Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa
File:                     S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa (raw, json)
Hash identifier:          7hOIhjnhIEvySAN+/0xBzglkd4/SCc4f1Pp+49aupSY=
Subject key identifier:   4B:E5:CC:D1:28:4C:63:B1:9D:5A:FF:AA:1A:00:7B:41:BB:6D:D5:EE
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07F7
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa
Signing time:             Tue 29 Sep 2020 09:57:36 +0000
ROA not before:           Tue 29 Sep 2020 09:57:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.62.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4BE5CCD1284C63B19D5AFFAA1A007B41BB6DD5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:62:9c:06:8c:f3:41:ee:4d:d1:77:b4:94:
                    12:8b:ec:83:32:97:c3:ec:34:7b:46:8f:4b:de:28:
                    bf:95:21:a7:49:e9:f6:77:c1:db:14:73:1f:f4:17:
                    e1:b5:32:4d:b6:85:1c:4b:c0:2c:64:77:68:51:05:
                    aa:fe:11:f8:78:44:35:a8:74:15:54:e2:f3:b9:7a:
                    02:79:51:d1:26:95:bf:2f:6b:81:e3:52:58:2b:1d:
                    36:7e:15:2b:75:e0:9d:ee:ff:5e:27:3a:22:31:d7:
                    9f:fa:70:66:dd:35:8e:cf:33:d7:12:b3:67:a1:b4:
                    b1:ec:c3:0c:51:23:9b:12:90:8d:45:57:32:f9:1a:
                    9a:84:7e:08:e9:a8:b3:e1:c5:de:05:bc:83:67:5b:
                    72:6a:e5:ad:52:2e:df:5e:1d:c0:ee:06:24:61:68:
                    19:6d:a1:4f:1b:b0:e8:3d:ca:98:18:54:01:03:73:
                    85:09:93:25:3f:50:e2:e5:3a:04:0a:b6:a7:af:3d:
                    93:50:54:49:b8:d2:f2:05:25:88:4a:b0:06:0e:14:
                    b0:eb:97:35:9c:79:18:e1:b0:ba:a2:79:74:2f:a3:
                    0d:95:3c:6a:12:d0:10:b9:5d:04:67:91:7d:f0:de:
                    3c:0f:fb:cb:5c:d3:23:df:b2:93:fe:4b:52:be:ce:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E5:CC:D1:28:4C:63:B1:9D:5A:FF:AA:1A:00:7B:41:BB:6D:D5:EE
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S-XM0ShMY7GdWv-qGgB7Qbtt1e4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:76:ef:f4:9f:c2:7b:c2:62:9b:9b:a0:9a:a2:16:8c:2b:
         06:fb:71:c6:1c:5b:24:41:05:c8:ad:a3:9e:96:7a:3e:f8:20:
         8d:5d:d0:9a:cc:fa:d2:fe:2d:9e:ce:13:a0:a5:92:6e:ea:1b:
         40:64:0c:16:72:bf:41:74:08:e9:d1:de:49:4c:dd:f7:02:7a:
         73:33:1c:2e:b2:34:6b:25:81:f8:6b:8e:85:fd:d3:0d:de:e9:
         8f:26:6d:95:a6:47:a3:14:01:a2:f6:a8:33:38:3b:f5:84:6e:
         8a:28:2e:93:1a:51:59:fd:e3:58:fd:ed:2a:f5:51:ae:cb:e6:
         21:f3:05:60:8f:b2:aa:fd:d9:91:aa:40:97:ac:97:6e:41:e3:
         56:66:48:80:89:25:e7:81:2e:60:b0:73:36:e7:92:11:d2:d0:
         88:7d:80:fe:ec:94:c3:ea:73:75:11:0d:af:38:a3:b8:1a:20:
         26:3a:67:c1:ea:99:9e:c8:95:ef:62:8f:91:ca:e7:fe:7b:2a:
         d8:37:19:e0:98:e0:ff:53:ef:35:77:b5:a5:93:58:6c:27:14:
         4b:2b:ff:ec:42:d5:60:2b:57:8c:a1:64:78:a0:79:64:9c:87:
         d9:83:06:30:f8:d9:95:af:2c:5f:cf:b2:1e:0c:1c:71:23:99:
         8d:ca:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----