Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Veggfu-DpzuFSxqUlx0Zya8XGpk.roa
File:                     Veggfu-DpzuFSxqUlx0Zya8XGpk.roa (raw, json)
Hash identifier:          5eVTc7oi6MSEhlkrukcNfjAQgm4lHfaK2OtQa2LB144=
Subject key identifier:   55:E8:20:7E:EF:83:A7:3B:85:4B:1A:94:97:1D:19:C9:AF:17:1A:99
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0CC1
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Veggfu-DpzuFSxqUlx0Zya8XGpk.roa
Signing time:             Wed 29 Sep 2021 02:50:13 +0000
ROA not before:           Wed 29 Sep 2021 02:50:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        61.30.239.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3265 (0xcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=55E8207EEF83A73B854B1A94971D19C9AF171A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:72:b9:96:ad:d7:38:43:2e:27:f2:e1:9c:
                    03:18:9d:5b:b7:d1:80:61:c9:76:db:73:48:f1:16:
                    37:f5:50:a7:16:56:1e:2f:26:f7:f3:d4:0a:5b:3a:
                    f8:65:e9:17:0d:b4:01:d5:6c:58:c3:8a:54:dd:69:
                    20:52:29:8e:e7:df:ae:51:15:ca:a3:a6:93:63:1d:
                    41:9f:d9:96:56:88:3d:d2:15:96:1b:ba:84:4b:a3:
                    d9:b7:d2:1d:f5:60:f1:4a:7e:87:e0:83:26:9f:54:
                    98:3c:13:13:80:1e:7b:83:a2:de:aa:e9:15:92:a5:
                    84:2b:a9:f9:96:b8:55:9d:13:98:48:76:d3:d3:c9:
                    a6:15:38:ba:d8:62:d6:3d:6c:12:69:a9:a6:bf:93:
                    4d:98:64:93:fc:ad:96:d2:71:30:21:da:c2:f6:6f:
                    01:8a:93:c6:c7:d7:ec:8e:2c:a6:fb:99:cb:ba:fa:
                    25:3e:90:f4:e0:d5:19:26:cc:85:21:12:b4:bb:ff:
                    9f:73:fc:50:f6:93:97:76:fa:e0:9e:8a:aa:98:67:
                    db:35:d8:27:8a:de:8a:92:6f:2f:82:e0:21:15:a3:
                    e2:5b:c8:8e:e3:7e:42:d1:db:42:d6:72:66:88:5f:
                    61:13:28:8c:6a:48:62:73:7d:55:7d:a3:0c:9f:80:
                    48:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E8:20:7E:EF:83:A7:3B:85:4B:1A:94:97:1D:19:C9:AF:17:1A:99
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Veggfu-DpzuFSxqUlx0Zya8XGpk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.30.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d7:92:6a:24:72:d0:15:47:55:ec:26:09:67:8e:af:90:28:
         2d:72:31:38:21:a3:7a:7d:e9:5b:03:05:3e:c6:7e:43:e1:d8:
         06:80:4e:98:32:01:5a:15:b1:53:48:2b:c1:9b:10:ee:40:8b:
         ac:05:ee:4c:6a:9e:b4:03:17:2f:08:51:45:41:26:91:76:ab:
         34:38:c1:38:ff:03:d8:a3:65:15:e9:7f:a7:80:2e:a0:f1:06:
         da:bf:21:54:4e:51:79:ab:76:ab:98:bc:3a:a4:cd:12:c3:4e:
         aa:d9:a9:e5:16:f8:fc:5c:db:8f:5b:e6:d4:34:95:12:1a:b6:
         c5:3e:b2:12:5c:cc:ed:85:11:17:99:06:b8:4f:86:0d:d9:99:
         08:79:ea:66:38:ed:8a:f0:d6:69:7d:3e:97:49:09:3d:56:28:
         d9:9c:ac:d0:68:00:3a:f9:8c:9e:76:70:c7:5b:ee:72:d6:15:
         04:14:79:99:77:8c:76:5e:76:af:14:7c:e9:e2:52:aa:f7:c1:
         9f:c9:d6:bf:5e:58:87:37:8c:9e:3a:15:34:ba:06:b5:62:75:
         40:1f:ed:46:98:fe:74:63:29:ca:23:0c:6c:44:0c:f1:09:db:
         2a:f9:cc:22:f2:42:f7:d8:4c:2e:ee:05:48:c7:86:c0:19:50:
         6b:25:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----