Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FzEZEjUBFS62n9U6AAopJ0Z4_S4.roa
File:                     FzEZEjUBFS62n9U6AAopJ0Z4_S4.roa (raw, json)
Hash identifier:          bhOQU9TniQ2IByQJ3fQcajp4/u/fCfmne1pMuJMx0ns=
Subject key identifier:   17:31:19:12:35:01:15:2E:B6:9F:D5:3A:00:0A:29:27:46:78:FD:2E
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0807
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FzEZEjUBFS62n9U6AAopJ0Z4_S4.roa
Signing time:             Tue 29 Sep 2020 09:57:41 +0000
ROA not before:           Tue 29 Sep 2020 09:57:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.67.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=173119123501152EB69FD53A000A29274678FD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:7f:7d:72:83:41:ee:41:7d:17:bc:2c:89:
                    a4:5b:79:58:00:01:fb:18:5e:f6:7b:13:72:a0:95:
                    36:de:cc:2b:37:37:59:c7:08:08:e8:1f:a6:bc:bf:
                    e1:f7:9c:44:26:2e:36:5a:c2:a4:d1:37:84:cd:31:
                    ad:82:3f:66:f9:f3:c4:ac:c1:18:0c:19:38:d2:7f:
                    64:95:9f:74:22:0b:1c:a7:d4:08:67:74:52:63:28:
                    da:79:01:7e:b0:f2:a5:d7:78:67:c5:47:f2:e8:a7:
                    2c:98:d7:74:47:fe:4f:01:b8:85:58:c3:c5:c5:c5:
                    41:04:8a:40:af:eb:66:23:1d:7e:90:d3:14:94:95:
                    34:39:d1:33:c5:be:18:ae:1d:b3:4f:b1:f5:62:d6:
                    67:b3:54:45:ef:14:3d:25:35:91:ab:9a:fd:24:a0:
                    cb:d1:65:48:61:a6:37:74:4f:14:19:94:4e:14:09:
                    35:cc:11:74:79:dd:a5:d5:62:7c:a2:ff:3a:7b:99:
                    9f:74:f7:ee:99:f5:0b:65:ab:d7:cd:8a:d0:31:84:
                    7f:23:e6:76:4f:2b:6e:9b:2f:1a:1d:93:be:ac:db:
                    7b:66:07:59:ce:a9:a6:b9:5e:a4:f5:8a:2e:a6:68:
                    7f:87:e6:57:37:77:9d:84:fb:ac:0c:f3:a3:c5:1d:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:31:19:12:35:01:15:2E:B6:9F:D5:3A:00:0A:29:27:46:78:FD:2E
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FzEZEjUBFS62n9U6AAopJ0Z4_S4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:b3:dc:4e:f2:a0:9e:b6:46:56:51:fc:c2:06:c3:e7:30:
         84:64:cd:47:0b:b7:de:60:c6:c0:7d:c9:3e:ef:e0:d2:84:76:
         bd:06:62:91:dc:1c:d4:54:14:09:5d:ff:42:32:0c:2b:02:f4:
         a6:96:40:44:18:d1:c0:70:fd:a0:db:4f:56:3f:d9:cc:d3:5c:
         74:ec:2e:36:55:fc:03:60:3a:44:ec:00:49:4a:55:02:7e:0f:
         16:ff:0e:3b:99:87:2d:74:86:8b:e0:63:8d:a9:ed:a0:4d:3d:
         e7:1a:3a:cc:d7:ed:57:08:b6:0d:b1:53:81:04:93:81:43:e5:
         dc:78:e6:71:49:91:1d:9a:18:97:a0:31:54:7c:b7:fa:b3:41:
         51:db:fb:23:cf:bc:f5:20:ff:ee:79:56:65:ea:8f:df:64:00:
         8d:95:7e:5d:63:93:63:89:68:dd:e7:0c:cf:17:85:78:f6:9d:
         cb:d8:49:a4:7c:9b:1d:60:36:53:77:08:d1:c3:d8:7c:29:1f:
         ab:b8:6f:41:a3:89:05:cf:78:b2:5b:b3:cf:9c:b6:27:5f:51:
         a5:12:d8:f1:43:d1:c0:c7:1e:15:0f:d7:c4:89:ce:bb:06:fc:
         ea:1e:da:13:fd:5a:08:29:44:fc:5d:bc:22:4a:05:86:94:10:
         8c:4f:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----