Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7DvqpL-3jeFD18xwVN7RRDpLoo.roa
File:                     I7DvqpL-3jeFD18xwVN7RRDpLoo.roa (raw, json)
Hash identifier:          XgMY4BorVtNP11Y8Rqs8hBNIIbrZdTy1UEB/QGv1HUk=
Subject key identifier:   23:B0:EF:AA:92:FE:DE:37:85:0F:5F:31:C1:53:7B:45:10:E9:2E:8A
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       081B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7DvqpL-3jeFD18xwVN7RRDpLoo.roa
Signing time:             Tue 29 Sep 2020 09:57:46 +0000
ROA not before:           Tue 29 Sep 2020 09:57:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        61.30.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=23B0EFAA92FEDE37850F5F31C1537B4510E92E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:0a:e2:65:28:86:5f:d1:6e:4b:1a:5d:50:
                    c4:d0:ba:98:c0:c9:2d:da:c8:fb:e0:68:9d:45:80:
                    b4:96:81:b2:da:91:ef:ae:66:7d:74:fb:79:2b:c4:
                    12:42:97:2e:5c:2f:81:a2:76:b7:38:9b:7a:38:c9:
                    78:af:2c:6e:37:bd:9d:41:d3:25:78:93:7a:e5:ea:
                    5f:28:c2:4f:6f:6a:a9:fb:0d:87:94:03:d9:92:29:
                    e8:45:e6:d8:50:2a:1e:6b:19:4d:ba:b4:67:bb:e4:
                    7d:03:52:cc:3f:73:d5:0b:17:05:e0:f7:18:b2:0f:
                    c2:18:39:36:6d:8e:40:1e:e6:36:d0:c0:31:e6:4d:
                    48:57:de:0d:2d:4a:7a:9a:52:79:e1:44:3b:c6:d2:
                    48:e9:de:c4:db:9d:ba:dc:b1:a7:37:f4:5b:7b:16:
                    69:4b:bf:55:56:1c:c0:08:5f:e6:eb:82:f9:78:90:
                    4a:be:b5:38:0e:59:17:c3:fc:9d:06:62:67:70:05:
                    57:15:ad:80:2b:09:80:69:7c:b4:8c:56:c5:88:81:
                    f4:09:47:d9:c7:76:71:c0:41:ef:c4:e0:28:88:45:
                    cb:bb:07:18:89:4a:d7:40:64:df:db:36:dd:85:66:
                    ed:05:30:25:3c:3b:dd:1b:14:ab:c2:c3:76:f2:2b:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B0:EF:AA:92:FE:DE:37:85:0F:5F:31:C1:53:7B:45:10:E9:2E:8A
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7DvqpL-3jeFD18xwVN7RRDpLoo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:23:50:d9:d8:9c:60:c1:fd:9f:86:a3:91:88:b6:82:86:fa:
         86:91:2d:b2:fb:23:e2:99:37:e4:48:4b:3d:9a:9c:2a:8e:34:
         65:d9:ad:57:b6:2e:f4:45:84:ad:04:c9:90:f1:37:60:b4:f9:
         bc:84:38:a6:1e:29:21:02:69:1c:53:a9:8c:58:b3:82:a8:46:
         06:72:91:01:90:48:4c:05:ff:cf:37:3d:9a:22:f8:db:28:4f:
         56:a2:bc:db:a4:f9:7a:ca:62:b3:71:2d:7e:18:52:ef:f8:4d:
         22:15:97:59:08:cd:40:b0:ab:c8:81:ec:c1:2a:d4:68:21:d1:
         c2:ad:8d:c5:22:a5:80:8b:e1:82:36:87:b1:4d:0b:39:52:63:
         82:13:ca:56:bd:46:f3:bf:3b:3b:bb:f0:c6:bb:a2:4f:c2:0e:
         a6:10:b1:09:87:0e:12:06:e3:f5:aa:24:d6:42:93:f1:ba:7c:
         80:26:45:21:4a:8b:36:fc:a4:31:19:4a:1c:c6:0d:bb:ee:aa:
         4e:8b:36:f2:67:7b:c3:91:7f:00:03:7a:00:5b:88:17:47:c7:
         b5:98:93:29:96:8a:19:50:59:a2:15:24:81:07:e6:8f:60:45:
         7a:a6:88:e2:61:5e:dd:7b:49:88:75:a8:3a:aa:9a:b3:ff:57:
         fe:3c:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----