Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LME8WdnPa4ptZZlsFiQmTZLlzDo.roa
File:                     LME8WdnPa4ptZZlsFiQmTZLlzDo.roa (raw, json)
Hash identifier:          B2yq8Tc6g47cMMwevtYmJ+ul/jGQBcl9hI4X2iAsJg8=
Subject key identifier:   2C:C1:3C:59:D9:CF:6B:8A:6D:65:99:6C:16:24:26:4D:92:E5:CC:3A
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0ADE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LME8WdnPa4ptZZlsFiQmTZLlzDo.roa
Signing time:             Sun 07 Feb 2021 11:40:43 +0000
ROA not before:           Sun 07 Feb 2021 11:40:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        203.77.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:40:43 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2CC13C59D9CF6B8A6D65996C1624264D92E5CC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:64:29:01:4c:14:f8:97:84:08:df:bb:94:
                    76:59:d1:f0:43:48:32:ae:d0:0c:2f:80:6f:dc:8e:
                    8f:55:2c:d5:2d:a8:59:e2:24:0b:e7:ca:02:fd:0b:
                    91:60:93:c4:a4:75:2e:6b:9d:80:f9:55:66:46:07:
                    3f:6f:81:de:27:7b:30:65:9c:39:32:04:fa:be:b8:
                    f7:07:26:d3:71:cd:11:19:7f:02:dc:fc:6e:93:d3:
                    43:8b:4f:17:a6:eb:35:24:6a:fc:78:30:a4:ac:7a:
                    ab:c9:82:40:57:69:30:e7:c6:fb:b8:db:b1:aa:65:
                    fb:43:5c:e3:f8:8b:de:a0:31:7c:90:b3:81:d4:21:
                    7a:f9:1d:0f:74:15:6a:a2:4a:c8:0e:9c:7a:08:d2:
                    ae:3b:4a:a9:69:10:3f:8d:fd:c7:18:27:ad:35:c0:
                    8e:7a:f0:17:3d:05:2d:b1:99:99:fb:11:32:2a:d2:
                    0f:48:0c:55:0a:47:b3:76:c2:99:e5:32:fb:21:3a:
                    9b:40:5e:3b:04:ca:f4:2c:e7:86:1f:5f:42:9d:f4:
                    21:e6:e7:f0:8f:95:dd:7d:b4:cc:ef:67:4d:e7:f2:
                    77:b6:89:46:8a:22:e8:31:a8:8e:bb:af:a3:0b:18:
                    af:c8:8b:93:7f:06:21:4b:86:55:4b:3d:04:af:cb:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:3C:59:D9:CF:6B:8A:6D:65:99:6C:16:24:26:4D:92:E5:CC:3A
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LME8WdnPa4ptZZlsFiQmTZLlzDo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:3b:ba:89:74:4c:3a:5f:c4:ea:1d:67:94:e5:1e:5e:f9:
         86:d4:4e:c8:3d:f3:a4:7a:88:45:bd:94:d3:0a:f3:e4:e4:87:
         72:45:a2:76:2a:2e:e3:6d:2a:bc:ab:7b:be:5e:13:bf:38:fc:
         67:88:42:f0:1b:39:f8:80:e8:e7:ce:c0:6f:d4:ab:3c:d7:19:
         18:6d:08:c1:88:c2:80:ea:88:ba:d0:2d:0f:16:29:82:fa:fb:
         98:fe:bc:62:c6:f9:93:3f:dc:5d:32:16:a4:bc:31:8a:13:37:
         c2:a5:53:0a:de:99:79:4f:59:0b:fa:79:4f:53:0c:4a:06:d5:
         60:4d:b8:99:27:09:ee:86:8f:87:77:a6:a3:ed:be:fb:c9:c1:
         e3:80:51:64:43:25:9a:2b:8e:96:85:17:2c:9a:83:82:0a:1e:
         a5:7c:c7:4d:18:30:2f:c2:c6:28:77:1d:f0:3f:82:1c:4d:4b:
         e4:81:12:65:73:fb:ab:56:87:f5:5d:4d:db:d5:c2:dc:3a:78:
         a1:9f:12:54:83:f1:35:73:de:7f:87:7c:6a:ff:6e:ab:35:e0:
         50:6b:da:da:c9:2b:cb:e5:41:d3:b5:1f:06:5a:01:81:42:db:
         c9:87:d1:72:3f:46:66:28:56:9b:50:e8:88:fc:21:57:ba:1a:
         7a:a5:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----