Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/43BpIQTNFUALcfjyqa8twQ5sXWE.roa
File:                     43BpIQTNFUALcfjyqa8twQ5sXWE.roa (raw, json)
Hash identifier:          eurz1u8B5pWxNYTfN1gc+10cVMaNfLwDWidSvoB7QHg=
Subject key identifier:   E3:70:69:21:04:CD:15:40:0B:71:F8:F2:A9:AF:2D:C1:0E:6C:5D:61
Certificate issuer:       /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial:       0787
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/43BpIQTNFUALcfjyqa8twQ5sXWE.roa
Signing time:             Tue 29 Sep 2020 10:03:54 +0000
ROA not before:           Tue 29 Sep 2020 10:03:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4782
IP address blocks:        61.67.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
        Validity
            Not Before: Sep 29 10:03:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E370692104CD15400B71F8F2A9AF2DC10E6C5D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:a4:88:bc:2a:52:41:cd:3e:9d:de:95:66:
                    08:64:b3:73:2a:81:b3:ad:4d:87:ca:91:5a:ca:34:
                    4f:1c:63:4d:e7:e3:1f:e9:cc:9a:b9:d5:78:a6:49:
                    45:fa:d8:f9:92:5b:93:81:4a:2d:41:87:3d:4f:71:
                    34:86:0d:3e:dd:3f:2f:41:36:00:d1:1a:fa:f8:8f:
                    39:45:88:dd:aa:fe:2c:ed:86:ba:84:02:67:2a:0d:
                    9f:fc:2b:d4:51:90:2f:35:e8:c0:8e:1e:3d:e3:a1:
                    9c:ce:7f:5d:0d:51:b4:6b:aa:36:59:80:23:a8:a8:
                    92:d5:80:4c:ce:a0:7d:6b:b0:87:63:1a:b5:13:82:
                    95:e3:38:41:9e:4d:6f:78:a4:34:28:bc:cf:da:ee:
                    cf:ce:31:27:4b:1d:2e:6d:47:02:0a:c1:69:96:b2:
                    b2:31:b6:bf:85:d1:f6:bb:72:26:98:1d:6b:ea:4d:
                    60:5c:78:c3:03:f5:45:42:08:2d:45:66:a7:ac:ba:
                    20:3a:82:7f:fc:d4:c8:11:a4:53:c1:fc:00:6a:56:
                    0d:dc:fa:1b:bc:53:6c:05:19:de:3f:06:f1:58:28:
                    f2:3f:6e:33:eb:b7:0a:0b:12:59:28:0d:22:14:80:
                    33:b4:c8:06:8d:86:d6:80:e6:fa:c2:2a:9d:4a:4b:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:70:69:21:04:CD:15:40:0B:71:F8:F2:A9:AF:2D:C1:0E:6C:5D:61
            X509v3 Authority Key Identifier:
                keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/43BpIQTNFUALcfjyqa8twQ5sXWE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.67.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:03:d9:93:77:0e:4e:5b:f9:13:a7:3d:69:0f:2b:2a:4c:9d:
         73:26:5c:0f:01:ea:52:dd:63:00:62:c9:54:7c:06:06:f6:86:
         52:37:cc:ce:7c:22:8d:b9:d4:39:f7:c8:f2:21:43:b6:69:b0:
         c3:cf:4d:e5:9e:7c:22:ef:92:c3:9b:22:c2:7a:a9:05:bf:d9:
         1e:b2:c8:cc:66:36:f6:e6:23:b4:33:42:59:48:52:27:ae:57:
         7f:c7:99:d7:bd:c1:97:1c:39:2a:f7:ea:eb:82:cc:bb:e2:2d:
         20:2b:4b:7a:e1:f8:a6:6b:cc:40:e7:81:88:f5:3f:49:f0:58:
         af:df:12:5c:1d:a0:16:4a:82:00:16:da:9c:6f:2a:07:6e:e3:
         df:b8:ba:70:55:cd:c0:d4:8d:02:4e:e6:db:b4:8c:53:45:a8:
         ac:13:5c:b7:82:9a:6b:a4:61:ec:0e:be:f4:f1:4d:72:2f:68:
         cd:7f:29:a3:81:e1:28:94:b9:ce:ff:3c:1a:e8:ef:de:2e:26:
         59:05:a0:fc:4f:a8:f9:9f:0d:c4:b0:df:4c:88:91:c4:b7:cb:
         29:28:72:e6:0d:7f:81:c8:8e:fa:7d:5c:67:4d:fc:b1:b4:ba:
         69:29:66:8b:a0:45:71:68:cb:0a:6a:11:bf:a8:8b:39:b8:0a:
         44:d4:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----