Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/wQiGE1NyDKUkYFyWyx-S_Jgjv4Y.roa
File:                     wQiGE1NyDKUkYFyWyx-S_Jgjv4Y.roa (raw, json)
Hash identifier:          2/Y+tkJLFQwTRRsbRjNhXBDCvEG7r1t+BMfAhWde5RI=
Subject key identifier:   C1:08:86:13:53:72:0C:A5:24:60:5C:96:CB:1F:92:FC:98:23:BF:86
Certificate issuer:       /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial:       0773
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/wQiGE1NyDKUkYFyWyx-S_Jgjv4Y.roa
Signing time:             Tue 29 Sep 2020 10:03:59 +0000
ROA not before:           Tue 29 Sep 2020 10:03:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4782
IP address blocks:        203.65.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
        Validity
            Not Before: Sep 29 10:03:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C108861353720CA524605C96CB1F92FC9823BF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:7a:a8:1f:ee:51:f9:ba:4d:aa:e6:5a:fa:
                    76:20:f2:00:33:88:51:43:d6:fd:98:4c:96:e5:9a:
                    dc:4d:ae:2b:ab:21:9d:37:34:ce:60:e9:77:f9:b8:
                    f7:d1:c8:17:45:31:7a:04:a8:b1:15:f3:a9:c4:c3:
                    48:61:e9:77:0d:72:82:0e:a9:48:7d:0a:09:aa:b7:
                    f6:0f:97:7d:70:44:1e:fd:fc:93:c2:e7:8a:06:c1:
                    41:02:8f:63:17:e2:94:91:19:c8:44:94:ed:70:6b:
                    7e:59:0c:06:57:2a:b4:bf:51:4b:fa:98:80:9f:c9:
                    21:f9:63:e8:28:9d:c6:ba:1a:b5:d9:ea:96:8c:7f:
                    dd:15:1c:81:0c:88:33:77:3a:ce:72:5b:a2:a2:d0:
                    63:66:81:9b:27:7f:60:6f:94:65:5f:2a:6a:a9:f6:
                    17:f5:2f:6e:c5:dd:1c:c6:70:31:33:6e:e9:6d:c3:
                    d5:13:1a:6b:fc:a1:08:68:5b:1b:5c:43:7f:3e:c7:
                    69:38:d7:12:21:e7:80:f5:12:01:3b:c7:c9:0c:f8:
                    c0:ee:a5:f1:ae:5d:18:51:91:71:29:8b:76:d8:2f:
                    f0:82:b8:bc:ba:b9:90:94:46:77:9c:42:c1:77:c9:
                    20:28:cb:14:df:ab:60:ff:12:ab:07:da:c9:b1:3a:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:08:86:13:53:72:0C:A5:24:60:5C:96:CB:1F:92:FC:98:23:BF:86
            X509v3 Authority Key Identifier:
                keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/wQiGE1NyDKUkYFyWyx-S_Jgjv4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:22:94:cc:ac:6e:eb:d8:e4:62:03:cd:03:79:d1:88:d3:
         14:3b:0a:d6:7c:da:fe:81:08:06:b8:83:5e:d3:3c:2b:c2:0f:
         e8:84:42:5d:62:78:e1:e0:7b:4f:29:32:e3:69:a8:bc:bc:58:
         fe:db:f9:28:90:fc:27:80:d3:12:84:ef:7d:b9:60:60:f0:48:
         fe:77:12:dd:77:52:4a:f4:4f:97:ad:61:7b:cc:06:c9:bc:ad:
         41:8e:50:bc:0d:dd:a5:19:e3:60:7d:a8:53:66:b9:4a:24:ca:
         53:0a:67:5b:ba:fe:26:15:3f:95:5c:33:8d:6b:e9:79:47:b8:
         e1:65:8e:b1:c2:b3:68:34:16:61:68:16:c5:cb:c3:48:0a:15:
         18:48:48:f6:4b:80:d4:6f:64:69:db:1f:f9:51:c1:0e:2b:23:
         b9:a5:5f:80:f3:90:98:b1:f5:48:b5:60:8c:a4:a6:d1:1e:f6:
         9a:1b:1c:c1:88:de:c3:30:b5:1e:77:af:09:8c:6f:11:65:19:
         a4:82:75:85:be:6e:36:ca:17:1d:9d:93:3a:b3:fb:60:49:d1:
         93:84:4c:cf:5f:88:ba:1f:08:d0:04:6f:17:7c:99:85:b5:d9:
         dd:d0:c0:94:04:dc:f1:96:21:4c:36:11:4f:d5:2a:e2:e6:f0:
         25:91:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----