Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UIlpKQX5pLmi4mBBKJrQZT8OtoI.roa
File:                     UIlpKQX5pLmi4mBBKJrQZT8OtoI.roa (raw, json)
Hash identifier:          O/lav2sXhTfNZyZWSevrp81hOinZpIIeiKGskjIPY24=
Subject key identifier:   50:89:69:29:05:F9:A4:B9:A2:E2:60:41:28:9A:D0:65:3F:0E:B6:82
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C86
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UIlpKQX5pLmi4mBBKJrQZT8OtoI.roa
Signing time:             Wed 29 Sep 2021 02:49:56 +0000
ROA not before:           Wed 29 Sep 2021 02:49:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        203.77.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3206 (0xc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5089692905F9A4B9A2E26041289AD0653F0EB682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:0c:cc:7a:73:af:96:9c:82:92:95:b6:3a:
                    cc:93:34:75:c3:9f:be:ca:df:ad:09:91:fe:b3:7f:
                    60:3a:24:39:8c:8b:0c:3c:29:c3:5e:e4:4b:94:f4:
                    6a:16:91:94:04:5f:b9:19:ea:71:46:f6:b5:8d:c7:
                    14:9e:5d:ec:72:b0:b4:08:2b:fb:f4:62:63:fc:7f:
                    cc:bf:a6:4e:e1:e1:ee:ca:30:ab:31:b8:f5:b5:5c:
                    6b:d3:10:93:95:df:05:28:16:5a:45:5f:2d:85:0c:
                    2b:8c:04:64:f5:08:02:57:91:f3:3d:92:5c:49:61:
                    bb:2d:9d:6c:24:0f:27:8c:4f:80:aa:83:19:f4:f3:
                    e5:d5:69:05:32:5e:26:1e:83:c7:cf:74:b5:c1:d5:
                    31:05:23:c8:6d:ea:a0:42:7d:e3:bd:22:10:8f:66:
                    67:bc:0b:d2:7a:0c:4f:08:ab:7c:7a:2e:aa:91:ae:
                    07:49:0e:7f:e1:69:0f:69:e7:fd:e5:84:74:19:02:
                    4e:58:11:b9:54:c5:19:63:38:db:46:c8:c9:1e:49:
                    13:4a:95:09:99:1d:7d:fe:8c:fb:de:cb:65:6f:a4:
                    ea:d4:71:8a:8d:de:84:5e:cf:b8:c8:96:b4:13:62:
                    a1:67:de:59:ba:fa:2b:dc:ab:4c:5d:8b:e4:b8:87:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:89:69:29:05:F9:A4:B9:A2:E2:60:41:28:9A:D0:65:3F:0E:B6:82
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UIlpKQX5pLmi4mBBKJrQZT8OtoI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:75:3c:4d:e5:37:e4:1e:02:7d:d0:4f:3b:4e:86:16:0f:
         db:ec:ad:4c:b7:d8:14:3a:3c:2f:f9:81:97:f3:5b:dc:72:71:
         77:d0:c7:92:ee:3d:b1:52:2f:09:f3:c5:0c:8d:ed:a9:51:18:
         50:6e:6d:c4:58:af:ff:56:6d:11:e8:1a:49:37:d7:96:76:cc:
         43:71:72:00:97:34:7e:20:39:b7:4f:23:c3:3a:3c:28:3a:c9:
         9e:26:e9:a5:c3:62:b1:8b:8e:3c:d6:8b:9b:1d:00:e5:28:6b:
         19:61:24:e5:17:5c:d9:be:2d:5b:ad:c0:0f:73:eb:91:4c:0c:
         7b:a7:6b:ca:9e:a7:80:b5:74:07:7f:77:ef:4a:e9:b7:aa:d9:
         bf:3d:52:00:67:02:d9:ae:6d:fe:c4:2e:fd:0b:20:5c:a8:bd:
         9a:53:78:3b:4b:12:f9:47:e6:a8:c3:bf:29:a9:07:99:9d:93:
         5b:a7:a1:83:6d:b0:1e:1f:57:6a:53:e0:87:3c:00:21:7f:1b:
         e9:2a:94:77:b2:66:f7:13:72:42:de:b9:04:3b:c6:d2:92:94:
         74:23:3c:d1:e1:e6:e3:3c:a6:0b:3f:2d:fd:cb:ea:03:09:f5:
         27:92:f4:40:20:75:7e:d5:31:2f:f7:31:b6:67:31:1b:ec:00:
         d2:99:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----