Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/10TncGbWwm82llXXIXNepRHWy_M.roa
File:                     10TncGbWwm82llXXIXNepRHWy_M.roa (raw, json)
Hash identifier:          7wdqBM8FbT4kxrZv9nDMT+QJvRsRf52Y/Pil8Jm0lAo=
Subject key identifier:   D7:44:E7:70:66:D6:C2:6F:36:96:55:D7:21:73:5E:A5:11:D6:CB:F3
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0831
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/10TncGbWwm82llXXIXNepRHWy_M.roa
Signing time:             Tue 29 Sep 2020 09:57:52 +0000
ROA not before:           Tue 29 Sep 2020 09:57:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131611
IP address blocks:        124.9.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D744E77066D6C26F369655D721735EA511D6CBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:07:b7:70:53:5b:32:e0:2e:83:1d:2c:55:
                    0d:42:95:84:a4:cd:da:03:be:e4:ad:a8:3e:a8:5f:
                    3b:bc:7a:14:fe:3d:0d:9b:ca:7d:aa:40:69:2e:ba:
                    1f:e1:d2:30:29:5c:05:7c:ae:2c:e0:ee:d9:cc:d7:
                    c7:6a:73:e6:2f:61:84:bb:8d:14:d7:7a:79:f7:0d:
                    d2:c8:8e:48:d1:61:fa:dd:8d:0e:16:ae:4a:70:61:
                    a9:f8:76:1a:49:b1:85:98:ce:b7:02:3b:f2:3b:de:
                    c3:2e:22:1a:28:35:37:3f:db:c3:d0:98:80:fe:51:
                    64:8a:ae:4a:db:3a:74:a4:76:59:4a:5f:96:10:33:
                    20:09:bc:dd:d6:7b:08:56:3e:8c:cc:3d:53:94:fc:
                    74:7d:30:e0:90:8d:02:5b:c5:84:c8:e4:11:4f:61:
                    ec:1b:d5:b0:ef:fc:24:2e:d5:5c:86:8b:83:5a:e3:
                    92:3f:60:9a:f8:3a:1a:73:67:cd:d3:b9:d0:bd:07:
                    08:5f:d3:e1:e6:ab:56:c5:b8:ef:aa:89:8b:ed:dd:
                    a0:97:6e:8a:02:e1:82:03:17:e2:8c:c6:0f:0c:88:
                    64:bb:48:25:60:c3:7b:b7:48:b8:a5:12:86:67:3c:
                    26:7a:af:e0:fd:20:0b:5f:c6:ba:48:7a:2d:90:b7:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:E7:70:66:D6:C2:6F:36:96:55:D7:21:73:5E:A5:11:D6:CB:F3
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/10TncGbWwm82llXXIXNepRHWy_M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.9.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:7d:d2:c7:fc:c6:42:cb:27:ec:1a:d4:ce:fa:7c:d8:7a:
         ec:6f:46:31:9f:cb:02:89:68:e5:95:04:b7:6e:3e:88:c9:b4:
         71:c1:f1:de:68:12:6a:05:3a:ea:be:8b:49:51:c4:ab:5e:99:
         46:87:c3:c4:ac:d8:74:63:e3:20:86:d5:fb:cc:34:38:ea:16:
         bf:9a:f5:6f:a6:8d:3d:0e:27:ee:0f:4b:3e:d5:fa:7b:1c:3c:
         5d:97:9e:90:5c:1f:2f:b1:bd:7a:3d:a2:27:9c:70:84:51:f5:
         b8:26:ce:1f:61:ba:70:fe:32:8f:3e:90:a2:3e:64:84:65:2d:
         7d:4f:83:1f:5b:5e:50:a7:89:93:1d:b6:d7:32:8d:1c:7f:19:
         27:bf:20:16:dc:c6:6f:ef:fe:df:c0:10:ed:f8:ed:07:20:04:
         9a:1b:cc:3d:4d:26:96:44:a9:00:40:7c:2e:94:9e:fd:c2:46:
         56:18:a6:6a:25:9e:44:1d:50:5b:b2:51:57:37:e4:3f:ee:d0:
         3f:19:45:29:3d:3c:ab:1e:bd:f4:1b:de:fa:ba:10:09:5e:cb:
         2d:ab:ed:e9:e3:b5:26:78:d0:ef:bc:8c:78:b1:b1:ed:71:ae:
         be:48:9d:fc:03:2d:be:15:11:01:31:38:e2:c5:2d:b2:4f:c5:
         3d:0f:c2:44
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ3NDRFNzcwNjZENkMy
NkYzNjk2NTVENzIxNzM1RUE1MTFENkNCRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2tge3cFNbMuAugx0sVQ1ClYSkzdoDvuStqD6oXzu8ehT+PQ2b
yn2qQGkuuh/h0jApXAV8rizg7tnM18dqc+YvYYS7jRTXenn3DdLIjkjRYfrdjQ4W
rkpwYan4dhpJsYWYzrcCO/I73sMuIhooNTc/28PQmID+UWSKrkrbOnSkdllKX5YQ
MyAJvN3WewhWPozMPVOU/HR9MOCQjQJbxYTI5BFPYewb1bDv/CQu1VyGi4Na45I/
YJr4OhpzZ83TudC9Bwhf0+Hmq1bFuO+qiYvt3aCXbooC4YIDF+KMxg8MiGS7SCVg
w3u3SLilEoZnPCZ6r+D9IAtfxrpIei2Qt9aVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU10TncGbWwm82llXXIXNepRHWy/MwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMTBUbmNHYld3bTgybGxY
WElYTmVwUkhXeV9NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BXwJYDANBgkqhkiG9w0BAQsFAAOCAQEAfJZ90sf8xkLLJ+wa1M76fNh67G9GMZ/L
Aolo5ZUEt24+iMm0ccHx3mgSagU66r6LSVHEq16ZRofDxKzYdGPjIIbV+8w0OOoW
v5r1b6aNPQ4n7g9LPtX6exw8XZeekFwfL7G9ej2iJ5xwhFH1uCbOH2G6cP4yjz6Q
oj5khGUtfU+DH1teUKeJkx221zKNHH8ZJ78gFtzGb+/+38AQ7fjtByAEmhvMPU0m
lkSpAEB8LpSe/cJGVhimaiWeRB1QW7JRVzfkP+7QPxlFKT08qx699Bve+roQCV7L
Lavt6eO1JnjQ77yMeLGx7XGuvkid/AMtvhURATE44sUtsk/FPQ/CRA==
-----END CERTIFICATE-----