Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/XRJUYF2R5PrrUxt2HWcIVfoawfM.roa
File:                     XRJUYF2R5PrrUxt2HWcIVfoawfM.roa (raw, json)
Hash identifier:          n+VdRW6iJ6jb6EY/yNIKRQlJelmCvrd3MonU2sr6CeI=
Subject key identifier:   5D:12:54:60:5D:91:E4:FA:EB:53:1B:76:1D:67:08:55:FA:1A:C1:F3
Certificate issuer:       /CN=DBA793D0FFE611AC397F197570E19785046EE739
Certificate serial:       076F
Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/XRJUYF2R5PrrUxt2HWcIVfoawfM.roa
Signing time:             Tue 29 Sep 2020 09:53:49 +0000
ROA not before:           Tue 29 Sep 2020 09:53:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18413
IP address blocks:        61.65.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739
        Validity
            Not Before: Sep 29 09:53:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5D1254605D91E4FAEB531B761D670855FA1AC1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:5b:30:f8:67:46:85:93:0b:35:01:88:4f:
                    1e:2b:bf:d5:90:a9:38:c9:ee:1c:03:20:14:29:6b:
                    7c:96:73:53:0e:5c:c2:d5:31:b9:cd:41:b6:fd:59:
                    82:8b:50:6b:ed:2d:6d:5d:97:e6:2a:24:35:e5:c9:
                    23:b0:86:09:26:96:4a:5f:de:4b:d1:9d:7a:db:35:
                    93:4e:b7:ef:90:44:97:5b:1f:fe:db:79:f5:73:42:
                    e9:e1:d2:2d:a2:e8:31:dc:3d:98:4b:80:c4:b3:72:
                    bb:fa:03:03:67:f8:4a:99:cf:a6:51:48:6c:dd:1d:
                    da:2d:61:43:f7:b4:32:6f:13:64:ae:fb:b1:9d:5f:
                    8c:3a:6e:4c:a5:2d:82:b0:6c:0a:4e:62:c8:c9:1e:
                    22:69:58:b1:e5:54:d4:cf:ff:b3:c0:f2:8a:82:7b:
                    04:5c:80:2c:cb:5f:be:f8:a4:6a:7f:31:f2:17:c0:
                    78:5f:20:00:be:aa:b7:2f:c4:f6:9e:c8:83:ff:f7:
                    74:32:47:cc:f9:5b:45:7f:45:84:e2:7c:74:c8:00:
                    cb:bd:97:7f:79:d9:2c:b4:cf:5f:82:33:6e:80:7e:
                    38:cf:a2:fe:8a:af:9b:24:c5:8e:a3:9d:ae:69:3d:
                    b4:4a:83:59:24:28:dd:8a:17:d1:4a:c6:db:da:68:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:12:54:60:5D:91:E4:FA:EB:53:1B:76:1D:67:08:55:FA:1A:C1:F3
            X509v3 Authority Key Identifier:
                keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/XRJUYF2R5PrrUxt2HWcIVfoawfM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:9d:60:b5:c4:34:d4:83:57:27:d2:e7:aa:82:e7:db:f9:
         b2:d0:90:48:b9:3b:d3:63:e9:d8:98:1a:ba:97:bc:b5:05:71:
         f6:a3:57:3d:d6:1f:df:8f:2a:b0:25:24:a4:c1:1d:25:54:39:
         25:ee:85:db:d0:79:82:b8:a7:43:31:6f:40:45:5d:07:27:6a:
         1b:93:dc:c6:56:cf:41:b3:43:73:eb:53:ad:d8:8c:99:c4:bb:
         3a:82:62:c9:3a:11:ea:17:94:f6:be:e3:6e:d5:12:cd:dc:26:
         68:7d:3d:d6:8f:1b:c4:b3:ac:79:e9:38:14:c7:af:a2:b9:73:
         ca:b8:0b:0d:d3:b1:91:d4:5b:9e:25:df:0e:73:ff:30:11:9b:
         9e:9a:f0:0f:e0:17:c6:d8:fe:b7:d7:c7:92:d7:6a:2a:5d:98:
         4d:5c:9d:6e:18:ae:df:1e:1c:e0:ff:e8:a1:96:07:5b:78:57:
         8f:10:28:3c:30:2b:95:a0:04:ee:93:0a:18:f4:99:e3:41:6e:
         d1:8e:6d:ca:9a:5b:a0:59:1e:f8:7e:0c:24:38:a4:31:a0:0b:
         83:9e:57:53:15:9f:eb:ef:50:2c:32:47:30:1d:f3:e5:7b:74:
         15:9c:1a:5b:f6:6a:ab:11:1c:2c:35:96:ba:45:95:16:94:5a:
         e4:d4:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----