Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zAM0oj2bKJ857zfARace1Xyj4Cs.roa
File:                     zAM0oj2bKJ857zfARace1Xyj4Cs.roa (raw, json)
Hash identifier:          a499misit2mB5uiheMAN43mlTe/o6xNlT1hJC12wqE0=
Subject key identifier:   CC:03:34:A2:3D:9B:28:9F:39:EF:37:C0:45:A7:1E:D5:7C:A3:E0:2B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B35
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zAM0oj2bKJ857zfARace1Xyj4Cs.roa
Signing time:             Tue 29 Sep 2020 10:08:08 +0000
ROA not before:           Tue 29 Sep 2020 10:08:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        115.165.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2869 (0xb35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CC0334A23D9B289F39EF37C045A71ED57CA3E02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:2c:76:41:c0:42:f2:3e:d8:16:97:3e:d6:
                    72:69:bd:e8:74:68:97:6f:49:5b:0c:40:fd:42:72:
                    08:66:3b:9b:76:aa:e8:a1:6e:10:9d:8d:25:67:50:
                    c4:50:a5:cf:ec:91:c1:48:34:a2:fd:69:22:28:e4:
                    a6:10:02:b4:88:55:10:9e:e6:0a:63:77:99:ef:4f:
                    81:ca:6a:44:4e:75:9e:9c:11:ed:e6:4f:44:26:b9:
                    94:10:aa:fc:39:92:06:74:68:06:04:d1:aa:92:b0:
                    6d:71:8b:4e:54:dc:75:57:82:f2:c4:04:ed:8b:47:
                    f0:31:13:55:70:0e:67:94:9a:74:c5:2c:fc:dc:94:
                    d5:0b:d4:80:f9:20:3d:91:15:17:04:c4:40:67:1d:
                    54:fa:2a:bd:f1:e0:85:e1:69:e8:1c:fe:ee:ea:90:
                    2c:e6:f1:20:d7:f5:39:32:9f:b0:b7:de:e2:11:78:
                    44:d0:e0:76:a2:8c:13:2e:91:08:f7:6f:15:60:71:
                    ca:da:81:44:ec:8e:cd:60:d2:51:e3:31:23:45:bf:
                    ff:9a:06:bb:0d:79:cf:0b:00:d5:48:f9:4e:c5:a0:
                    0e:c7:cc:c2:5a:f3:6e:3e:98:1d:5a:0e:bf:03:22:
                    d5:c4:d4:30:ce:43:e9:45:ce:8f:b7:63:8d:72:3f:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:34:A2:3D:9B:28:9F:39:EF:37:C0:45:A7:1E:D5:7C:A3:E0:2B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zAM0oj2bKJ857zfARace1Xyj4Cs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:98:e5:74:d7:e0:1f:aa:1c:34:6a:a9:94:48:ea:0b:d6:
         82:ce:e5:62:2a:b0:0f:5d:53:6f:72:45:5c:e7:1f:09:44:cf:
         85:61:05:90:f2:fe:25:87:68:76:91:ad:3e:d5:18:e2:d9:2a:
         bd:85:37:2b:38:58:46:6b:bb:b0:b0:34:60:c0:2e:72:fd:98:
         72:4c:18:10:6a:e1:7c:01:c5:f1:1a:0b:21:79:d6:53:d9:ca:
         b8:59:2c:12:8c:5d:cb:1f:49:86:ac:61:e4:b2:4e:72:ed:7b:
         75:4f:e8:ac:94:be:e6:bf:94:35:12:6e:d8:2f:3e:dc:f4:e3:
         03:06:c3:03:8a:23:2f:65:81:2b:a7:c6:14:3a:bc:7e:e3:91:
         b7:b6:ad:4b:58:76:2a:47:15:b4:14:b3:a2:f2:38:9d:30:56:
         10:9e:b4:88:75:d5:c1:17:c9:dc:c9:cd:1c:d6:97:90:a4:35:
         77:71:8d:6a:d2:be:46:f6:c1:9f:6d:d5:fe:0e:be:bc:4d:de:
         c5:eb:07:2a:a4:fc:20:02:71:fa:bd:f9:b1:30:9f:db:22:a4:
         7f:ef:68:f2:13:d8:2d:7b:c8:ec:1a:e4:d2:e1:31:9d:72:ca:
         92:2a:10:75:5e:c6:de:d6:de:60:0e:d6:cb:81:75:59:f6:4a:
         86:56:c6:2e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENDMDMzNEEyM0Q5QjI4
OUYzOUVGMzdDMDQ1QTcxRUQ1N0NBM0UwMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPKCx2QcBC8j7YFpc+1nJpveh0aJdvSVsMQP1CcghmO5t2quih
bhCdjSVnUMRQpc/skcFINKL9aSIo5KYQArSIVRCe5gpjd5nvT4HKakROdZ6cEe3m
T0QmuZQQqvw5kgZ0aAYE0aqSsG1xi05U3HVXgvLEBO2LR/AxE1VwDmeUmnTFLPzc
lNUL1ID5ID2RFRcExEBnHVT6Kr3x4IXhaegc/u7qkCzm8SDX9Tkyn7C33uIReETQ
4HaijBMukQj3bxVgccragUTsjs1g0lHjMSNFv/+aBrsNec8LANVI+U7FoA7HzMJa
824+mB1aDr8DItXE1DDOQ+lFzo+3Y41yPzrpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzAM0oj2bKJ857zfARace1Xyj4CswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3pBTTBvajJiS0o4NTd6ZkFS
YWNlMVh5ajRDcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJz
pcAwDQYJKoZIhvcNAQELBQADggEBAIHPmOV01+Afqhw0aqmUSOoL1oLO5WIqsA9d
U29yRVznHwlEz4VhBZDy/iWHaHaRrT7VGOLZKr2FNys4WEZru7CwNGDALnL9mHJM
GBBq4XwBxfEaCyF51lPZyrhZLBKMXcsfSYasYeSyTnLte3VP6KyUvua/lDUSbtgv
Ptz04wMGwwOKIy9lgSunxhQ6vH7jkbe2rUtYdipHFbQUs6LyOJ0wVhCetIh11cEX
ydzJzRzWl5CkNXdxjWrSvkb2wZ9t1f4OvrxN3sXrByqk/CACcfq9+bEwn9sipH/v
aPIT2C17yOwa5NLhMZ1yypIqEHVext7W3mAO1suBdVn2SoZWxi4=
-----END CERTIFICATE-----