Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/DcE5D33mdVbecp41PmH-c9orHnA.roa
File:                     DcE5D33mdVbecp41PmH-c9orHnA.roa (raw, json)
Hash identifier:          bneG1xtjpreQCwcKo6YWX0Rjs1L9zMnLCIW/tUSZnRs=
Subject key identifier:   0D:C1:39:0F:7D:E6:75:56:DE:72:9E:35:3E:61:FE:73:DA:2B:1E:70
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07EE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/DcE5D33mdVbecp41PmH-c9orHnA.roa
Signing time:             Tue 29 Sep 2020 09:57:33 +0000
ROA not before:           Tue 29 Sep 2020 09:57:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.192.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0DC1390F7DE67556DE729E353E61FE73DA2B1E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:04:c9:7d:4d:3f:25:af:78:52:5d:2b:18:
                    88:01:7f:ba:12:32:36:d4:d4:5c:39:92:7a:08:58:
                    73:b9:58:cc:a1:51:0a:91:60:ac:bd:b8:df:cb:b7:
                    4d:b3:a8:6a:e1:51:78:72:d5:5e:dc:56:05:59:e4:
                    47:ad:f5:4a:17:7b:e5:d4:0b:99:b0:52:9e:e2:38:
                    81:5a:c6:8e:44:19:6f:14:d4:93:9f:fd:ad:f1:ee:
                    b4:d1:9c:2e:85:bc:22:a5:68:c4:1f:fa:50:9c:c7:
                    98:9c:b8:46:90:c3:78:b0:d3:f8:01:f5:8c:5a:6f:
                    75:fc:0d:2f:cf:ae:9c:14:15:69:05:ba:21:a3:dc:
                    dc:9e:9e:e0:ff:76:07:ef:ba:eb:55:46:bf:3d:05:
                    d6:64:9e:b0:97:0f:a4:07:e7:2b:36:3e:a4:69:a0:
                    f5:c6:cc:77:a7:c3:41:1d:24:e2:4f:97:15:68:64:
                    72:17:ee:69:71:25:fc:16:9f:24:ae:58:89:c2:e7:
                    53:96:70:df:55:7c:19:25:65:17:04:8e:25:05:5b:
                    87:89:0c:99:1d:b5:55:9f:04:ec:65:c5:8c:98:fd:
                    60:f4:2c:1f:4b:40:ee:5f:59:b5:10:c3:1c:ac:b5:
                    27:65:f2:6c:1a:6d:ee:e3:b1:5c:20:23:aa:0a:d0:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:39:0F:7D:E6:75:56:DE:72:9E:35:3E:61:FE:73:DA:2B:1E:70
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/DcE5D33mdVbecp41PmH-c9orHnA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.192.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:de:58:8f:8a:e6:8d:43:57:3a:62:5d:dd:0b:36:2d:5a:
         84:ee:b0:5a:f7:aa:6f:28:38:5d:6d:27:45:2b:4a:93:5e:7b:
         2b:f8:f4:8f:a1:e2:cd:e8:a8:1e:82:a9:8d:55:16:4c:77:8a:
         68:f4:b6:03:38:e5:9e:0d:d3:72:0b:2a:b7:64:ca:86:6e:6b:
         de:f6:5d:27:e9:c7:3b:ea:2e:09:20:81:6b:ea:02:47:20:3e:
         5e:86:54:79:51:2c:96:48:ed:af:91:e7:33:57:fb:4c:fe:12:
         e1:f8:39:91:77:7c:2e:ca:00:03:26:0d:e6:02:a2:77:d1:3c:
         ad:e1:da:11:9c:16:b5:c2:04:52:e8:ad:aa:9a:6b:5e:ab:40:
         7b:7b:b2:9a:18:bb:42:bf:74:25:bc:e3:5a:c4:c5:d5:3a:9a:
         a4:4a:cc:b4:ba:af:4b:a6:9c:13:96:d5:af:77:30:10:4a:be:
         66:51:aa:e5:33:ac:c3:58:90:f2:c8:e9:fb:6c:f8:99:e3:be:
         0d:c2:99:56:c8:c8:c4:98:6f:af:6c:fd:74:2b:67:86:53:18:
         62:ef:64:51:ea:f4:b4:d4:9f:32:b7:05:a6:48:a5:35:58:7b:
         8c:3c:cc:2b:da:81:5e:90:cf:62:51:1c:d2:0a:9b:47:80:3d:
         8b:1d:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----