Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pMivofnq9uunBZafUgDtY3OgWZQ.roa
File:                     pMivofnq9uunBZafUgDtY3OgWZQ.roa (raw, json)
Hash identifier:          s8GEsQS4gVmL/xLhywr/mM6eYxtnXQ6iC3D0OsIN/go=
Subject key identifier:   A4:C8:AF:A1:F9:EA:F6:EB:A7:05:96:9F:52:00:ED:63:73:A0:59:94
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1366
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pMivofnq9uunBZafUgDtY3OgWZQ.roa
Signing time:             Wed 29 Sep 2021 02:55:43 +0000
ROA not before:           Wed 29 Sep 2021 02:55:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        61.64.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4966 (0x1366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A4C8AFA1F9EAF6EBA705969F5200ED6373A05994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:19:12:62:af:c9:7d:61:2f:ef:6f:2e:7e:
                    5d:d5:a6:0a:28:e0:89:5a:53:dd:a5:17:b1:60:a0:
                    a6:1c:e5:d4:60:3c:f8:e4:b9:d5:ee:05:50:d6:08:
                    41:03:3e:7a:85:59:c5:7d:f8:6c:36:e6:50:90:13:
                    66:c4:db:f5:1d:60:54:34:ec:1d:76:a2:cf:fb:11:
                    a9:9a:ef:b6:c2:c1:b3:f5:41:4a:82:71:04:5e:13:
                    aa:a1:cc:43:9c:50:3d:24:22:e1:c4:84:a9:5d:ba:
                    8a:89:d4:c6:2f:3d:14:d1:f6:c7:4b:62:e9:31:d9:
                    31:2b:ed:80:a1:dd:91:15:2f:27:7b:1d:a0:0f:b9:
                    0d:f6:5c:dd:71:6a:a8:14:f0:8f:19:11:2a:a9:5b:
                    9e:c9:af:e5:31:c2:9c:48:e9:2b:d4:d0:6a:b0:1d:
                    57:91:3b:ac:b6:59:36:91:32:e3:fd:ee:2c:bc:7b:
                    cf:0e:5e:85:cd:93:c7:33:ae:a8:76:29:81:59:bf:
                    ab:01:cf:f5:1f:8c:b5:c4:87:5e:de:8d:34:46:c7:
                    91:58:97:38:53:d0:36:0d:03:0d:b5:69:76:4d:7b:
                    6b:71:8c:3d:c2:0b:5a:fa:60:eb:df:b1:ed:c9:33:
                    76:b8:d9:f0:4d:98:cd:94:04:32:37:ce:39:37:52:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C8:AF:A1:F9:EA:F6:EB:A7:05:96:9F:52:00:ED:63:73:A0:59:94
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pMivofnq9uunBZafUgDtY3OgWZQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:5b:e9:c5:aa:19:26:10:e4:5b:f5:f4:0e:85:95:26:a9:1d:
         4d:d8:1c:df:e6:77:f8:79:fd:4d:a4:07:b4:48:57:33:3c:de:
         1e:c6:51:b1:f6:b1:4a:a7:72:69:2c:1d:c9:8f:55:b8:70:74:
         1e:a3:f8:8a:cb:13:1a:ee:ca:9c:f7:b1:b2:83:cd:f4:cf:e9:
         ef:c6:ae:02:d0:75:57:e7:83:5a:2a:cb:58:b1:bd:3c:b6:fe:
         02:9c:30:28:3c:1b:50:58:f6:05:ad:d5:37:a8:6d:6f:c9:74:
         10:fa:ef:ec:05:6d:ca:ba:da:2d:38:ee:85:08:87:09:f5:b2:
         36:56:cb:85:46:5e:74:7a:81:9b:1a:15:bd:03:28:ee:5f:02:
         81:7b:5f:6a:9c:c0:a6:94:4a:65:3d:c1:c4:87:3a:ae:f1:c1:
         92:b5:09:44:61:df:4c:29:62:b3:40:47:33:03:88:da:3d:89:
         62:cb:ec:9b:42:c6:ef:46:ae:51:07:e5:b0:2f:78:cf:bb:75:
         72:7b:76:84:df:3a:a2:f4:a3:e4:e5:1a:95:2d:30:09:be:00:
         b9:8c:f4:f2:86:21:2e:a8:7f:66:d5:75:0b:39:b7:63:18:b9:
         ab:4f:e4:d4:8f:2a:1b:90:c2:f9:ad:fe:41:49:76:af:17:0b:
         d4:ea:2b:aa
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1NDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE0QzhBRkExRjlFQUY2
RUJBNzA1OTY5RjUyMDBFRDYzNzNBMDU5OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGthkSYq/JfWEv728ufl3Vpgoo4IlaU92lF7FgoKYc5dRgPPjk
udXuBVDWCEEDPnqFWcV9+Gw25lCQE2bE2/UdYFQ07B12os/7Eama77bCwbP1QUqC
cQReE6qhzEOcUD0kIuHEhKlduoqJ1MYvPRTR9sdLYukx2TEr7YCh3ZEVLyd7HaAP
uQ32XN1xaqgU8I8ZESqpW57Jr+UxwpxI6SvU0GqwHVeRO6y2WTaRMuP97iy8e88O
XoXNk8czrqh2KYFZv6sBz/UfjLXEh17ejTRGx5FYlzhT0DYNAw21aXZNe2txjD3C
C1r6YOvfse3JM3a42fBNmM2UBDI3zjk3Um4bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpMivofnq9uunBZafUgDtY3OgWZQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BNaXZvZm5xOXV1bkJaYWZV
Z0R0WTNPZ1daUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAwwDQYJKoZIhvcNAQELBQADggEBACFb6cWqGSYQ5Fv19A6FlSapHU3YHN/md/h5
/U2kB7RIVzM83h7GUbH2sUqncmksHcmPVbhwdB6j+IrLExruypz3sbKDzfTP6e/G
rgLQdVfng1oqy1ixvTy2/gKcMCg8G1BY9gWt1TeobW/JdBD67+wFbcq62i047oUI
hwn1sjZWy4VGXnR6gZsaFb0DKO5fAoF7X2qcwKaUSmU9wcSHOq7xwZK1CURh30wp
YrNARzMDiNo9iWLL7JtCxu9GrlEH5bAveM+7dXJ7doTfOqL0o+TlGpUtMAm+ALmM
9PKGIS6of2bVdQs5t2MYuatP5NSPKhuQwvmt/kFJdq8XC9TqK6o=
-----END CERTIFICATE-----