Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9w6wlLVPqK8hgLAwIk7BPLYbPIQ.roa
File:                     9w6wlLVPqK8hgLAwIk7BPLYbPIQ.roa (raw, json)
Hash identifier:          V4/+Dp5n8Hh1injLVEjr+0muHQJ+jwTnINTFxu6SSJI=
Subject key identifier:   F7:0E:B0:94:B5:4F:A8:AF:21:80:B0:30:22:4E:C1:3C:B6:1B:3C:84
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C96
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9w6wlLVPqK8hgLAwIk7BPLYbPIQ.roa
Signing time:             Wed 29 Sep 2021 02:50:01 +0000
ROA not before:           Wed 29 Sep 2021 02:50:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        219.80.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3222 (0xc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F70EB094B54FA8AF2180B030224EC13CB61B3C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:8d:4f:2c:c2:4e:8b:f2:d8:4d:af:10:d7:
                    94:35:04:3c:41:35:c9:e8:f6:ff:88:07:8f:a1:37:
                    0f:6e:f2:87:44:6a:66:fb:40:17:b6:ed:8a:ab:a2:
                    8d:13:29:1d:ab:63:93:1c:ff:d2:d8:dc:3a:1f:04:
                    22:35:40:60:d6:f0:ed:e5:3a:97:b6:65:77:06:04:
                    c0:72:6b:98:74:25:e4:72:27:d8:dc:e8:4d:23:d6:
                    54:63:1e:7d:cd:9f:7b:4b:bf:10:ad:8c:a5:c2:b6:
                    90:91:69:b6:96:2d:4a:a7:b1:c6:5b:60:1f:eb:90:
                    79:e1:ba:e5:7d:49:12:a2:ad:91:30:8d:c7:0f:cc:
                    6a:42:81:b3:77:91:39:f5:6a:eb:37:bb:e3:50:ae:
                    d3:f3:a0:8f:3c:83:44:23:9c:8b:9f:a0:f7:ff:60:
                    74:e6:1f:f5:b7:6a:34:f7:f2:91:a7:53:0c:4b:dd:
                    e7:18:f5:3b:a7:e1:16:a7:97:8b:5f:0f:23:e7:42:
                    f4:8b:ee:e9:f2:ee:7f:77:a4:33:a5:be:f2:bf:09:
                    6a:78:88:16:5b:85:39:1e:92:1b:1b:44:01:a9:d5:
                    93:2d:f7:aa:6c:dc:47:48:67:87:03:79:0c:47:9b:
                    86:63:be:f4:4e:8f:bb:bf:2b:9a:7c:ca:39:7b:29:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0E:B0:94:B5:4F:A8:AF:21:80:B0:30:22:4E:C1:3C:B6:1B:3C:84
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/9w6wlLVPqK8hgLAwIk7BPLYbPIQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.80.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:52:94:f0:f7:d7:31:f5:c1:0b:a9:19:bc:7d:f6:4c:59:
         8b:bf:fc:c4:a2:cd:c2:46:cc:3d:88:25:d8:63:49:52:7d:89:
         24:c9:1b:a7:93:66:ee:c5:80:0a:f6:97:af:1f:fb:1d:cb:eb:
         8e:3e:0b:ee:df:02:5e:f0:f0:19:cc:e4:01:59:af:76:d4:93:
         89:b9:4f:90:ab:0d:95:fa:cb:96:9c:d2:b3:83:c5:e3:67:ef:
         67:ea:c5:5c:6e:87:1b:62:bf:1c:df:be:86:9c:dc:b8:69:75:
         44:73:0a:44:58:40:9e:1b:25:28:b3:21:29:e4:9e:4f:ac:86:
         c2:85:7d:a7:da:82:64:d9:96:19:a2:c1:d7:d4:84:88:ec:c1:
         4a:df:3b:43:2a:63:f3:5c:84:10:7a:e0:34:41:4e:64:54:65:
         b8:4f:9a:a0:be:69:21:f5:2f:27:67:33:80:ce:8c:b8:54:94:
         63:37:fd:8d:b2:46:5b:53:58:f3:8b:1e:bf:e4:8e:3b:c4:ce:
         89:0f:fb:eb:46:07:73:73:ba:bf:72:3d:87:34:c6:93:15:ac:
         5a:ab:43:be:9a:35:c2:87:23:5f:3c:65:d7:6d:cf:ab:68:f5:
         3c:90:47:79:f9:13:fe:12:0e:f6:44:49:72:8f:46:8f:f0:74:
         f3:fc:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----