Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VIJ3nhOMCLcfZSLz5Tk8lcg4EwM.roa
File:                     VIJ3nhOMCLcfZSLz5Tk8lcg4EwM.roa (raw, json)
Hash identifier:          OjiylbPRgrBkkeWqg3sKye7aXHZvKMR/GBRLTBkjHIU=
Subject key identifier:   54:82:77:9E:13:8C:08:B7:1F:65:22:F3:E5:39:3C:95:C8:38:13:03
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0795
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VIJ3nhOMCLcfZSLz5Tk8lcg4EwM.roa
Signing time:             Tue 29 Sep 2020 10:00:35 +0000
ROA not before:           Tue 29 Sep 2020 10:00:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5482779E138C08B71F6522F3E5393C95C8381303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:8b:0b:03:84:b2:8c:86:31:b1:fe:5f:23:
                    f4:d3:9e:29:42:d0:c2:87:0a:82:0d:3b:96:02:9b:
                    3f:ae:7a:51:5e:67:61:4f:69:3b:69:6d:fd:8a:d3:
                    b5:89:04:62:f5:9c:bd:56:65:c9:a0:3f:46:44:17:
                    8c:a4:71:67:93:bf:1d:33:f5:39:16:75:f4:e6:90:
                    b4:a3:4e:ac:08:f0:58:cb:d2:bd:ff:52:dc:25:b7:
                    5d:40:de:e8:c5:e5:92:28:84:9b:0d:47:d1:1f:d7:
                    d2:a9:22:d5:af:b1:31:a6:b2:0d:2e:2d:d0:63:79:
                    d0:89:62:71:35:91:87:d2:7a:53:f3:39:1d:10:b6:
                    84:50:b4:a3:5c:82:f9:44:c3:47:e9:7f:ad:8f:68:
                    ab:10:89:3a:1f:11:db:68:fe:08:33:2e:a1:45:9a:
                    cc:e5:3d:61:aa:e3:16:25:d0:aa:75:50:c3:06:fa:
                    e5:a8:65:7f:16:d9:ef:ce:98:96:c7:d2:0d:9b:e3:
                    35:58:22:2f:24:a9:92:a2:9c:c9:4b:bc:c9:82:17:
                    19:f6:8f:55:26:dc:e1:b6:d7:7c:5d:a3:78:29:0d:
                    ee:86:6f:91:9a:88:f5:8f:63:02:a4:3b:2b:56:b2:
                    fe:bf:29:22:aa:49:7d:86:9a:48:90:a5:87:23:3e:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:77:9E:13:8C:08:B7:1F:65:22:F3:E5:39:3C:95:C8:38:13:03
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VIJ3nhOMCLcfZSLz5Tk8lcg4EwM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:76:87:bf:1b:fd:0e:2d:ea:27:52:6f:a2:d2:5c:c6:22:a2:
         cb:f5:f6:c8:9d:66:8d:19:dc:54:1b:fb:1a:bc:e6:a0:c0:d2:
         11:72:ba:02:dd:80:72:ec:07:4d:67:19:1f:79:9b:a6:ea:64:
         7b:d9:c3:ea:1d:b0:0a:b8:58:b2:26:d9:45:4c:eb:d6:2f:1f:
         1e:7e:89:52:34:2d:28:15:c0:66:7c:27:83:06:d0:43:41:3d:
         29:64:f3:e4:a6:e9:b7:80:bd:1c:f3:ab:1f:bc:44:b1:bc:2b:
         6a:fb:b9:f9:1b:62:48:e2:fc:9d:31:da:c2:5a:35:02:64:79:
         46:3b:db:01:10:2f:42:ff:07:a8:60:06:30:71:29:d2:8c:e3:
         bf:2b:db:cb:af:ba:5a:4e:6a:c4:c8:c0:ee:7e:92:e3:84:d6:
         8d:9f:f4:9e:48:96:a4:59:27:e4:8c:6e:06:ca:5f:21:a8:25:
         95:7d:90:af:dd:49:f8:85:14:45:c1:b9:50:8b:0d:10:b9:5f:
         4b:88:4b:2c:d4:f4:af:16:93:60:68:12:d9:be:c4:ec:0a:f5:
         7f:12:0d:dc:5a:90:0f:aa:62:0e:fc:2b:1c:75:12:07:18:7a:
         de:4a:e2:6d:65:26:7b:17:89:4c:b4:ac:6e:ca:07:64:b5:ba:
         f9:37:2a:23
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDA5Mjkx
MDAwMzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU0ODI3NzlFMTM4QzA4
QjcxRjY1MjJGM0U1MzkzQzk1QzgzODEzMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFzosLA4SyjIYxsf5fI/TTnilC0MKHCoINO5YCmz+uelFeZ2FP
aTtpbf2K07WJBGL1nL1WZcmgP0ZEF4ykcWeTvx0z9TkWdfTmkLSjTqwI8FjL0r3/
Utwlt11A3ujF5ZIohJsNR9Ef19KpItWvsTGmsg0uLdBjedCJYnE1kYfSelPzOR0Q
toRQtKNcgvlEw0fpf62PaKsQiTofEdto/ggzLqFFmszlPWGq4xYl0Kp1UMMG+uWo
ZX8W2e/OmJbH0g2b4zVYIi8kqZKinMlLvMmCFxn2j1Um3OG213xdo3gpDe6Gb5Ga
iPWPYwKkOytWsv6/KSKqSX2GmkiQpYcjPpfrAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUVIJ3nhOMCLcfZSLz5Tk8lcg4EwMwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1ZJSjNuaE9NQ0xj
ZlpTTHo1VGs4bGNnNEV3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpIwDQYJKoZIhvcNAQELBQADggEBAHV2h78b/Q4t6idSb6LSXMYiosv1
9sidZo0Z3FQb+xq85qDA0hFyugLdgHLsB01nGR95m6bqZHvZw+odsAq4WLIm2UVM
69YvHx5+iVI0LSgVwGZ8J4MG0ENBPSlk8+Sm6beAvRzzqx+8RLG8K2r7ufkbYkji
/J0x2sJaNQJkeUY72wEQL0L/B6hgBjBxKdKM478r28uvulpOasTIwO5+kuOE1o2f
9J5IlqRZJ+SMbgbKXyGoJZV9kK/dSfiFFEXBuVCLDRC5X0uISyzU9K8Wk2BoEtm+
xOwK9X8SDdxakA+qYg78Kxx1EgcYet5K4m1lJnsXiUy0rG7KB2S1uvk3KiM=
-----END CERTIFICATE-----