Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/qFYdmkBIIknFqsACUg4cFGlAyGk.roa
File:                     qFYdmkBIIknFqsACUg4cFGlAyGk.roa (raw, json)
Hash identifier:          PgJBrW4aMCK6DiYjLtMca8/MshHAd1/6N0b0QjOdK+4=
Subject key identifier:   A8:56:1D:9A:40:48:22:49:C5:AA:C0:02:52:0E:1C:14:69:40:C8:69
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0761
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/qFYdmkBIIknFqsACUg4cFGlAyGk.roa
Signing time:             Tue 29 Sep 2020 10:05:28 +0000
ROA not before:           Tue 29 Sep 2020 10:05:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        43.251.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 10:05:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A8561D9A40482249C5AAC002520E1C146940C869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:7f:db:22:25:db:22:9d:8c:9d:c6:db:6e:
                    fc:b5:2a:d1:39:7a:41:e7:85:33:26:b4:b5:12:e3:
                    76:79:39:ab:d6:2a:48:b0:18:e7:3d:6f:36:f1:73:
                    31:56:b4:c8:4b:13:a4:fa:62:32:09:79:f8:2f:ad:
                    08:bd:2b:da:6a:b8:dd:3e:76:53:2f:1e:bf:95:88:
                    68:73:5d:27:3b:89:17:b8:fb:93:f8:4f:10:94:ac:
                    01:2e:a2:83:38:e5:43:c9:1e:6e:8c:d3:e0:b0:34:
                    ba:ac:26:76:37:e8:f5:04:fc:f1:c4:2f:6e:10:83:
                    57:f4:b4:b3:78:f3:37:3b:25:13:5a:12:49:6a:f0:
                    a5:24:49:af:90:45:6d:f4:cf:df:7c:36:a4:8c:26:
                    0e:71:f3:1d:61:e0:16:c6:8b:f9:7d:40:68:3e:a4:
                    dc:73:34:b4:7b:aa:ff:5c:cf:3d:0b:1d:9f:fa:9e:
                    05:d8:fe:a1:fe:bb:e8:c1:4b:b4:35:ce:4b:68:76:
                    6f:fe:b7:72:db:03:78:7c:b1:dc:29:fa:74:b6:30:
                    c6:40:77:7c:91:9d:ae:77:ce:41:da:ca:a3:14:d1:
                    89:d1:59:59:c4:83:8b:c5:b1:81:b4:b2:25:7c:8c:
                    d6:18:fc:2f:71:b2:d0:d8:dc:8f:d6:8f:9f:86:d0:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:56:1D:9A:40:48:22:49:C5:AA:C0:02:52:0E:1C:14:69:40:C8:69
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/qFYdmkBIIknFqsACUg4cFGlAyGk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:08:f4:de:75:6d:8b:88:39:34:9f:76:76:7d:42:00:0c:9e:
         23:2b:43:ff:f3:37:eb:13:3f:51:f8:8b:f0:29:24:c0:66:5f:
         79:0e:2f:d2:43:3e:38:ea:46:84:7b:1c:69:95:5a:67:a6:99:
         84:ae:74:26:a8:35:7b:88:f3:53:17:11:c5:e3:e5:46:41:84:
         53:4f:0e:3e:f8:ae:2d:7f:20:09:c1:b9:98:53:bc:9e:99:e0:
         1e:9e:78:25:f1:9a:0a:3b:3b:09:cf:69:bd:6d:88:ef:78:3d:
         c5:db:16:67:b3:c5:f3:a8:8d:53:40:55:b0:32:18:5e:c8:82:
         47:22:9a:fd:35:c7:e3:56:b9:9b:4d:b6:22:cf:2b:5d:85:c0:
         09:9c:46:70:19:88:a3:13:11:ae:f3:ab:99:d8:af:22:f4:81:
         07:1c:ac:4e:9e:12:40:07:33:98:19:46:e5:ec:4b:74:93:8f:
         20:ee:d9:2c:fc:5f:d9:99:fc:a3:97:98:61:62:03:66:4d:d7:
         16:de:14:f6:d6:8d:e6:f1:51:4d:a8:0c:5d:8f:a2:81:71:a1:
         89:55:92:29:ff:7e:c4:86:ef:af:5a:e6:6f:d2:f1:ee:40:ce:
         b1:69:2c:51:37:5d:b2:98:ff:9e:3d:fc:34:37:8e:ca:37:20:
         42:69:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----