Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7bZkCtDPoNUpcfFXpgbCCq4Y3tg.roa
File:                     7bZkCtDPoNUpcfFXpgbCCq4Y3tg.roa (raw, json)
Hash identifier:          b/YGjxemJezZ7W4woRrf/pkgXT6QgZz+Is6aDci/vww=
Subject key identifier:   ED:B6:64:0A:D0:CF:A0:D5:29:71:F1:57:A6:06:C2:0A:AE:18:DE:D8
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0802
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7bZkCtDPoNUpcfFXpgbCCq4Y3tg.roa
Signing time:             Tue 29 Sep 2020 09:57:39 +0000
ROA not before:           Tue 29 Sep 2020 09:57:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.243.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EDB6640AD0CFA0D52971F157A606C20AAE18DED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:d6:cb:4f:d5:bc:74:0c:40:fe:59:58:69:
                    d3:94:89:e8:6b:ca:2d:ba:c3:a4:c3:e5:d6:b7:38:
                    73:6d:10:d3:89:69:22:f1:d7:d4:4e:ab:b1:be:58:
                    e4:bc:83:63:2a:23:01:5c:bb:5d:02:fc:18:b3:5a:
                    37:b1:7d:5c:38:b6:2e:70:4f:a4:e1:1f:99:ce:b6:
                    a7:04:9f:bc:e7:d0:2e:ce:39:b7:9c:5e:10:bf:29:
                    e4:c4:59:96:13:cc:80:f7:b3:72:c1:5a:dd:2b:35:
                    72:58:1e:b8:b1:12:44:54:be:ac:1b:5f:1f:40:9d:
                    87:90:d0:ae:8f:b1:59:6f:f3:b9:a2:24:de:86:42:
                    96:f0:72:42:1b:3f:01:51:fe:4e:47:bc:71:98:27:
                    86:d2:b2:d9:c4:50:d9:1d:9c:e1:21:7e:11:20:2d:
                    a1:9d:9e:f4:cf:2d:b9:64:ea:33:d1:7c:82:12:f6:
                    0e:c2:f9:e3:0e:c4:2a:5f:74:9c:8e:27:75:8b:fe:
                    13:f8:c0:56:6f:f0:27:5c:0b:17:63:2a:28:1f:8d:
                    ee:1f:5f:62:53:6e:70:ea:fb:25:28:55:61:97:30:
                    6a:d8:6d:e2:88:11:b9:68:45:4b:c0:d1:bc:c1:4c:
                    5f:52:df:a6:c6:03:db:45:f4:cf:28:46:23:0b:33:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:64:0A:D0:CF:A0:D5:29:71:F1:57:A6:06:C2:0A:AE:18:DE:D8
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7bZkCtDPoNUpcfFXpgbCCq4Y3tg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.243.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:52:66:de:34:c1:27:c7:c4:bc:e2:2c:fd:ef:63:e6:83:7c:
         82:20:f3:e0:53:ab:42:23:5a:70:f3:b7:57:ea:ee:7d:a8:3b:
         c4:c8:ba:b3:08:ff:4c:f9:0a:c0:4b:94:24:36:ef:38:ab:bd:
         03:4e:f0:80:8c:96:83:3c:cc:d3:fa:d0:e3:11:74:6d:69:e4:
         15:56:24:a3:9c:37:0f:89:0d:0f:72:bd:0e:14:f7:73:e5:86:
         35:f3:d7:40:3d:1d:6f:14:ca:f3:fb:1a:cb:39:06:43:16:4d:
         19:a2:3f:54:d3:f7:dd:57:f3:d6:53:f8:43:e0:c7:67:87:e4:
         e8:ec:2e:af:ea:41:3a:a1:9d:b6:50:5d:4c:b4:7e:73:a0:6d:
         bb:8d:9f:67:09:f2:73:d0:02:e6:00:4b:76:49:6a:36:52:3d:
         c8:e9:db:1d:6b:f9:48:91:fe:8a:79:de:7b:2b:5f:86:ce:ee:
         9e:3f:b0:41:6b:54:15:5e:18:5e:78:7c:a3:b6:df:e1:26:e9:
         19:bd:78:eb:ca:87:0e:ba:a5:67:c6:43:79:30:80:42:67:4c:
         c0:da:3e:7f:91:c0:d3:55:dd:a5:38:e5:fb:6b:f6:3b:2e:e9:
         16:5e:a4:64:cd:c8:d5:1a:2c:52:eb:23:d3:3d:ac:e2:a8:47:
         ac:54:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----