Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7UbMfHPN4LPxCc6S7Fr6dfyoe-8.roa
File:                     7UbMfHPN4LPxCc6S7Fr6dfyoe-8.roa (raw, json)
Hash identifier:          AHNxVSMA+jUxB/Shl5EJZgRrUXsO3DkeUYZRo8zEOyY=
Subject key identifier:   ED:46:CC:7C:73:CD:E0:B3:F1:09:CE:92:EC:5A:FA:75:FC:A8:7B:EF
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0819
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7UbMfHPN4LPxCc6S7Fr6dfyoe-8.roa
Signing time:             Tue 29 Sep 2020 09:57:46 +0000
ROA not before:           Tue 29 Sep 2020 09:57:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ED46CC7C73CDE0B3F109CE92EC5AFA75FCA87BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:40:e1:a6:82:88:5a:99:4a:d8:d5:35:5b:
                    30:a2:b1:47:aa:e2:d1:8f:f7:df:a5:bf:a5:66:df:
                    f6:6f:6a:65:e8:57:8c:ae:79:68:6c:6c:b6:59:d1:
                    ac:40:83:a4:e1:6c:25:93:f3:d4:7f:8a:a1:7c:b2:
                    8f:c5:8f:66:1b:f5:b5:cb:af:0f:e2:41:49:ed:ec:
                    93:a5:78:82:7b:02:c7:9d:35:1e:e2:3a:c9:f9:f2:
                    9d:5e:2c:67:d7:cd:e2:d1:5a:a2:d7:6c:ee:5d:99:
                    8a:34:ca:66:41:cd:d8:59:6f:87:98:0b:4f:37:0c:
                    7c:47:c5:f8:f1:80:2c:4a:3f:ca:52:61:ae:db:e4:
                    a0:45:bf:a9:9f:ba:56:3d:53:9b:9e:09:24:2c:81:
                    a2:02:fe:74:c5:b8:a2:bf:a3:89:0d:71:9d:ea:13:
                    bf:80:76:33:cd:84:ec:a2:1c:68:2a:fb:a9:ea:33:
                    27:00:e5:ff:eb:69:d3:ca:97:e8:81:27:c8:98:0b:
                    97:e7:d8:44:b1:98:9a:31:3f:27:c4:40:98:2d:09:
                    d1:d1:b7:4b:b2:97:4d:83:33:2f:d7:2a:81:f1:94:
                    82:04:ca:6a:a3:37:6f:bf:5e:a9:22:43:9c:a9:9d:
                    5c:a0:b8:dd:35:65:35:a8:3b:6e:bd:22:3c:71:28:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:CC:7C:73:CD:E0:B3:F1:09:CE:92:EC:5A:FA:75:FC:A8:7B:EF
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7UbMfHPN4LPxCc6S7Fr6dfyoe-8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:61:81:b9:8a:4b:80:a1:ea:1e:fc:07:b0:53:36:6c:07:
         b0:48:bd:03:dc:30:ef:fd:71:c5:1d:15:76:3b:f4:4c:e7:ce:
         81:e9:f7:87:35:42:79:1f:34:c1:56:e9:0b:93:b6:2f:78:79:
         aa:5e:f1:1e:d3:46:6c:c3:e2:a4:3c:cc:a9:d7:eb:67:ba:9f:
         54:9d:a7:ba:9d:f8:14:01:27:73:51:11:5b:18:31:f6:73:58:
         12:d7:5a:4d:97:c1:33:04:2c:96:00:f6:90:1a:7c:67:64:cf:
         83:11:78:c1:9e:03:95:1b:54:be:d9:7e:22:bf:a5:3f:9e:7d:
         bc:7f:02:74:9e:67:7d:35:17:5d:39:7b:c6:03:15:ba:bd:7a:
         06:58:ab:04:e4:01:b2:41:92:4b:08:00:ea:a7:42:21:d7:a2:
         86:c2:b7:ca:f5:b5:6e:b7:0f:dc:36:60:24:56:e2:fc:c6:40:
         7f:08:88:9c:6f:c0:da:39:a4:20:ed:51:b4:65:31:89:c1:a2:
         8b:37:02:c4:c1:1f:04:a7:fa:c4:2b:11:f1:89:3e:3c:3f:b7:
         9c:a6:6e:c3:a7:96:4f:92:c0:b5:99:44:07:b3:5f:7c:ed:67:
         44:99:1e:c0:2c:67:95:d6:9e:39:cf:d8:65:ad:4f:6c:df:8f:
         70:53:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----