Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/gKI9fC-RTBbuSPhS8Eg2mr70icI.roa
File:                     gKI9fC-RTBbuSPhS8Eg2mr70icI.roa (raw, json)
Hash identifier:          koIROdrKgG7vRczEDuKRxjbg71xNhK5c1MzjcdzPj/g=
Subject key identifier:   80:A2:3D:7C:2F:91:4C:16:EE:48:F8:52:F0:48:36:9A:BE:F4:89:C2
Certificate issuer:       /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial:       093F
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/gKI9fC-RTBbuSPhS8Eg2mr70icI.roa
Signing time:             Tue 29 Sep 2020 10:09:14 +0000
ROA not before:           Tue 29 Sep 2020 10:09:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17408
IP address blocks:        103.138.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
        Validity
            Not Before: Sep 29 10:09:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=80A23D7C2F914C16EE48F852F048369ABEF489C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c3:24:b1:82:91:13:9a:f3:c0:f5:c3:fc:69:
                    03:d8:fb:de:d8:12:18:4f:f4:ad:6c:d8:21:4c:d4:
                    4b:d3:4e:a7:b1:72:b0:df:b6:be:60:3c:1c:82:aa:
                    79:0d:6d:84:0b:df:ea:f8:d6:6a:c1:f3:f0:cf:fe:
                    33:e5:a3:e3:8d:66:ec:2f:b9:eb:44:0c:7a:10:f8:
                    03:21:ec:48:92:50:0f:6a:dd:db:4b:70:80:00:89:
                    44:55:08:12:7c:5b:df:79:a6:cd:92:f1:19:04:65:
                    b7:40:85:d0:ee:11:17:fa:e4:c2:ca:63:19:30:b9:
                    28:0e:be:35:68:c0:06:c7:e7:e1:4f:3d:79:ae:e2:
                    6f:a6:6e:72:c0:cc:46:26:b0:17:67:e0:2b:fd:c7:
                    e6:f6:32:91:28:81:db:1e:e9:ee:ed:70:3a:6c:c8:
                    fc:51:c3:68:38:54:2e:a8:31:82:60:7e:97:96:ae:
                    02:20:be:43:a0:0a:cc:88:f6:ff:d7:1b:6d:10:a9:
                    38:bb:62:10:9f:74:13:71:fa:96:c2:34:32:2d:15:
                    bb:c9:60:dd:bc:08:86:ab:72:7c:9c:64:a8:a6:3d:
                    96:bf:67:ca:af:d7:8a:e4:11:30:66:b1:8f:e4:81:
                    62:d1:7b:ec:95:98:7b:2f:62:4e:72:95:4b:07:3c:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A2:3D:7C:2F:91:4C:16:EE:48:F8:52:F0:48:36:9A:BE:F4:89:C2
            X509v3 Authority Key Identifier:
                keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/gKI9fC-RTBbuSPhS8Eg2mr70icI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:6b:ec:95:bc:ae:87:92:80:04:dc:64:ae:99:2e:b5:68:
         72:45:b7:88:4e:c6:90:92:ba:1c:be:1d:44:b2:7c:9b:98:fc:
         2a:b1:94:11:bf:b9:49:47:20:80:a4:59:8d:62:5f:b8:84:e2:
         fa:d1:b9:9a:a4:e5:89:31:bb:59:f2:9e:24:f0:c6:00:b8:96:
         4c:78:24:b7:d6:4d:13:21:3f:40:2c:44:f5:0b:ea:bf:bf:e9:
         7c:0b:fb:cd:72:d0:e2:0a:01:20:9e:64:ae:ca:5b:15:d6:ff:
         85:c8:31:99:f4:74:95:b7:2e:f7:b0:e1:79:a0:cb:14:72:bf:
         19:b3:a2:ab:23:26:a8:79:4a:ac:4d:91:67:73:4a:e5:42:be:
         62:9c:6b:87:e6:c9:ab:d7:5e:f4:b2:82:a8:bf:ab:b8:bf:37:
         a5:8e:31:6a:74:04:69:01:35:da:9d:36:27:79:c5:72:59:3f:
         f8:51:22:4b:66:61:3e:13:ec:a1:7f:d4:7b:15:b9:2d:d0:b1:
         7f:d1:63:ef:d0:7d:86:d5:d9:ef:30:05:7d:56:2c:88:e7:72:
         f5:a8:61:53:c6:64:02:cb:e2:7d:e9:eb:72:3a:36:85:a8:6f:
         39:c7:9d:75:b5:b0:da:f7:14:f7:ef:1a:0f:78:32:96:06:bc:
         48:2c:19:c2
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex
QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yMDA5Mjkx
MDA5MTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgwQTIzRDdDMkY5MTRD
MTZFRTQ4Rjg1MkYwNDgzNjlBQkVGNDg5QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwwySxgpETmvPA9cP8aQPY+97YEhhP9K1s2CFM1EvTTqexcrDf
tr5gPByCqnkNbYQL3+r41mrB8/DP/jPlo+ONZuwvuetEDHoQ+AMh7EiSUA9q3dtL
cIAAiURVCBJ8W995ps2S8RkEZbdAhdDuERf65MLKYxkwuSgOvjVowAbH5+FPPXmu
4m+mbnLAzEYmsBdn4Cv9x+b2MpEogdse6e7tcDpsyPxRw2g4VC6oMYJgfpeWrgIg
vkOgCsyI9v/XG20QqTi7YhCfdBNx+pbCNDItFbvJYN28CIarcnycZKimPZa/Z8qv
14rkETBmsY/kgWLRe+yVmHsvYk5ylUsHPKXrAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUgKI9fC+RTBbuSPhS8Eg2mr70icIwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc
GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB
U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS9nS0k5ZkMtUlRCYnVT
UGhTOEVnMm1yNzBpY0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ4prMA0GCSqGSIb3DQEBCwUAA4IBAQBky2vslbyuh5KABNxkrpkutWhyRbeI
TsaQkrocvh1EsnybmPwqsZQRv7lJRyCApFmNYl+4hOL60bmapOWJMbtZ8p4k8MYA
uJZMeCS31k0TIT9ALET1C+q/v+l8C/vNctDiCgEgnmSuylsV1v+FyDGZ9HSVty73
sOF5oMsUcr8Zs6KrIyaoeUqsTZFnc0rlQr5inGuH5smr1170soKov6u4vzeljjFq
dARpATXanTYnecVyWT/4USJLZmE+E+yhf9R7Fbkt0LF/0WPv0H2G1dnvMAV9ViyI
53L1qGFTxmQCy+J96etyOjaFqG85x511tbDa9xT37xoPeDKWBrxILBnC
-----END CERTIFICATE-----