Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YP0yUqUS4ZOPGGZDUXG1EjADk8k.roa
File:                     YP0yUqUS4ZOPGGZDUXG1EjADk8k.roa (raw, json)
Hash identifier:          GddJnY/f6UmapvMnYO98F+KTjfkVJhBQJ3g1pGSaIsU=
Subject key identifier:   60:FD:32:52:A5:12:E1:93:8F:18:66:43:51:71:B5:12:30:03:93:C9
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C82
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YP0yUqUS4ZOPGGZDUXG1EjADk8k.roa
Signing time:             Wed 29 Sep 2021 02:49:55 +0000
ROA not before:           Wed 29 Sep 2021 02:49:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        203.77.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=60FD3252A512E1938F1866435171B512300393C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:f1:18:c6:0a:9c:bb:9d:3a:23:20:51:16:
                    8f:3b:15:13:7a:26:e1:73:63:a9:41:44:28:2b:86:
                    79:d1:77:ec:36:dc:64:f4:b0:c8:df:49:bb:ea:56:
                    21:76:82:46:d7:5e:66:78:fa:49:10:70:30:15:fa:
                    50:98:f6:cb:7c:81:7b:dd:c0:15:d3:e4:bb:10:99:
                    9d:a1:c9:6c:24:70:35:cb:3a:48:33:bd:41:f3:27:
                    b5:f4:94:df:b2:ce:16:ed:15:64:fb:a5:c5:ef:d8:
                    b9:e5:ca:f8:c1:3f:30:93:0a:bb:ba:49:76:be:b8:
                    ba:bc:c0:f3:73:e1:73:90:2c:90:f4:76:63:7f:39:
                    67:94:4d:5e:57:17:ea:37:4a:e6:3c:14:dc:c0:bc:
                    7e:a7:d0:27:ac:96:17:af:9e:40:62:01:ed:4e:b8:
                    f8:42:d7:3c:2a:b9:02:73:37:9f:a1:7f:a2:70:9b:
                    27:0b:cd:7e:0d:35:6d:73:7b:60:91:48:26:29:36:
                    2b:82:68:0f:13:05:75:eb:06:cd:5d:0c:ce:bd:28:
                    1e:1f:19:76:fc:3f:2d:40:7d:a0:77:ff:3a:15:dd:
                    a4:6b:f9:3c:1f:2f:4c:c7:0d:5d:8a:75:c0:0d:f0:
                    e5:69:52:a5:c5:63:e4:68:d4:96:10:23:e7:3c:91:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FD:32:52:A5:12:E1:93:8F:18:66:43:51:71:B5:12:30:03:93:C9
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YP0yUqUS4ZOPGGZDUXG1EjADk8k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:98:1f:24:d0:0f:63:de:bf:63:89:ea:b1:6f:ce:8f:d0:8a:
         ba:25:c8:16:d1:e0:24:cb:42:e3:1a:c8:16:61:ac:aa:45:e6:
         3f:0f:43:7c:b3:57:59:bf:03:04:11:e0:46:7a:de:e3:cb:a5:
         ee:44:62:26:a4:00:6c:72:77:2a:f5:70:ff:b2:ab:4f:6b:6d:
         86:42:f3:8b:f7:e7:9b:7c:a1:b4:5f:14:37:5a:54:c3:bd:e7:
         d5:3d:f2:b7:31:1e:e5:6d:7f:bf:0b:bd:94:58:8a:bd:2e:f3:
         6a:b3:11:23:ca:3a:5c:36:74:49:53:ad:61:66:b7:22:37:73:
         a3:c1:52:89:71:ca:a8:2e:5e:68:85:7e:be:c8:6e:3d:51:7d:
         f5:18:7f:e0:8d:b0:38:0f:fd:16:95:41:c7:30:aa:57:cf:8d:
         39:e6:c5:6c:fb:80:31:1f:a2:b4:60:cf:fb:06:57:59:c3:23:
         34:97:73:86:f6:05:da:45:d9:da:4b:3a:2b:1c:24:c4:9f:0f:
         9d:e1:79:07:07:a6:65:58:88:59:dd:7a:f5:db:cc:86:e7:41:
         7e:e8:1d:59:f1:e4:47:fc:d8:01:2f:e2:c0:b6:ff:79:8e:54:
         20:fe:65:7b:30:8b:12:df:3d:e6:a6:69:4a:7b:24:1c:cf:57:
         b3:fa:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----