Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lIxZinerVkJbLRavzo9sFRggZ_Y.roa
File:                     lIxZinerVkJbLRavzo9sFRggZ_Y.roa (raw, json)
Hash identifier:          CVH/kOGpcrqZAvikJr6xZETbIdeoOmj3VvSWDRjFmwY=
Subject key identifier:   94:8C:59:8A:77:AB:56:42:5B:2D:16:AF:CE:8F:6C:15:18:20:67:F6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B57
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lIxZinerVkJbLRavzo9sFRggZ_Y.roa
Signing time:             Tue 29 Sep 2020 10:08:18 +0000
ROA not before:           Tue 29 Sep 2020 10:08:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        123.0.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2903 (0xb57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=948C598A77AB56425B2D16AFCE8F6C15182067F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:d3:59:97:8c:7f:9a:5c:8e:ce:4f:21:03:
                    bb:16:8f:22:a2:70:89:c6:49:ec:bd:b1:2b:d6:42:
                    d2:f5:f2:74:fa:f6:96:11:aa:2e:05:59:6c:68:6e:
                    c4:b8:97:90:fa:14:16:77:cd:5a:4f:72:3c:46:32:
                    34:0f:fb:f4:45:d7:61:9d:35:ee:6d:e4:55:d3:3e:
                    bd:99:8a:d4:21:0f:b6:94:68:c3:fc:52:24:64:b8:
                    13:a3:f0:3c:ab:11:32:11:bc:7b:6d:fb:c6:40:79:
                    e2:53:80:26:1f:be:c8:69:dc:2d:82:8b:3b:04:3a:
                    cf:ef:2e:b9:47:60:fd:8c:30:7b:78:93:0d:e9:dd:
                    cb:a7:6f:c0:21:25:a8:b8:5a:1e:70:d1:4f:ad:35:
                    cc:53:66:5b:d7:90:67:e7:82:c1:b7:19:df:94:79:
                    f3:a3:d8:6e:19:68:30:4e:70:f8:02:41:6a:83:02:
                    d3:35:9a:c4:3b:24:30:c7:69:2f:c8:f2:48:9f:9b:
                    5d:3c:5c:12:bf:13:8b:54:a6:84:d1:0a:36:73:6b:
                    10:44:f7:54:f1:de:6b:ff:ea:c1:32:21:2f:4f:63:
                    3e:26:e6:78:31:61:80:06:fa:81:2b:1e:79:f1:2b:
                    f1:65:98:9d:72:bc:e5:4b:9c:97:5d:31:11:fc:84:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8C:59:8A:77:AB:56:42:5B:2D:16:AF:CE:8F:6C:15:18:20:67:F6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lIxZinerVkJbLRavzo9sFRggZ_Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:dd:e0:ac:09:ed:92:c2:a8:86:b0:5e:b1:62:5b:0d:27:
         82:f5:d5:96:3d:f4:95:9f:e5:8a:ee:fc:f1:7f:2b:69:0c:43:
         9f:4f:c4:8a:4e:3d:07:9a:d6:9d:d5:43:6a:19:ce:9a:a3:b9:
         88:68:c3:a5:f6:3d:8b:2b:78:8d:81:15:22:67:3c:d6:24:de:
         e6:10:9f:63:45:6f:26:b8:2f:f4:80:15:1a:11:44:ea:4c:23:
         16:97:6a:e1:3b:55:e4:e7:b9:18:06:d2:bf:8f:05:a9:d4:38:
         4c:c9:6c:b9:13:ea:16:b9:32:91:d7:72:85:cc:6a:30:ca:8c:
         b4:12:dd:04:d8:f8:cb:c7:36:5e:71:c8:b0:58:d0:00:ed:39:
         0b:a6:10:43:da:fc:25:a3:f1:d4:6f:e8:31:f1:22:fd:9b:45:
         e9:65:6c:30:e0:5b:74:a9:d0:86:3b:fe:a9:b1:54:51:db:20:
         bd:f8:c3:cf:86:ca:11:7a:37:bc:87:11:45:a9:2b:6f:2f:d1:
         a6:3e:61:30:4b:d6:8b:0d:a5:da:32:ad:d7:bd:9f:e3:9c:7b:
         d5:1a:4e:d7:a6:26:ad:c6:92:03:75:c9:11:f5:30:1c:3d:b4:
         52:3f:f9:99:83:36:cb:2f:cf:f5:ec:85:03:43:2b:2e:65:e7:
         b6:0e:f2:4d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk0OEM1OThBNzdBQjU2
NDI1QjJEMTZBRkNFOEY2QzE1MTgyMDY3RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqKNNZl4x/mlyOzk8hA7sWjyKicInGSey9sSvWQtL18nT69pYR
qi4FWWxobsS4l5D6FBZ3zVpPcjxGMjQP+/RF12GdNe5t5FXTPr2ZitQhD7aUaMP8
UiRkuBOj8DyrETIRvHtt+8ZAeeJTgCYfvshp3C2CizsEOs/vLrlHYP2MMHt4kw3p
3cunb8AhJai4Wh5w0U+tNcxTZlvXkGfngsG3Gd+UefOj2G4ZaDBOcPgCQWqDAtM1
msQ7JDDHaS/I8kifm108XBK/E4tUpoTRCjZzaxBE91Tx3mv/6sEyIS9PYz4m5ngx
YYAG+oErHnnxK/FlmJ1yvOVLnJddMRH8hIeRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlIxZinerVkJbLRavzo9sFRggZ/YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xJeFppbmVyVmtKYkxSYXZ6
bzlzRlJnZ1pfWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
AC0wDQYJKoZIhvcNAQELBQADggEBACvV3eCsCe2SwqiGsF6xYlsNJ4L11ZY99JWf
5Yru/PF/K2kMQ59PxIpOPQea1p3VQ2oZzpqjuYhow6X2PYsreI2BFSJnPNYk3uYQ
n2NFbya4L/SAFRoRROpMIxaXauE7VeTnuRgG0r+PBanUOEzJbLkT6ha5MpHXcoXM
ajDKjLQS3QTY+MvHNl5xyLBY0ADtOQumEEPa/CWj8dRv6DHxIv2bRellbDDgW3Sp
0IY7/qmxVFHbIL34w8+GyhF6N7yHEUWpK28v0aY+YTBL1osNpdoyrde9n+Oce9Ua
TtemJq3GkgN1yRH1MBw9tFI/+ZmDNssvz/XshQNDKy5l57YO8k0=
-----END CERTIFICATE-----