Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6PaCM19rOs-qiyxG0vODqldQ5QQ.roa
File:                     6PaCM19rOs-qiyxG0vODqldQ5QQ.roa (raw, json)
Hash identifier:          KA9EBoD5C01Jvn0LlWwbtR86Fr9x+W4TU9QnZnP2hyE=
Subject key identifier:   E8:F6:82:33:5F:6B:3A:CF:AA:8B:2C:46:D2:F3:83:AA:57:50:E5:04
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07F6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6PaCM19rOs-qiyxG0vODqldQ5QQ.roa
Signing time:             Tue 29 Sep 2020 09:57:35 +0000
ROA not before:           Tue 29 Sep 2020 09:57:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.67.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E8F682335F6B3ACFAA8B2C46D2F383AA5750E504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:b6:f0:60:3d:04:c1:61:d3:47:67:17:8a:
                    2b:d3:89:3d:bc:58:63:fe:d3:c9:71:3f:02:87:67:
                    e5:32:af:7b:4c:44:e6:21:c0:25:be:cd:33:92:ab:
                    8c:ae:4b:87:23:49:9e:ba:1c:d2:29:48:c9:31:98:
                    82:18:bc:87:e4:9f:2c:42:f0:f0:ee:6c:f6:59:03:
                    44:ab:01:fe:df:6d:90:4d:39:72:ee:c3:7f:8c:4c:
                    99:9c:2a:86:08:04:59:96:82:78:c3:13:dd:d3:72:
                    b7:49:1b:c4:50:19:1f:0e:f9:7f:f1:72:fb:69:d2:
                    a6:1c:08:31:66:ef:97:e7:89:64:aa:b3:b5:42:bd:
                    12:ac:0d:f7:c5:4f:f3:0a:b7:90:65:2c:d3:ac:e7:
                    80:a4:74:4e:01:1a:1b:b1:87:8b:a3:0f:54:a7:89:
                    54:a2:15:cc:d3:c9:fc:ed:d7:20:8a:de:07:96:3f:
                    b9:d0:39:a7:d3:9e:7e:be:8a:54:e6:8e:c7:5d:e7:
                    db:ea:a8:f5:53:04:1b:cf:c4:e3:ed:9c:79:6e:82:
                    b5:95:7b:50:42:22:56:f3:db:b7:f8:e8:66:23:2c:
                    34:1f:f4:50:3e:c4:f2:2b:8f:5e:68:fc:d2:69:69:
                    24:a9:6a:6f:fb:34:09:4e:95:9c:0f:c2:80:1b:9f:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:82:33:5F:6B:3A:CF:AA:8B:2C:46:D2:F3:83:AA:57:50:E5:04
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6PaCM19rOs-qiyxG0vODqldQ5QQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:3d:bf:47:6e:39:9a:6c:07:80:dd:af:85:9c:93:86:0b:1b:
         84:85:f2:be:8d:39:a5:dd:5a:7e:ad:69:14:8f:ce:ce:c2:0a:
         d9:31:57:cb:8b:3a:cb:0c:ea:14:96:d6:8a:83:d2:96:d8:3c:
         35:6a:48:2e:76:d2:57:38:d4:1b:1c:73:f0:20:f0:ab:6e:27:
         4a:5d:6f:07:54:ec:11:76:6e:b2:07:30:7e:85:d6:0c:10:42:
         c4:47:d3:15:89:ae:08:07:9e:91:74:d2:d2:ec:c4:c3:10:0b:
         a5:52:ed:06:41:0c:d1:2b:f5:9f:58:d1:f7:9c:36:5a:18:c3:
         23:1b:5b:9c:eb:e4:e4:77:90:fc:55:4b:f9:b5:40:03:08:33:
         fe:8c:8b:c5:f6:c1:54:6b:63:43:ba:77:fb:92:65:22:2e:1a:
         7e:ea:d4:b5:f2:ee:cd:af:64:17:e5:0d:43:6f:66:4c:21:cd:
         df:49:95:19:ad:a0:ad:4f:53:7e:65:9e:b8:63:5d:f4:ca:5e:
         68:25:36:4e:fe:d9:d6:26:d7:a6:04:07:f9:96:2b:00:16:fa:
         d6:bf:09:78:9d:86:37:c7:fe:b2:5e:67:6e:82:5f:43:64:b7:
         e8:b4:3a:88:dc:4b:c0:d1:c7:96:58:93:3b:6e:71:92:ab:0c:
         c7:76:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----