Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xFiuS6DIiMLpMKbZK20EK8a-QMc.roa
File:                     xFiuS6DIiMLpMKbZK20EK8a-QMc.roa (raw, json)
Hash identifier:          ommitLgkbBEU4tlDbh7YN3AHD0+zwHKjj9ha6LiCczc=
Subject key identifier:   C4:58:AE:4B:A0:C8:88:C2:E9:30:A6:D9:2B:6D:04:2B:C6:BE:40:C7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D2B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xFiuS6DIiMLpMKbZK20EK8a-QMc.roa
Signing time:             Thu 14 Jan 2021 07:17:52 +0000
ROA not before:           Thu 14 Jan 2021 07:17:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        119.77.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:17:52 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C458AE4BA0C888C2E930A6D92B6D042BC6BE40C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:bd:e4:7a:ad:74:5b:8d:75:18:31:df:47:
                    54:58:2b:4d:d2:7f:84:c0:17:68:d6:c1:ed:45:0f:
                    55:ba:ae:03:16:ec:3d:bb:f6:72:b2:00:31:ce:e4:
                    15:ea:cf:bf:f5:1c:ae:2b:b9:74:1b:d7:c0:24:2d:
                    9e:34:22:24:39:36:d1:86:4c:c6:31:8c:89:51:4e:
                    96:f8:c1:fe:17:94:c3:b4:de:ea:d7:f7:c9:ab:2f:
                    0e:c2:2f:5a:6e:75:b6:7c:1c:13:2c:b2:ad:e5:d4:
                    29:d1:1b:b3:ed:7c:32:ee:c0:28:4e:20:75:b0:e8:
                    5e:5d:31:37:d8:74:4d:95:71:f5:5d:c9:7a:1c:89:
                    d0:9c:db:4a:44:61:cc:fa:d2:1a:7f:21:7a:19:8a:
                    f0:9d:97:3e:82:b8:2a:d8:d4:07:5a:09:8c:ab:49:
                    e3:5f:6b:98:eb:5e:e4:64:b6:55:d3:ef:2e:33:41:
                    e3:ba:1d:b8:05:b5:9c:80:c7:2c:68:56:58:36:d8:
                    13:c7:ec:79:22:be:df:ab:67:32:4d:ef:99:12:fb:
                    2a:a7:c3:90:a0:3e:eb:f1:5a:c0:67:d7:5c:54:10:
                    cd:ba:bb:69:52:76:2a:86:21:39:ab:61:ef:bb:99:
                    56:2e:6a:dd:53:21:64:82:2b:42:4b:49:e4:97:09:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:AE:4B:A0:C8:88:C2:E9:30:A6:D9:2B:6D:04:2B:C6:BE:40:C7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xFiuS6DIiMLpMKbZK20EK8a-QMc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:33:7e:12:2b:6d:71:4b:3a:e3:1e:dd:46:52:b5:51:0e:
         73:fe:14:64:04:c4:8c:4b:16:c2:58:a6:42:a5:a8:10:87:04:
         77:57:f3:3a:2c:5d:2a:bc:0e:3b:fc:fd:e7:16:a4:db:4f:64:
         ed:7d:d2:fd:68:79:4b:d8:9f:0d:3f:fa:46:20:d4:2f:f6:67:
         79:f7:48:c0:dc:91:fd:f6:0c:4a:7f:ff:8e:f8:91:e9:47:2d:
         6c:ab:4b:09:69:be:54:b5:63:a3:75:6e:5d:89:e8:d9:1a:c0:
         5d:13:71:57:02:ba:19:c4:0d:2d:9e:b2:57:e0:9f:a4:0d:a1:
         0c:7e:9a:70:45:d8:91:0a:2f:6a:ef:56:8b:3f:02:91:8f:ec:
         fe:6b:91:c0:8f:bf:b9:f9:ec:3b:36:de:89:51:9b:0c:c0:0f:
         60:af:2b:07:8f:72:d5:c7:f2:5e:d3:be:e7:c9:60:c1:65:96:
         30:4e:d5:1d:2a:ae:0a:22:0c:e2:cd:4c:06:bb:cc:e7:f0:cf:
         29:01:e1:99:bb:52:0b:eb:4d:e2:72:d0:59:8f:59:5f:11:ec:
         6e:59:4c:fe:d8:82:5f:c8:4c:cc:1e:ec:cb:e7:3b:e7:a1:2f:
         b9:85:ef:dc:62:c4:31:af:20:38:65:18:df:ae:a6:87:22:c0:
         2b:9a:3e:61
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAxMTQw
NzE3NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM0NThBRTRCQTBDODg4
QzJFOTMwQTZEOTJCNkQwNDJCQzZCRTQwQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/U73keq10W411GDHfR1RYK03Sf4TAF2jWwe1FD1W6rgMW7D27
9nKyADHO5BXqz7/1HK4ruXQb18AkLZ40IiQ5NtGGTMYxjIlRTpb4wf4XlMO03urX
98mrLw7CL1pudbZ8HBMssq3l1CnRG7PtfDLuwChOIHWw6F5dMTfYdE2VcfVdyXoc
idCc20pEYcz60hp/IXoZivCdlz6CuCrY1AdaCYyrSeNfa5jrXuRktlXT7y4zQeO6
HbgFtZyAxyxoVlg22BPH7Hkivt+rZzJN75kS+yqnw5CgPuvxWsBn11xUEM26u2lS
diqGITmrYe+7mVYuat1TIWSCK0JLSeSXCW9/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxFiuS6DIiMLpMKbZK20EK8a+QMcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hGaXVTNkRJaU1McE1LYlpL
MjBFSzhhLVFNYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TYwwDQYJKoZIhvcNAQELBQADggEBACvbM34SK21xSzrjHt1GUrVRDnP+FGQExIxL
FsJYpkKlqBCHBHdX8zosXSq8Djv8/ecWpNtPZO190v1oeUvYnw0/+kYg1C/2Z3n3
SMDckf32DEp//474kelHLWyrSwlpvlS1Y6N1bl2J6NkawF0TcVcCuhnEDS2eslfg
n6QNoQx+mnBF2JEKL2rvVos/ApGP7P5rkcCPv7n57Ds23olRmwzAD2CvKwePctXH
8l7TvufJYMFlljBO1R0qrgoiDOLNTAa7zOfwzykB4Zm7UgvrTeJy0FmPWV8R7G5Z
TP7Ygl/ITMwe7MvnO+ehL7mF79xixDGvIDhlGN+upociwCuaPmE=
-----END CERTIFICATE-----