Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vWzJ4E25z2-h65YUkVk18NlVBb4.roa
File:                     vWzJ4E25z2-h65YUkVk18NlVBb4.roa (raw, json)
Hash identifier:          wgqkuxRDWoJaAZl7gJCyaFazLGWyjIJm0yC4lnaLUp4=
Subject key identifier:   BD:6C:C9:E0:4D:B9:CF:6F:A1:EB:96:14:91:59:35:F0:D9:55:05:BE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1101
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vWzJ4E25z2-h65YUkVk18NlVBb4.roa
Signing time:             Sun 07 Feb 2021 12:59:04 +0000
ROA not before:           Sun 07 Feb 2021 12:59:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4353 (0x1101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:59:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BD6CC9E04DB9CF6FA1EB9614915935F0D95505BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:8b:94:b0:b0:0a:e5:2d:e3:7f:f3:4c:0b:
                    5d:25:76:a6:24:bb:99:09:b3:2e:6b:b5:07:6e:d0:
                    e4:91:14:c0:b8:6f:dc:f6:1f:dd:29:fa:7a:f2:0f:
                    16:16:2c:70:11:83:42:b0:9c:85:92:f7:67:59:18:
                    68:65:8c:d6:be:ba:e0:6e:15:78:c4:a1:d6:c5:4b:
                    76:d9:ad:ee:91:52:83:e9:8d:f8:9c:f2:23:b6:db:
                    ea:65:26:3a:b2:de:bc:70:6c:c7:b6:13:ce:ee:32:
                    e0:0d:a7:48:de:b3:fe:77:ce:35:29:c0:8f:ef:3d:
                    b7:7a:0e:a9:d2:ca:6a:f8:3b:98:e4:e5:77:ca:9f:
                    50:3d:4c:9d:51:3b:f1:e3:ad:2b:70:07:8f:5e:5b:
                    5f:af:c4:4b:c5:16:6f:9a:eb:ad:1e:23:c7:e8:8e:
                    2d:e6:e6:3f:fa:2c:6f:be:a0:b6:3a:b9:3c:ea:35:
                    56:4b:6e:73:31:61:4f:56:5b:7c:5d:28:c9:45:ef:
                    6a:31:97:12:5b:43:93:09:3e:a7:12:23:d8:f1:3f:
                    12:24:72:69:2b:ae:c3:49:cc:96:e2:f7:e3:f1:e3:
                    ad:a9:8e:11:04:fb:3a:97:6f:68:38:d1:86:9d:ce:
                    dc:1f:03:61:73:cf:97:14:e3:1f:cb:f9:9e:29:b1:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6C:C9:E0:4D:B9:CF:6F:A1:EB:96:14:91:59:35:F0:D9:55:05:BE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vWzJ4E25z2-h65YUkVk18NlVBb4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:8d:b9:ed:96:f4:92:2d:04:cb:b2:10:74:9c:73:cb:7e:
         5c:6d:cd:94:6b:74:d5:88:b7:1c:5f:3d:2e:d1:05:36:81:33:
         f0:d1:ad:b4:b0:66:05:09:3c:c7:02:d8:d3:d2:ce:41:04:1c:
         3b:4e:c3:74:83:ab:55:6b:9e:39:6d:e9:58:84:a2:ac:cc:83:
         37:2a:3b:fa:e2:03:d0:3c:cb:d6:6c:92:20:a1:83:44:b9:01:
         ff:66:85:9a:1a:38:a0:8e:53:24:49:f3:ae:0e:74:32:7b:b6:
         a0:b2:ea:7a:4b:ad:e1:e4:cb:e8:fb:58:f8:67:33:49:d8:47:
         09:05:52:fe:8a:35:45:24:66:8f:bb:ba:b4:89:72:5c:f5:a3:
         6a:47:bc:85:44:f7:6e:0c:80:1a:8d:ad:f0:66:67:13:21:c1:
         45:13:97:7a:77:7c:44:f9:2c:a8:65:05:76:26:3a:6e:47:61:
         9a:d9:a9:a6:4a:30:74:1c:67:a0:46:57:89:07:ac:e8:70:53:
         2c:99:f6:d0:45:f6:36:fa:85:99:fb:2f:52:ab:81:dd:19:06:
         9e:81:c5:a5:5d:f7:92:ea:4a:7a:67:6f:c8:25:54:92:13:96:
         be:73:41:79:54:09:42:4b:04:fb:94:99:03:ed:b3:23:1d:4f:
         50:7f:f7:bf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjU5MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJENkNDOUUwNERCOUNG
NkZBMUVCOTYxNDkxNTkzNUYwRDk1NTA1QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4bouUsLAK5S3jf/NMC10ldqYku5kJsy5rtQdu0OSRFMC4b9z2
H90p+nryDxYWLHARg0KwnIWS92dZGGhljNa+uuBuFXjEodbFS3bZre6RUoPpjfic
8iO22+plJjqy3rxwbMe2E87uMuANp0jes/53zjUpwI/vPbd6DqnSymr4O5jk5XfK
n1A9TJ1RO/HjrStwB49eW1+vxEvFFm+a660eI8foji3m5j/6LG++oLY6uTzqNVZL
bnMxYU9WW3xdKMlF72oxlxJbQ5MJPqcSI9jxPxIkcmkrrsNJzJbi9+Px462pjhEE
+zqXb2g40YadztwfA2Fzz5cU4x/L+Z4psSIpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvWzJ4E25z2+h65YUkVk18NlVBb4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZXeko0RTI1ejItaDY1WVVr
VmsxOE5sVkJiNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nkwwDQYJKoZIhvcNAQELBQADggEBAHj3jbntlvSSLQTLshB0nHPLflxtzZRrdNWI
txxfPS7RBTaBM/DRrbSwZgUJPMcC2NPSzkEEHDtOw3SDq1Vrnjlt6ViEoqzMgzcq
O/riA9A8y9ZskiChg0S5Af9mhZoaOKCOUyRJ864OdDJ7tqCy6npLreHky+j7WPhn
M0nYRwkFUv6KNUUkZo+7urSJclz1o2pHvIVE924MgBqNrfBmZxMhwUUTl3p3fET5
LKhlBXYmOm5HYZrZqaZKMHQcZ6BGV4kHrOhwUyyZ9tBF9jb6hZn7L1Krgd0ZBp6B
xaVd95LqSnpnb8glVJITlr5zQXlUCUJLBPuUmQPtsyMdT1B/978=
-----END CERTIFICATE-----