Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/Q1kuKaIrqlqh5PQu_xu5JfGe7YA.roa
File:                     Q1kuKaIrqlqh5PQu_xu5JfGe7YA.roa (raw, json)
Hash identifier:          oHKkVaOIIHpdIwxKpJg6i3mWskzEliZKtjOlCmBUWNc=
Subject key identifier:   43:59:2E:29:A2:2B:AA:5A:A1:E4:F4:2E:FF:1B:B9:25:F1:9E:ED:80
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       078E
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Q1kuKaIrqlqh5PQu_xu5JfGe7YA.roa
Signing time:             Tue 29 Sep 2020 09:59:28 +0000
ROA not before:           Tue 29 Sep 2020 09:59:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18429
IP address blocks:        61.57.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 29 09:59:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=43592E29A22BAA5AA1E4F42EFF1BB925F19EED80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:61:ac:03:52:9b:37:13:ab:c0:f7:75:3f:
                    22:e2:27:09:99:32:c6:b1:60:2d:25:d0:c2:d7:b6:
                    68:eb:13:40:45:de:2e:71:49:e1:0a:ca:06:67:fa:
                    19:8e:96:d2:65:c6:27:a8:b5:f5:34:3d:76:e3:37:
                    42:01:82:15:33:2e:6a:5a:78:9b:c5:e1:55:09:74:
                    af:0f:66:fa:bb:77:08:92:47:29:84:1d:7c:89:72:
                    7a:55:4a:58:ec:77:e0:b2:c6:4d:a8:53:cd:c6:1e:
                    75:87:dc:83:58:ec:30:22:c6:12:4a:31:91:20:9e:
                    52:84:2c:53:66:2c:10:3e:66:a7:a5:c7:66:74:15:
                    a0:20:f5:0d:97:d1:f0:94:ef:e0:c9:6c:69:3e:2a:
                    be:7d:01:5c:3d:cb:78:f4:c6:a3:01:a5:96:af:93:
                    ff:6b:d6:bf:38:0d:d3:a4:5d:e9:7e:b2:7f:9b:44:
                    9d:c9:22:0d:7c:1d:b6:03:a3:a1:6a:e3:08:f9:68:
                    59:4d:72:88:20:6b:c2:60:0b:22:22:af:9d:3e:b6:
                    6c:4d:d3:c6:ad:41:27:01:50:75:2f:cf:a1:ca:cc:
                    8b:fd:ee:dc:22:c9:66:ea:fe:71:79:74:8e:7d:c7:
                    52:ef:83:77:47:92:e1:e3:25:f9:a4:ba:b8:10:98:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:59:2E:29:A2:2B:AA:5A:A1:E4:F4:2E:FF:1B:B9:25:F1:9E:ED:80
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Q1kuKaIrqlqh5PQu_xu5JfGe7YA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:d3:3a:57:f2:b6:63:96:94:63:bc:4e:0c:0f:92:a5:98:
         95:23:05:c8:9b:1e:03:43:f5:69:a6:b6:01:1e:15:25:3b:6c:
         b6:57:1f:6b:f1:08:81:95:62:c7:78:bc:17:26:06:73:23:c5:
         7d:a0:fc:4e:a1:5c:31:c3:1d:10:ae:bd:ae:c8:2a:09:18:27:
         8c:1b:b1:e7:e4:52:5b:11:0a:47:0c:d3:93:1d:d5:81:18:9a:
         de:cb:7d:c1:fc:17:54:15:4a:48:f8:58:b7:f1:e2:23:70:ab:
         19:94:25:18:46:98:ca:ad:1e:4d:3c:fa:37:79:fd:b6:d6:e7:
         3e:06:3a:d1:ec:68:ed:f4:33:18:9c:b8:74:9e:43:fd:14:02:
         03:21:24:69:cb:aa:e2:61:6e:b3:14:a9:e0:23:0d:c7:1f:5b:
         eb:65:d6:06:5b:54:c3:25:a0:7f:16:bd:7e:de:a1:55:a1:e4:
         b8:14:b2:31:b5:68:6c:08:5a:30:81:8a:ab:ad:1a:72:c8:28:
         18:ee:e8:7a:3d:b5:30:35:d3:f7:b9:25:0b:83:2b:cb:a0:c6:
         ce:c6:5c:55:16:9e:be:84:41:8c:9b:c2:6c:5b:9d:21:3b:4a:
         1d:da:65:95:0f:d3:4a:e6:cd:a2:2a:e9:19:d0:5e:64:3f:3c:
         31:0b:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----