Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa
File:                     y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa (raw, json)
Hash identifier:          Vw2cQqu5gn3iVnPqOB5eu100q2LNV4fm9XQDynYxbOo=
Subject key identifier:   CB:B2:BB:CD:10:4D:C4:F1:1A:5F:B6:62:65:3F:A1:8D:E6:F8:76:92
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       075F
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa
Signing time:             Tue 29 Sep 2020 10:05:28 +0000
ROA not before:           Tue 29 Sep 2020 10:05:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        43.251.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 10:05:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CBB2BBCD104DC4F11A5FB662653FA18DE6F87692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:ed:b8:ad:94:f7:29:45:c3:e0:89:0a:fb:
                    cd:1d:ad:3d:24:cb:40:ea:95:2a:5f:ea:56:87:de:
                    fe:c9:3c:ae:5d:a7:30:70:83:97:1d:6f:a3:08:06:
                    5d:db:e1:ef:e4:2c:34:d8:08:ca:69:1c:63:c6:cc:
                    52:f1:03:88:c9:b7:17:99:5d:2e:b6:5f:f8:de:0b:
                    96:f6:31:53:f1:5b:d9:68:31:b2:70:04:27:3e:15:
                    28:de:76:66:b7:69:62:2e:06:72:a6:a9:5c:d3:ea:
                    ed:c0:84:11:45:d5:b9:1b:f3:03:24:2e:9c:80:4b:
                    43:f2:51:93:cb:c4:e8:16:e4:ec:4a:af:1d:35:37:
                    54:75:fe:6a:89:03:7d:60:3e:ed:fc:4f:86:be:dc:
                    8c:0d:65:09:65:02:d1:8f:30:28:0c:ae:f2:75:c5:
                    10:58:da:52:22:62:b1:d9:e5:df:77:c8:14:df:8d:
                    72:da:1b:11:7b:9f:b5:a4:aa:4f:c2:d4:61:c6:b0:
                    9b:3d:8f:6a:f3:37:68:2f:ec:92:7d:da:0e:0a:c6:
                    31:b6:0e:7c:70:d0:1d:34:74:31:a1:ac:4e:7d:bf:
                    15:65:e8:e9:21:74:9f:c0:b6:bd:67:d9:a6:8b:f9:
                    52:35:32:64:91:2c:ba:32:12:f1:3d:7e:40:24:73:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:BB:CD:10:4D:C4:F1:1A:5F:B6:62:65:3F:A1:8D:E6:F8:76:92
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:73:cc:15:9d:51:8f:db:49:6c:97:05:27:92:ed:84:4a:92:
         b5:e0:f3:6d:e3:3c:68:dc:4d:0d:e0:2d:77:c3:fc:1b:49:0f:
         01:ac:e6:b8:31:46:05:27:2c:19:49:f7:ea:64:d7:68:7c:ff:
         b9:6c:54:59:d9:21:fd:47:70:2d:bf:1c:eb:cd:08:8e:bd:e2:
         e3:f6:64:01:cb:19:ed:e5:5c:24:e3:15:3d:f5:eb:3b:70:d8:
         5f:32:59:b8:ec:c5:ea:69:0f:56:94:54:01:de:8d:08:9f:6f:
         87:d9:a0:88:75:ab:43:68:09:0d:86:7f:0c:90:ba:13:21:fc:
         df:55:b3:04:73:3a:a9:5b:7e:c1:f1:4f:c0:74:fa:bc:9f:59:
         be:cc:0d:3f:d1:0d:33:96:85:16:69:a0:e7:bf:eb:87:a6:7c:
         18:c1:5c:90:e0:75:29:18:ed:ef:96:49:26:58:ab:ea:50:c1:
         e2:5a:41:d7:6c:34:47:2c:e7:57:55:85:64:9a:60:d7:75:af:
         92:19:15:3f:82:83:b0:df:82:01:1b:08:99:d1:10:40:58:6f:
         01:8d:86:fe:14:b5:15:03:e8:f8:ba:87:ca:96:d5:97:9e:f0:
         1f:a9:b3:51:1b:77:fd:dd:66:9d:64:b3:2d:2e:61:e5:74:42:
         10:61:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----