Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EeIrYOHGqwR1j_DPJeCdqX0bUis.roa
File:                     EeIrYOHGqwR1j_DPJeCdqX0bUis.roa (raw, json)
Hash identifier:          k9ZsbOEErQ4q7fzxpCH3g2HzPiTcB54oe3FY+Bh5Fc8=
Subject key identifier:   11:E2:2B:60:E1:C6:AB:04:75:8F:F0:CF:25:E0:9D:A9:7D:1B:52:2B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       096E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EeIrYOHGqwR1j_DPJeCdqX0bUis.roa
Signing time:             Wed 16 Dec 2020 02:07:57 +0000
ROA not before:           Wed 16 Dec 2020 02:07:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.162.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Dec 16 02:07:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11E22B60E1C6AB04758FF0CF25E09DA97D1B522B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:ec:3b:83:75:0e:0a:a5:07:f4:21:ba:81:
                    9f:98:fa:18:d3:dd:df:3d:f8:28:3a:5b:9a:91:ca:
                    72:7f:c4:87:2e:4e:c6:51:63:20:e6:a1:16:d1:5a:
                    11:3e:89:bf:6c:e0:30:e1:2c:5e:58:99:86:1a:b0:
                    b3:77:e9:de:02:ef:8c:69:0f:81:d1:26:37:d7:1e:
                    be:fa:db:76:6f:47:60:89:c6:48:a1:3c:b2:c1:f4:
                    66:88:74:91:f6:03:a6:2c:58:05:54:e9:12:82:13:
                    b2:c9:20:e1:0e:79:dd:5a:42:f2:54:ae:93:2b:98:
                    55:c6:4a:a4:fd:1b:b1:19:bb:83:35:68:e9:dd:3d:
                    3b:ac:f5:dd:5d:78:df:b1:68:d4:2a:2a:f8:37:99:
                    4b:d1:92:22:34:ee:97:d0:41:35:84:29:a9:c7:b0:
                    7d:89:c5:90:b8:5e:c1:04:54:cb:5e:53:df:8c:0f:
                    0d:cf:75:94:a0:c3:6b:18:77:df:b2:38:d9:3f:9d:
                    ba:6c:e9:ee:4b:b1:43:32:25:21:76:76:a1:e8:5e:
                    e0:47:04:a6:66:8e:1d:05:51:bd:90:b7:7d:bb:fa:
                    0f:22:7d:00:de:00:b6:03:7f:d9:de:59:ab:5c:8b:
                    9c:92:2c:41:30:e7:f6:41:7f:35:71:90:9b:de:a8:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:2B:60:E1:C6:AB:04:75:8F:F0:CF:25:E0:9D:A9:7D:1B:52:2B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EeIrYOHGqwR1j_DPJeCdqX0bUis.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:46:1d:7d:54:ed:56:cc:c2:43:b9:2f:58:73:89:29:cd:
         00:65:f7:6a:fd:7f:d8:aa:ec:33:3b:ba:b1:96:4f:2d:2d:0d:
         35:2d:c6:06:8d:7b:cb:4e:09:31:6c:2f:1e:68:46:bf:95:9b:
         82:39:87:95:a8:f8:bc:1d:59:8c:e9:9d:49:cf:6b:87:3d:60:
         79:68:24:9c:9e:d3:f6:34:fd:ae:14:bb:e0:f9:14:02:1d:49:
         bb:9d:40:d6:19:1b:20:92:ac:1c:f5:12:3c:00:02:a3:45:86:
         ac:3d:75:23:78:1c:a9:f4:c3:ab:ab:89:bb:59:06:98:93:4f:
         c6:c7:d0:07:d5:f4:e3:b4:4e:97:07:f2:97:a5:2b:01:54:36:
         b1:f8:c8:13:55:b9:56:3a:97:24:a9:37:ee:bb:43:c5:6c:5f:
         39:21:6a:99:13:78:17:b3:5d:07:44:cf:f1:1f:30:64:b0:d1:
         53:7b:3f:f6:18:f9:20:e5:c4:ba:06:a1:e8:6a:aa:24:6d:67:
         88:ce:a0:ba:68:df:54:1b:31:6e:d8:4e:a1:7d:a0:01:03:c0:
         6e:a7:38:d0:b0:ba:f4:58:81:a7:ba:9e:f3:3a:e0:9a:31:4e:
         e7:14:53:c8:b9:d0:8f:7b:45:1c:ea:d8:2b:b2:d5:64:b0:1f:
         97:20:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----