Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9-kSdBDfhLxVR1Cic3vo73j15oA.roa
File:                     9-kSdBDfhLxVR1Cic3vo73j15oA.roa (raw, json)
Hash identifier:          sK0LDy3EC2A/O9fW3Qf9Yq3P23vBwRV7Q8ImTtHyTp4=
Subject key identifier:   F7:E9:12:74:10:DF:84:BC:55:47:50:A2:73:7B:E8:EF:78:F5:E6:80
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       082A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9-kSdBDfhLxVR1Cic3vo73j15oA.roa
Signing time:             Tue 29 Sep 2020 09:57:50 +0000
ROA not before:           Tue 29 Sep 2020 09:57:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        203.65.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F7E9127410DF84BC554750A2737BE8EF78F5E680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:48:d5:92:84:7a:94:09:50:ce:16:0d:fd:
                    7f:46:78:42:ca:47:b9:0f:fd:ce:5b:bb:c6:5a:e9:
                    06:de:7c:4d:e7:51:22:a1:b5:74:b1:42:d4:df:9b:
                    c7:b2:74:f5:98:dd:3d:f8:75:62:23:e3:d5:e0:5d:
                    cc:24:38:f5:26:7c:bd:1b:4a:f8:5f:78:84:75:52:
                    fc:43:3b:68:40:7e:a3:89:69:e5:9d:1f:1c:94:86:
                    fc:88:53:45:fd:23:79:70:89:32:8c:8a:2d:b9:58:
                    b6:4f:f3:fe:33:3a:c2:22:fd:1a:98:8e:19:49:6c:
                    9a:71:cd:92:d1:cf:4f:13:30:40:c5:08:de:f5:9a:
                    ac:f8:e2:e5:a0:bc:c9:04:90:6f:1d:76:4c:0e:6a:
                    fa:69:6a:2d:f2:96:90:d0:a5:8c:c5:d8:28:bd:f9:
                    d4:99:19:d1:4e:12:3e:7d:05:3d:1c:ed:02:a4:7f:
                    cd:21:c0:f4:5b:51:4c:ae:be:15:dd:cd:60:82:89:
                    fa:1f:60:be:a1:fa:ca:e7:09:a9:e8:00:ba:75:f1:
                    d4:52:c1:6e:34:72:4c:5e:1a:05:2f:09:e1:3a:ca:
                    51:66:c4:b2:f7:15:ad:b0:7b:a6:25:e4:1c:d4:70:
                    b6:3b:85:c8:76:fb:be:48:e7:6a:fa:fc:6c:c0:66:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:12:74:10:DF:84:BC:55:47:50:A2:73:7B:E8:EF:78:F5:E6:80
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9-kSdBDfhLxVR1Cic3vo73j15oA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:a6:9c:9b:b5:36:91:a3:f3:78:52:99:24:da:04:9d:e5:
         ca:ac:b3:b1:b6:ac:6b:cd:11:30:76:44:cb:9b:c2:c4:1c:a7:
         25:46:e4:9b:60:77:c9:40:30:05:39:6e:81:e1:5e:22:40:15:
         ac:ee:b9:58:a8:1c:76:54:e3:90:f5:6a:27:b5:58:f1:5f:59:
         50:12:5b:26:d7:bb:bc:f4:e9:e2:60:43:69:75:2c:7a:2e:33:
         b3:fd:df:55:28:9f:a1:e6:d4:3d:47:d8:ca:33:91:17:79:82:
         a4:71:14:8d:1a:2a:03:46:42:92:78:c6:98:48:b2:b8:92:a8:
         70:83:52:1e:86:7b:17:c5:60:3b:00:21:24:19:3a:f5:b9:40:
         48:af:11:82:4e:56:85:03:16:ba:b9:29:e9:0c:f1:d0:38:92:
         c7:9e:f8:e4:f3:82:9a:98:39:8b:b8:36:12:7f:c2:10:6a:ca:
         8f:25:5d:1e:20:a7:3d:f4:f8:30:f0:e8:b6:23:b8:fc:66:83:
         81:a2:47:6a:93:0f:1a:23:4e:3e:4c:28:56:b0:b9:6e:85:ce:
         9c:d3:5e:98:e5:06:77:68:51:47:30:ce:0d:e9:39:f6:0c:89:
         fa:60:42:fc:65:9a:0e:29:83:68:ef:3d:ca:44:0d:6a:b8:90:
         24:23:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----