Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J9RIk02PGe9LLYzkQWWfHQjBmjs.roa
File:                     J9RIk02PGe9LLYzkQWWfHQjBmjs.roa (raw, json)
Hash identifier:          q5N551UFL8m2obDz20mvp6v2FMLJI72+UOwyLYoAJxQ=
Subject key identifier:   27:D4:48:93:4D:8F:19:EF:4B:2D:8C:E4:41:65:9F:1D:08:C1:9A:3B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07E8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J9RIk02PGe9LLYzkQWWfHQjBmjs.roa
Signing time:             Tue 29 Sep 2020 09:57:32 +0000
ROA not before:           Tue 29 Sep 2020 09:57:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        219.80.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=27D448934D8F19EF4B2D8CE441659F1D08C19A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:cd:ac:f2:59:7a:7f:66:13:e5:80:c2:dc:
                    6c:10:bd:c0:53:0e:27:ea:5f:a7:87:7f:f0:25:b8:
                    c2:db:5e:fd:93:b7:3e:55:17:79:8b:e4:e3:99:01:
                    10:1a:81:be:6c:e5:df:1d:01:20:bd:94:09:5f:a5:
                    26:08:d6:fc:3f:82:ce:da:30:0f:9d:c2:fc:08:a2:
                    27:f8:2f:68:bb:f9:75:2f:27:35:ed:de:02:9c:fa:
                    dc:41:64:60:18:40:ac:d9:61:88:83:de:3b:c1:e4:
                    18:75:9e:0f:66:a7:0a:90:22:65:a8:af:44:0b:6c:
                    f0:b7:5b:3a:a0:ea:f4:76:a5:00:20:ff:2b:cc:b9:
                    3d:12:17:13:ac:6c:c0:ff:4a:98:aa:f6:01:2a:6d:
                    e9:3b:ce:f7:eb:95:b9:d2:4d:39:72:dc:3a:c8:0d:
                    33:91:31:e7:46:2a:b8:cf:9c:c4:ef:77:57:61:cd:
                    a8:29:6f:24:b5:9f:ad:d8:59:8e:ab:51:f7:20:5c:
                    3f:4c:81:86:e3:74:cb:57:6f:bd:5c:8c:a1:e7:e6:
                    78:1a:1d:c5:b4:93:9d:80:51:7e:0e:ae:a3:ec:6a:
                    0f:3e:b4:6c:2c:e1:fc:90:28:a3:52:80:73:35:70:
                    ca:d8:f9:9b:25:ff:a6:2e:04:ff:a9:10:45:55:34:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:48:93:4D:8F:19:EF:4B:2D:8C:E4:41:65:9F:1D:08:C1:9A:3B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J9RIk02PGe9LLYzkQWWfHQjBmjs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.80.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:16:71:9f:30:16:b2:43:7c:4a:03:01:6c:86:bc:25:2d:
         b9:d1:64:49:88:95:bf:f4:20:9d:72:24:14:98:dd:38:08:b5:
         27:ca:b7:ae:a7:55:06:0e:d8:e5:a3:3d:72:62:d9:37:c6:ec:
         7f:66:41:f5:ab:7c:02:a6:f7:8b:66:42:d7:ad:0c:c7:b3:29:
         e1:49:1f:df:18:dc:ba:a1:b8:c3:05:12:c6:f8:09:41:d6:ff:
         96:73:6f:12:4a:6e:af:4a:60:9c:12:c2:43:d6:35:9f:21:c4:
         ee:3a:22:b5:9f:72:f0:9c:dc:3d:19:a1:01:75:de:b9:84:9b:
         04:2e:ff:ee:8a:5d:9d:5b:63:f0:7a:02:c8:91:f7:5d:25:7a:
         59:21:0a:34:04:0d:27:67:ea:5f:a7:d4:57:d8:d0:80:20:4f:
         d1:b8:b4:6a:16:4d:4b:68:41:77:30:18:d3:4b:f2:55:5f:b5:
         02:34:cf:a4:5b:29:47:d2:82:a4:9a:85:7a:15:00:95:2a:c0:
         d9:34:8d:92:e4:3a:08:79:33:fa:46:64:a9:1d:b1:2d:dd:a0:
         ea:26:02:a2:b1:5a:6a:82:41:e4:df:f8:aa:64:7b:4f:43:c8:
         ca:31:40:e6:03:a7:b9:e1:ae:4f:2f:8d:2b:d9:f6:58:6d:af:
         1f:5e:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----