Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LFnUBq6FqjeunTnFHze6Jm28Nmk.roa
File:                     LFnUBq6FqjeunTnFHze6Jm28Nmk.roa (raw, json)
Hash identifier:          JX1IAaA1JY2/GB4uvQCf3m36ky9ctCa3jTGcUIYABDY=
Subject key identifier:   2C:59:D4:06:AE:85:AA:37:AE:9D:39:C5:1F:37:BA:26:6D:BC:36:69
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0829
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LFnUBq6FqjeunTnFHze6Jm28Nmk.roa
Signing time:             Tue 29 Sep 2020 09:57:50 +0000
ROA not before:           Tue 29 Sep 2020 09:57:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        49.216.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2C59D406AE85AA37AE9D39C51F37BA266DBC3669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:2b:83:b7:6b:16:d0:9b:52:df:49:f7:bc:
                    ff:cc:32:75:b8:f0:12:26:4d:1d:59:85:64:7f:25:
                    13:e9:f1:f9:2b:29:78:92:3e:06:96:71:06:fb:44:
                    ab:67:0a:aa:f7:10:a0:2f:de:fc:ad:5b:41:10:97:
                    3d:bf:c2:ea:80:d1:09:f2:0e:a3:aa:21:5b:79:1c:
                    b3:65:58:5b:f2:96:c2:29:49:d4:a4:fa:cf:85:88:
                    f1:5b:ff:7e:7f:42:d1:ac:a8:1a:f2:69:18:17:a0:
                    5c:73:d8:46:a7:1e:21:9a:21:f5:6d:7f:8f:6f:86:
                    59:63:f7:70:c7:aa:0d:e1:48:55:ac:5b:64:0c:d7:
                    b1:a9:d8:bc:1e:f1:87:2c:da:4c:a9:2f:d0:93:ed:
                    16:d3:30:cf:56:5b:96:b3:78:03:db:0f:b7:f7:b7:
                    d1:5f:5a:6d:f5:70:62:5d:e6:01:3a:52:aa:f4:a1:
                    7a:81:0b:f2:d5:10:2a:6c:52:f8:c2:1a:6a:de:8f:
                    2c:61:e4:f5:a2:f1:5b:35:be:36:e0:80:69:a6:6a:
                    22:5f:b7:e8:a0:2f:14:bb:72:7c:99:aa:58:e5:76:
                    14:c9:f1:36:f7:89:4d:ac:37:5e:fb:a7:25:e2:e5:
                    b5:09:35:f2:9e:a7:f6:7d:79:5a:ac:a2:23:a8:b8:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:59:D4:06:AE:85:AA:37:AE:9D:39:C5:1F:37:BA:26:6D:BC:36:69
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LFnUBq6FqjeunTnFHze6Jm28Nmk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         13:55:1a:e4:53:b5:74:12:66:dc:31:09:f4:0e:a0:11:0c:72:
         e1:4a:fc:7f:c3:21:cc:13:82:6a:ee:f6:4a:d1:f0:86:7c:04:
         8c:e6:fd:62:e8:6e:e9:2b:da:8f:b2:97:ae:5b:5c:fc:ab:6d:
         30:c0:66:bb:c9:a1:5c:f9:b1:e0:3c:a1:3a:92:4a:1f:41:61:
         f7:76:7f:e9:ed:e8:13:f6:a5:36:5c:14:2b:95:17:32:6d:9b:
         93:04:b6:b7:44:7e:b6:56:77:f1:19:30:69:bb:d3:d9:8d:af:
         19:86:05:d5:9c:50:1e:c5:48:31:b9:e2:b7:70:0c:b8:32:04:
         4c:80:ca:71:8f:38:e8:a8:65:0d:3d:cf:3f:04:f5:a7:ae:d9:
         33:a2:56:d3:f2:3e:13:d0:a4:de:1b:0b:fe:e7:c5:ee:b5:9c:
         f2:fd:52:0c:9a:bb:70:88:92:e9:1e:72:e7:82:b2:82:d5:5c:
         86:d0:8d:e7:da:0d:db:31:30:11:29:6a:27:a0:f5:01:4a:c7:
         90:12:d3:db:bd:e8:da:06:01:49:fa:9f:78:56:18:e7:2d:07:
         7c:09:28:fd:c4:5a:70:8a:f5:96:76:19:34:e1:ec:67:5f:93:
         74:ca:e5:63:cf:46:51:81:25:f5:4c:dd:67:3f:03:89:d4:cf:
         4d:c0:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----