Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PT2SUEJx8226PoXPL4o2r_b7XqY.roa
File:                     PT2SUEJx8226PoXPL4o2r_b7XqY.roa (raw, json)
Hash identifier:          X4jugJs0ccB4Uz+YSOjENQz/YsCJIjjTEDlP5i0Y5xQ=
Subject key identifier:   3D:3D:92:50:42:71:F3:6D:BA:3E:85:CF:2F:8A:36:AF:F6:FB:5E:A6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C68
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PT2SUEJx8226PoXPL4o2r_b7XqY.roa
Signing time:             Wed 29 Sep 2021 02:49:48 +0000
ROA not before:           Wed 29 Sep 2021 02:49:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        210.243.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3D3D92504271F36DBA3E85CF2F8A36AFF6FB5EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:40:1e:4e:90:16:78:e6:f3:a6:42:89:81:
                    f5:f4:7a:34:1e:5e:5a:fa:38:56:6a:db:fc:73:1b:
                    c7:f9:c5:c9:7b:8d:68:34:c4:52:e9:31:82:f8:ce:
                    0e:dc:31:ba:08:cb:21:96:67:a5:f4:bc:b4:53:e5:
                    88:7b:80:cf:78:3b:24:b7:77:8f:9f:96:04:49:70:
                    a8:d3:18:9d:25:ba:95:c6:c3:21:f6:6d:91:a5:38:
                    87:30:7e:2f:c2:3f:89:0b:f6:1c:86:62:dd:33:81:
                    40:98:8f:4a:76:45:c9:22:fa:0b:92:f5:c0:d0:aa:
                    af:51:bf:cb:ba:b8:15:95:71:3b:1e:24:1d:49:8c:
                    a5:10:e2:46:c2:4c:ef:65:ca:ca:32:55:05:b6:8f:
                    e5:ce:70:07:3a:27:51:24:8e:56:6f:21:0b:9e:3d:
                    ce:ff:65:84:9f:3d:bc:2a:0e:01:8d:11:09:92:15:
                    59:38:17:db:0f:58:69:76:a6:43:da:41:1d:85:b3:
                    2c:6b:e0:3a:e2:58:7b:28:01:27:d8:96:89:70:ef:
                    f6:10:44:3d:9d:ef:7d:50:ae:7e:0d:b8:40:49:87:
                    1e:4d:4f:e0:c6:f6:78:c6:a8:8d:8c:27:82:79:64:
                    9c:28:91:12:2c:f9:c2:c3:e7:7c:51:ba:c4:79:25:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3D:92:50:42:71:F3:6D:BA:3E:85:CF:2F:8A:36:AF:F6:FB:5E:A6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PT2SUEJx8226PoXPL4o2r_b7XqY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.243.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:9c:78:4c:6b:7b:6d:42:af:e5:32:6a:d5:d5:ca:56:d8:
         45:b2:29:09:32:c2:2e:11:30:80:01:c9:ff:45:7e:4a:0c:f8:
         ab:67:85:8a:63:46:2d:8b:18:1f:17:bb:46:56:6b:34:50:dc:
         18:38:da:e5:a0:e8:bf:45:ba:bb:71:35:50:de:45:74:71:2e:
         e8:2f:02:5f:27:36:ff:6f:fd:c4:aa:34:f1:dd:7d:99:6e:c6:
         9c:c8:9b:ea:91:5d:55:6c:b0:97:d4:01:fa:6a:bd:1c:27:c2:
         04:1a:0c:be:c0:9b:46:5d:df:2a:47:d8:19:4b:d0:b0:4f:dd:
         ec:74:60:e9:4a:2f:0e:23:34:b1:2a:c7:89:04:23:d9:1f:88:
         6f:f9:8f:46:78:b0:f0:8b:46:83:c6:34:84:6c:68:54:87:a3:
         b5:b0:2b:2e:e0:01:05:24:71:a2:01:99:0d:5d:9c:5d:dc:6d:
         1a:0a:09:22:9c:dd:11:19:19:5a:75:f7:67:ed:93:a8:2f:ee:
         4b:7f:7d:c1:d7:17:96:90:56:35:66:2f:02:f6:ae:3a:ea:a4:
         93:5d:9d:a3:be:42:64:c4:f3:c9:5c:76:5c:82:5b:6e:0c:8f:
         11:12:46:09:59:c4:a9:91:ef:72:76:f3:09:e6:78:20:34:34:
         57:50:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----