV+1OZta9GpN
NYooryensCvHs61PYL7I3nY//0ZO7Vx87wlfe9igeaQwRzzT4hiD4+NMLCjDurVo
IxC+JiOT0n08zjsiPbCa5IBZhUXW+xj/+KrKAc8IF4fPQJoKNzstzovWYelwiCJC
1dua0HJ1FF5D9LOwP+Dd7i2qTpe5fmATohjsEClWjAy2MJ756aY=
-----END CERTIFICATE-----