Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/E2IJfXPWBBm_H6o7XmdpycBRf2w.roa
File:                     E2IJfXPWBBm_H6o7XmdpycBRf2w.roa (raw, json)
Hash identifier:          c+ymCOhLx4sQ/RnekrLAqt6JB09LZcasQvW30J9Fix0=
Subject key identifier:   13:62:09:7D:73:D6:04:19:BF:1F:AA:3B:5E:67:69:C9:C0:51:7F:6C
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C7C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/E2IJfXPWBBm_H6o7XmdpycBRf2w.roa
Signing time:             Wed 29 Sep 2021 02:49:54 +0000
ROA not before:           Wed 29 Sep 2021 02:49:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        60.198.40.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1362097D73D60419BF1FAA3B5E6769C9C0517F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:85:df:74:d2:73:28:d3:da:38:22:8c:c4:
                    7a:e3:e3:5e:66:c9:48:68:1c:a2:0c:8c:44:5a:90:
                    a9:2c:64:75:5d:86:51:6b:57:f2:7a:2b:1d:7a:e4:
                    45:5e:cb:b7:17:8d:bf:15:db:7a:c9:65:46:be:45:
                    12:d7:b1:ef:5d:60:5e:d6:44:ca:0a:61:2b:c0:81:
                    f8:b7:61:fb:12:c8:28:5d:fc:18:a5:6a:4c:8a:f1:
                    c6:fe:9c:a7:dd:41:83:d6:27:3b:69:c6:1d:94:5a:
                    b0:1f:6b:27:26:3a:0b:bb:10:f0:85:95:cb:57:95:
                    53:1d:8e:a5:40:66:7e:0a:21:ec:0b:dd:27:fc:9c:
                    55:fe:38:b1:ea:97:6e:87:c4:9e:69:18:84:2c:c3:
                    6f:94:85:0e:55:a4:71:91:eb:02:96:83:2b:d6:74:
                    f8:2c:f5:a0:08:8b:a6:91:37:f1:bc:96:2f:1b:ab:
                    ab:e7:8f:16:b4:3b:2f:86:9a:1f:99:56:94:41:cc:
                    4d:a8:03:54:be:3d:60:60:85:0d:1b:b0:5e:59:53:
                    c5:de:9d:06:b9:b6:38:b4:5d:06:87:f3:a3:d1:79:
                    2a:90:1c:fc:6d:84:d7:2c:2d:95:7c:db:29:a2:1f:
                    a0:80:b6:a3:ee:8f:ab:32:73:13:84:61:30:28:70:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:09:7D:73:D6:04:19:BF:1F:AA:3B:5E:67:69:C9:C0:51:7F:6C
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/E2IJfXPWBBm_H6o7XmdpycBRf2w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:24:f7:69:60:ae:ce:d4:4c:bb:a1:44:6b:ff:36:4d:82:52:
         7c:86:ad:5d:cf:f2:da:24:64:07:bc:89:55:e6:d7:ca:19:69:
         76:cd:22:9f:b0:98:3a:d4:8f:3e:39:9a:9e:4f:15:26:03:e8:
         8a:f5:8d:a2:2e:1f:4b:84:68:82:07:90:c6:d8:9b:d2:b7:f4:
         3a:5e:f0:ec:f2:14:fd:a2:6a:8d:a4:f1:66:c4:8c:23:7b:9c:
         e0:9c:67:26:89:aa:fb:83:20:31:ed:26:8f:cc:42:30:ff:3d:
         dc:27:2b:92:fa:30:d3:c0:c0:73:c6:85:92:b6:73:72:b3:87:
         b8:71:da:70:09:52:42:b3:4b:26:52:9b:3d:53:a0:d6:9e:2e:
         8b:bf:fd:e8:f5:cc:f9:bd:ae:19:a3:fd:13:5f:39:ee:60:96:
         77:89:9e:57:0e:33:75:ac:7f:9d:50:48:5a:a1:ce:58:44:24:
         0c:34:99:cc:f2:d4:9a:8e:58:27:82:20:a9:78:e1:4b:d8:92:
         af:52:6f:63:3e:d7:1a:00:4b:a1:77:27:b1:2e:b1:46:ef:cb:
         1f:ef:2b:e0:69:bf:f4:a6:ef:90:64:d0:a2:fa:47:62:09:16:
         76:37:6a:8f:c7:6e:de:97:fc:2a:ab:63:15:43:b0:d1:92:88:
         bc:aa:a2:04
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjQ5NTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEzNjIwOTdENzNENjA0
MTlCRjFGQUEzQjVFNjc2OUM5QzA1MTdGNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+o4XfdNJzKNPaOCKMxHrj415myUhoHKIMjERakKksZHVdhlFr
V/J6Kx165EVey7cXjb8V23rJZUa+RRLXse9dYF7WRMoKYSvAgfi3YfsSyChd/Bil
akyK8cb+nKfdQYPWJztpxh2UWrAfaycmOgu7EPCFlctXlVMdjqVAZn4KIewL3Sf8
nFX+OLHql26HxJ5pGIQsw2+UhQ5VpHGR6wKWgyvWdPgs9aAIi6aRN/G8li8bq6vn
jxa0Oy+Gmh+ZVpRBzE2oA1S+PWBghQ0bsF5ZU8XenQa5tji0XQaH86PReSqQHPxt
hNcsLZV82ymiH6CAtqPuj6sycxOEYTAocIy5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUE2IJfXPWBBm/H6o7XmdpycBRf2wwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRTJJSmZYUFdCQm1fSDZv
N1htZHB5Y0JSZjJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AzzGKDANBgkqhkiG9w0BAQsFAAOCAQEAeST3aWCuztRMu6FEa/82TYJSfIatXc/y
2iRkB7yJVebXyhlpds0in7CYOtSPPjmank8VJgPoivWNoi4fS4RoggeQxtib0rf0
Ol7w7PIU/aJqjaTxZsSMI3uc4JxnJomq+4MgMe0mj8xCMP893Ccrkvow08DAc8aF
krZzcrOHuHHacAlSQrNLJlKbPVOg1p4ui7/96PXM+b2uGaP9E1857mCWd4meVw4z
dax/nVBIWqHOWEQkDDSZzPLUmo5YJ4IgqXjhS9iSr1JvYz7XGgBLoXcnsS6xRu/L
H+8r4Gm/9KbvkGTQovpHYgkWdjdqj8du3pf8KqtjFUOw0ZKIvKqiBA==
-----END CERTIFICATE-----