Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ecu-LGpoilB8dmERc6hjm-7qI0U.roa
File:                     ecu-LGpoilB8dmERc6hjm-7qI0U.roa (raw, json)
Hash identifier:          +mrPGsnR8E3Mh4veIJJ/bORK/R3sbvAAMyvPGGNXgOw=
Subject key identifier:   79:CB:BE:2C:6A:68:8A:50:7C:76:61:11:73:A8:63:9B:EE:EA:23:45
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C44
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ecu-LGpoilB8dmERc6hjm-7qI0U.roa
Signing time:             Wed 29 Sep 2021 02:49:37 +0000
ROA not before:           Wed 29 Sep 2021 02:49:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        43.240.24.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3140 (0xc44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=79CBBE2C6A688A507C76611173A8639BEEEA2345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:35:4b:9b:fc:da:70:61:d1:92:32:c2:14:
                    9f:90:8a:f3:39:e9:67:b2:e6:e5:80:bb:d4:dd:aa:
                    b0:31:19:2d:80:dd:6b:9c:de:5a:6c:42:89:0e:bf:
                    05:74:fd:d0:9d:6a:37:63:3b:01:6c:56:d5:e9:bd:
                    27:ad:2a:ce:e4:81:ce:0e:99:21:12:25:0d:53:5b:
                    1e:26:b7:c1:80:8f:f8:46:c6:6c:d7:5a:f0:fe:ab:
                    f3:ae:3e:db:82:99:ae:06:82:1d:96:79:a6:b5:c3:
                    ed:51:b1:73:80:ff:95:f8:33:21:c8:9b:7d:18:81:
                    3e:20:c9:6c:92:14:99:85:87:29:91:d5:5a:a2:b3:
                    41:10:81:48:48:67:4e:cf:21:de:a1:e1:e4:ab:c9:
                    8e:f8:e1:31:91:73:7b:fe:d8:1e:f1:00:dc:36:5c:
                    db:ce:45:98:7d:d1:cb:48:8d:e4:76:8d:5a:c8:1b:
                    a1:bd:ed:4e:a9:78:e5:2e:c6:36:69:61:ae:c6:ee:
                    c5:65:25:1d:9b:1e:32:33:e2:54:ba:4f:d3:1b:64:
                    72:1f:75:ce:f6:ef:c4:44:3c:7f:ff:e9:c7:05:3d:
                    48:01:84:de:6d:1c:c9:cc:46:42:81:d1:fe:14:2c:
                    9d:f7:da:9b:a2:79:39:22:a1:f2:ce:1b:66:e9:8b:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:BE:2C:6A:68:8A:50:7C:76:61:11:73:A8:63:9B:EE:EA:23:45
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ecu-LGpoilB8dmERc6hjm-7qI0U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:66:e9:0a:4b:b2:fd:53:33:d6:c9:bf:ca:34:c1:f1:7c:
         bb:8f:a8:34:89:51:fb:22:50:07:9b:3d:57:17:99:f0:14:1b:
         fe:4f:0f:76:b4:8d:2e:ce:ee:47:bb:0e:a0:4d:a6:3c:0e:1e:
         89:9a:a6:53:e8:44:0b:d0:ed:96:83:77:79:47:be:26:65:0a:
         75:f5:fc:c0:67:35:57:06:34:27:16:2d:c6:36:ff:0b:68:93:
         8b:cc:f7:1e:78:61:a5:f4:ef:ef:92:78:4e:02:90:bf:de:91:
         27:21:fd:e0:fd:6c:f0:f6:c1:e1:1a:af:b7:02:5b:47:07:26:
         54:7b:95:58:3a:2c:6f:3e:3c:77:64:07:1c:31:b0:3a:43:0c:
         85:aa:da:c3:5d:8d:f9:0a:f9:a7:6c:71:4a:f3:7e:3a:75:58:
         b5:e1:25:0d:ec:26:99:b6:49:7f:f4:50:ce:b0:9d:f4:d6:01:
         ca:d4:be:00:5e:51:78:56:09:f7:a4:57:9d:48:f0:e5:0f:0a:
         e5:a1:46:0b:f9:84:97:fb:58:b8:84:db:35:5e:3c:4d:bc:56:
         d8:ff:15:45:de:72:88:24:a7:49:d6:d0:7f:1e:32:bb:08:a2:
         14:e7:02:a8:0d:96:e1:e1:60:46:7c:40:b4:7d:c1:ab:2d:b0:
         56:31:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----