Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/akjRVuptXfUkqeuqAbgRjIAVoks.roa
File:                     akjRVuptXfUkqeuqAbgRjIAVoks.roa (raw, json)
Hash identifier:          VRGLSd8H5+U4eXHxqqwBS1e7/cNT9O7n07Q97Yky2kE=
Subject key identifier:   6A:48:D1:56:EA:6D:5D:F5:24:A9:EB:AA:01:B8:11:8C:80:15:A2:4B
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A46
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/akjRVuptXfUkqeuqAbgRjIAVoks.roa
Signing time:             Wed 29 Sep 2021 02:52:51 +0000
ROA not before:           Wed 29 Sep 2021 02:52:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        103.30.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6A48D156EA6D5DF524A9EBAA01B8118C8015A24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2e:e7:a2:85:dd:d9:66:a4:cc:cb:1d:46:5f:
                    dc:89:0b:dd:d5:9b:87:53:38:93:d3:22:73:74:87:
                    4d:46:37:c1:22:df:aa:c1:c3:1a:e4:68:5c:14:8e:
                    70:f6:08:53:63:19:e4:6e:24:3b:dd:e6:05:9a:fc:
                    07:34:5d:a8:aa:d5:ad:1e:48:31:ba:a9:18:45:d7:
                    ba:56:0b:a7:88:8b:9e:65:2d:ae:9c:25:14:24:ed:
                    f2:46:cd:5c:c4:90:ad:31:69:fa:ef:f2:dc:58:ab:
                    fc:98:28:d3:16:f1:c4:8b:74:96:c0:ef:1c:8f:ca:
                    71:17:48:bb:d6:6c:85:a7:ff:9a:be:f9:d3:25:58:
                    b2:38:fc:1a:17:34:89:d4:19:81:0a:f0:40:54:6f:
                    c4:78:23:90:a6:ff:21:43:bb:45:6c:96:11:b5:17:
                    6e:68:a4:65:c4:5e:2b:73:42:dc:6c:51:49:9e:a0:
                    06:b7:e2:70:fe:ed:73:c6:a7:b1:9d:68:c8:2c:36:
                    97:97:5b:5d:d8:54:b3:40:72:36:04:b5:0d:87:bf:
                    19:b4:75:bf:9f:66:1c:1d:9e:8a:2b:50:0e:c9:e9:
                    50:fe:69:8f:ae:f7:a6:01:5c:c5:85:43:37:dc:87:
                    3b:57:83:ba:2d:16:dc:3e:df:0e:a4:fb:97:4b:83:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:48:D1:56:EA:6D:5D:F5:24:A9:EB:AA:01:B8:11:8C:80:15:A2:4B
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/akjRVuptXfUkqeuqAbgRjIAVoks.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d7:89:4d:77:18:d8:d9:9b:67:92:cd:a4:38:95:22:c5:36:
         04:11:59:b3:6b:f0:20:ce:db:d7:01:0b:dd:de:44:89:ba:56:
         01:9a:ac:78:0b:bd:06:f9:02:cc:a0:f7:c1:a0:e7:37:58:ec:
         65:bb:b1:58:47:ba:22:08:7d:68:3d:47:79:69:da:ef:db:a1:
         17:38:22:ae:a8:f2:f0:79:dd:45:03:65:ae:ae:ee:8e:40:7a:
         ad:86:30:d9:09:21:1e:d3:15:df:10:49:d3:8f:28:e1:ef:e0:
         2c:85:c2:b4:19:de:44:2f:08:6c:fe:51:18:4e:ab:01:49:dd:
         21:26:fe:1a:c8:3e:b5:11:27:fb:d0:48:ec:31:80:d5:d8:e4:
         07:8c:83:97:dc:e6:f8:88:a4:14:60:72:8b:56:c0:29:ef:11:
         e9:f1:87:a2:14:38:5a:e5:04:2e:06:90:28:89:c1:4b:1a:cc:
         7f:ed:4a:8a:b3:90:97:f9:24:4a:ec:37:ef:24:b5:cd:97:37:
         4d:bb:17:4e:1a:36:52:33:70:cd:c1:d1:f8:c1:bd:a7:95:03:
         7f:31:01:28:97:18:21:48:68:4d:4e:90:50:40:5e:d9:f0:d3:
         b6:1e:bd:cd:43:1d:06:e6:fa:6e:b7:20:04:c9:5f:f1:45:61:
         23:79:5a:93
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMTA5Mjkw
MjUyNTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZBNDhEMTU2RUE2RDVE
RjUyNEE5RUJBQTAxQjgxMThDODAxNUEyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzLueihd3ZZqTMyx1GX9yJC93Vm4dTOJPTInN0h01GN8Ei36rB
wxrkaFwUjnD2CFNjGeRuJDvd5gWa/Ac0Xaiq1a0eSDG6qRhF17pWC6eIi55lLa6c
JRQk7fJGzVzEkK0xafrv8txYq/yYKNMW8cSLdJbA7xyPynEXSLvWbIWn/5q++dMl
WLI4/BoXNInUGYEK8EBUb8R4I5Cm/yFDu0VslhG1F25opGXEXitzQtxsUUmeoAa3
4nD+7XPGp7GdaMgsNpeXW13YVLNAcjYEtQ2Hvxm0db+fZhwdnoorUA7J6VD+aY+u
96YBXMWFQzfchztXg7otFtw+3w6k+5dLgyCtAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUakjRVuptXfUkqeuqAbgRjIAVokswHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2FralJWdXB0WGZV
a3FldXFBYmdSaklBVm9rcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnHi4wDQYJKoZIhvcNAQELBQADggEBAKnXiU13GNjZm2eSzaQ4lSLFNgQR
WbNr8CDO29cBC93eRIm6VgGarHgLvQb5Asyg98Gg5zdY7GW7sVhHuiIIfWg9R3lp
2u/boRc4Iq6o8vB53UUDZa6u7o5Aeq2GMNkJIR7TFd8QSdOPKOHv4CyFwrQZ3kQv
CGz+URhOqwFJ3SEm/hrIPrURJ/vQSOwxgNXY5AeMg5fc5viIpBRgcotWwCnvEenx
h6IUOFrlBC4GkCiJwUsazH/tSoqzkJf5JErsN+8ktc2XN027F04aNlIzcM3B0fjB
vaeVA38xASiXGCFIaE1OkFBAXtnw07Yevc1DHQbm+m63IATJX/FFYSN5WpM=
-----END CERTIFICATE-----