Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5nll90JtkjGXsi8FNQ8ma-_QnrQ.roa
File:                     5nll90JtkjGXsi8FNQ8ma-_QnrQ.roa (raw, json)
Hash identifier:          09be61vGHW2MHuScZi+3CbHT2NV6gsAhqdckfm4IXFw=
Subject key identifier:   E6:79:65:F7:42:6D:92:31:97:B2:2F:05:35:0F:26:6B:EF:D0:9E:B4
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07FA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5nll90JtkjGXsi8FNQ8ma-_QnrQ.roa
Signing time:             Tue 29 Sep 2020 09:57:36 +0000
ROA not before:           Tue 29 Sep 2020 09:57:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        203.77.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E67965F7426D923197B22F05350F266BEFD09EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:f5:24:ef:41:09:7b:0d:82:5e:72:74:85:
                    f8:bf:b0:ca:a6:b9:89:15:ae:b3:c3:88:3c:0d:c8:
                    8f:c4:6f:0e:85:89:47:b1:e1:59:7c:10:b5:92:5b:
                    ea:c6:9e:74:ba:43:46:e9:05:11:a3:53:11:c7:00:
                    0e:50:08:e8:22:42:21:9b:fb:d8:ec:02:df:28:48:
                    79:87:c8:f7:af:fb:43:13:b3:f6:4b:86:8c:38:fb:
                    15:da:1f:71:e1:c5:52:0a:0e:99:ce:5d:e6:18:1d:
                    e4:8d:9a:91:a1:c8:0a:c9:8c:25:ba:57:8f:ed:48:
                    15:3b:b7:14:36:0a:4f:93:40:ff:b4:c5:82:4b:a8:
                    3d:26:d6:36:4b:18:0b:72:53:95:9d:28:8f:39:37:
                    6e:f6:96:fe:5d:98:84:d7:28:ac:74:a7:5f:03:d0:
                    8a:3e:a7:93:58:ef:6d:2c:10:52:ea:18:dc:2e:4b:
                    42:e5:1a:f1:38:9a:c9:c1:f6:d8:1e:39:72:63:48:
                    3f:1b:96:02:2a:6d:9c:90:d0:f9:8f:f2:2d:4b:90:
                    9c:27:e8:61:0d:2e:9c:fe:f1:6e:89:16:2c:bc:fa:
                    8c:08:8e:cd:42:80:2c:64:08:54:06:79:b6:bd:49:
                    17:82:09:7e:f4:f9:89:61:e4:b2:3d:06:0a:48:05:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:79:65:F7:42:6D:92:31:97:B2:2F:05:35:0F:26:6B:EF:D0:9E:B4
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5nll90JtkjGXsi8FNQ8ma-_QnrQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:29:8e:b0:15:28:ba:95:cf:30:bc:dc:a9:3b:87:34:a2:
         e8:93:11:33:aa:9f:46:3a:27:16:1a:3b:3e:3e:67:f4:a2:1f:
         73:ad:b7:23:38:93:18:e8:e8:5b:52:fe:64:e6:d6:5e:ef:73:
         be:01:1d:2f:a1:52:cb:de:41:29:9f:0d:4e:66:c7:3a:32:38:
         4d:80:bd:88:1e:e3:ed:b6:21:d7:f5:0d:26:58:a7:de:9e:4e:
         13:96:54:81:8c:58:fa:10:6b:8f:43:5a:60:84:65:f8:1c:ae:
         2d:fb:99:41:da:5d:ca:27:4d:2f:6a:7e:e2:d0:c3:48:a3:ed:
         d2:29:c3:a6:a9:06:79:be:45:4c:4b:46:b8:99:11:48:a2:58:
         a2:96:fe:95:d9:57:59:78:3c:c9:f0:fc:08:1e:b2:dc:a8:21:
         b2:3c:ce:55:3d:bd:57:85:83:d9:99:2d:c2:da:a6:5b:44:f6:
         46:47:90:f4:5a:81:dc:4d:73:47:60:35:b8:3d:0d:e9:50:ab:
         16:12:58:10:fc:39:a7:ab:03:31:80:0a:9d:a8:2f:e8:48:59:
         db:54:6e:1a:75:fc:5c:65:e4:26:d5:b1:04:37:8c:95:49:6d:
         e3:60:85:7d:76:5e:bc:cc:b3:c9:53:7c:4f:86:dd:04:94:da:
         39:1e:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----