Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/a3NEMSU0xPxPfG6icynF9Yc-Ba4.roa
File:                     a3NEMSU0xPxPfG6icynF9Yc-Ba4.roa (raw, json)
Hash identifier:          +uuRl9Zq0jGYTNr9DgnTDCTuvaTMr5E9DpaIqoAwRN8=
Subject key identifier:   6B:73:44:31:25:34:C4:FC:4F:7C:6E:A2:73:29:C5:F5:87:3E:05:AE
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0961
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/a3NEMSU0xPxPfG6icynF9Yc-Ba4.roa
Signing time:             Wed 29 Sep 2021 02:37:01 +0000
ROA not before:           Wed 29 Sep 2021 02:37:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131600
IP address blocks:        2403:a3c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Sep 29 02:37:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6B7344312534C4FC4F7C6EA27329C5F5873E05AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:2a:a3:63:35:9f:33:13:20:24:e2:c2:52:
                    73:9c:4d:d0:55:88:8f:bf:a2:32:14:d8:6e:20:21:
                    9e:51:36:2b:b5:60:43:f7:53:de:cd:58:99:d7:2c:
                    40:14:e3:05:5f:fd:05:e0:8c:22:00:ac:74:22:ad:
                    0c:0c:91:1e:e0:a6:3b:b9:33:55:c8:a2:41:29:41:
                    03:d1:26:74:c1:97:31:4c:fc:ea:e4:8e:76:78:4c:
                    b4:94:06:f5:a1:cb:54:7d:c9:b3:6c:21:3d:03:60:
                    be:1e:ad:97:2b:52:82:a8:4d:bd:a6:3c:8e:f9:32:
                    cd:8e:e4:92:8b:76:44:6d:04:2d:47:1a:90:4d:0f:
                    00:d7:56:24:50:0e:c1:e4:5b:25:e9:48:e6:e0:9e:
                    44:a2:69:06:f8:d0:6a:ab:55:f4:55:6c:c6:0f:83:
                    6a:1e:03:49:b2:57:24:a0:8f:b6:27:54:29:5e:7e:
                    de:e4:28:26:71:37:ff:c0:6b:d4:42:85:09:a8:4d:
                    b2:69:92:87:01:46:e1:f6:b0:53:4b:37:a3:c2:ce:
                    92:ac:89:93:d7:4a:c0:6e:59:55:95:a0:c3:38:bc:
                    7e:83:f0:a2:12:fe:d1:71:1d:dd:4a:73:05:49:97:
                    49:b7:58:8c:b4:96:40:8a:52:82:6a:75:bc:c0:d1:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:73:44:31:25:34:C4:FC:4F:7C:6E:A2:73:29:C5:F5:87:3E:05:AE
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/a3NEMSU0xPxPfG6icynF9Yc-Ba4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:05:6b:e2:ee:be:d3:9b:54:6c:ae:f3:8c:de:0f:42:66:
         f1:dd:a7:8c:95:a7:73:7a:63:a2:bf:b5:1c:c3:8f:0b:be:7c:
         c2:43:b3:70:a7:6d:3d:ad:ee:01:43:1a:1d:f9:6a:84:27:3b:
         a5:df:53:e8:28:7c:2d:61:7c:af:41:e6:0d:ba:18:96:9f:11:
         56:0c:fa:2e:68:40:50:ef:c6:e4:eb:04:c5:1b:d7:3c:0f:b9:
         70:0a:5f:91:70:bb:a0:8f:5c:6f:a1:47:d8:73:11:8c:43:13:
         a4:f4:f2:38:d2:a6:8f:bd:21:64:23:bb:e8:af:97:2f:f3:4b:
         3e:7a:25:fb:f2:3c:f2:52:54:ee:a8:f1:cf:60:71:b5:f7:87:
         6b:cf:70:87:8f:46:a9:c4:4e:0f:6d:a8:5e:92:8a:78:45:4e:
         19:4b:77:a2:a5:f9:fa:e4:dd:88:e0:8a:ab:d6:e5:3d:ab:3f:
         7e:7b:f7:3d:ac:03:7c:eb:97:7b:66:85:4b:ee:88:70:08:82:
         97:26:44:5e:cb:06:26:30:26:6b:ce:ee:dd:1f:45:23:00:48:
         c4:2d:d4:08:fd:ce:a0:f3:85:9b:20:5c:7f:fe:ac:eb:9a:c6:
         4b:eb:41:6a:84:dd:83:11:00:dd:c5:b6:e1:9d:67:09:1e:4c:
         b3:45:84:77
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw
QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yMTA5Mjkw
MjM3MDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZCNzM0NDMxMjUzNEM0
RkM0RjdDNkVBMjczMjlDNUY1ODczRTA1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtcCqjYzWfMxMgJOLCUnOcTdBViI+/ojIU2G4gIZ5RNiu1YEP3
U97NWJnXLEAU4wVf/QXgjCIArHQirQwMkR7gpju5M1XIokEpQQPRJnTBlzFM/Ork
jnZ4TLSUBvWhy1R9ybNsIT0DYL4erZcrUoKoTb2mPI75Ms2O5JKLdkRtBC1HGpBN
DwDXViRQDsHkWyXpSObgnkSiaQb40GqrVfRVbMYPg2oeA0myVySgj7YnVCleft7k
KCZxN//Aa9RChQmoTbJpkocBRuH2sFNLN6PCzpKsiZPXSsBuWVWVoMM4vH6D8KIS
/tFxHd1KcwVJl0m3WIy0lkCKUoJqdbzA0W7tAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUa3NEMSU0xPxPfG6icynF9Yc+Ba4wHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz
phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU
RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvYTNORU1TVTB4UHhQZkc2
aWN5bkY5WWMtQmE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQDo8AwDQYJKoZIhvcNAQELBQADggEBAEn0BWvi7r7Tm1RsrvOM3g9CZvHdp4yV
p3N6Y6K/tRzDjwu+fMJDs3CnbT2t7gFDGh35aoQnO6XfU+gofC1hfK9B5g26GJaf
EVYM+i5oQFDvxuTrBMUb1zwPuXAKX5Fwu6CPXG+hR9hzEYxDE6T08jjSpo+9IWQj
u+ivly/zSz56JfvyPPJSVO6o8c9gcbX3h2vPcIePRqnETg9tqF6SinhFThlLd6Kl
+frk3YjgiqvW5T2rP3579z2sA3zrl3tmhUvuiHAIgpcmRF7LBiYwJmvO7t0fRSMA
SMQt1Aj9zqDzhZsgXH/+rOuaxkvrQWqE3YMRAN3FtuGdZwkeTLNFhHc=
-----END CERTIFICATE-----