Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7-epCFlQU9Myhe0KTpi8QlK4c3Q.roa
File:                     7-epCFlQU9Myhe0KTpi8QlK4c3Q.roa (raw, json)
Hash identifier:          1T2x/hPteQQgXq8+1X5nmXMmqKo8jfkWeqtAsPL7Fx8=
Subject key identifier:   EF:E7:A9:08:59:50:53:D3:32:85:ED:0A:4E:98:BC:42:52:B8:73:74
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07E6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7-epCFlQU9Myhe0KTpi8QlK4c3Q.roa
Signing time:             Tue 29 Sep 2020 09:57:31 +0000
ROA not before:           Tue 29 Sep 2020 09:57:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        203.77.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EFE7A908595053D33285ED0A4E98BC4252B87374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:d3:45:6a:ad:4e:01:05:84:5f:8b:3c:ab:
                    e0:7a:96:24:60:4d:e6:73:95:08:6e:aa:10:c3:9e:
                    55:a0:5e:50:43:9a:1c:60:4e:90:7d:02:99:70:dc:
                    df:6b:4c:11:1c:4b:40:95:bc:a1:a0:20:32:36:29:
                    fb:81:c9:f4:c2:f3:a7:9f:39:77:da:19:b2:48:2d:
                    a1:dc:24:b8:2a:66:1c:18:b1:76:68:32:87:6a:d4:
                    37:ae:7a:1b:54:d6:9e:f7:f9:6f:d7:e1:31:ab:ea:
                    92:d9:fe:6c:d7:00:19:39:8f:71:46:80:e6:40:93:
                    f7:88:3b:fe:65:af:9e:b4:6e:ab:74:51:fa:55:ec:
                    94:03:27:6c:fb:c8:92:ec:f2:ce:93:da:b6:00:9e:
                    cb:6e:05:17:ad:2e:c9:bb:5b:03:de:7d:9c:15:df:
                    76:e8:28:e5:1b:76:7a:78:94:cb:70:c8:e1:c3:8d:
                    f5:d8:de:51:fa:be:7c:d2:51:20:8a:dd:85:d1:b4:
                    73:92:bb:28:4f:46:32:a6:d6:0d:2d:fd:5d:bc:ee:
                    a4:7b:7e:61:5e:74:72:d0:e1:c6:df:8e:bf:af:6c:
                    d3:7a:3b:f3:48:1a:17:6f:d0:aa:f4:a0:76:1c:fc:
                    9a:b7:c7:20:95:e5:36:65:98:1b:87:91:2d:41:c7:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E7:A9:08:59:50:53:D3:32:85:ED:0A:4E:98:BC:42:52:B8:73:74
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7-epCFlQU9Myhe0KTpi8QlK4c3Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:3d:8b:e9:38:71:3b:0c:92:7a:0d:f1:35:4a:59:fe:6b:37:
         9b:af:1e:56:47:41:ff:d9:18:af:db:53:0c:1f:70:81:cc:97:
         2f:a7:f0:bc:4e:01:31:fc:bb:a5:6f:12:05:74:a9:1c:f8:a2:
         f2:26:e5:ee:58:d8:83:fa:33:ab:bd:a6:ab:e1:27:c0:a7:ad:
         21:8c:64:3b:e0:ae:b3:e2:0f:e4:5f:e4:a9:17:ee:e3:a9:51:
         e9:8d:bd:3e:54:ba:2f:06:ab:13:fa:5a:af:b9:26:0d:3d:4d:
         3c:34:68:39:3b:cb:43:32:b3:af:26:c5:55:39:5a:4f:1a:cf:
         47:e7:35:7b:b4:33:98:da:a2:e2:28:65:92:b1:11:db:91:71:
         cd:cd:42:b9:91:9f:cf:50:b3:6b:f2:2b:89:2b:fa:53:90:22:
         68:61:f1:90:2c:72:3e:07:e2:b7:5b:ef:66:af:c1:fe:95:f7:
         48:2c:f6:f1:53:9e:54:4b:83:cf:7f:c0:7d:74:71:da:43:5d:
         dc:fe:36:30:f6:8e:5c:5a:90:36:f8:8b:00:ce:07:d5:ed:2e:
         c4:ba:23:01:53:61:a2:6c:39:7b:dc:2a:80:d8:7b:4a:ef:27:
         2a:cf:ea:4b:3b:a8:55:e8:84:86:77:2d:72:a8:b3:08:2f:78:
         98:77:52:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----