Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fWtWRWas1iJCa5vdhX__tyODLAg.roa
File:                     fWtWRWas1iJCa5vdhX__tyODLAg.roa (raw, json)
Hash identifier:          LqGW3rcyGVFVfPjicl7yWclDLoE8aFXVhiOdhz2R2z8=
Subject key identifier:   7D:6B:56:45:66:AC:D6:22:42:6B:9B:DD:85:7F:FF:B7:23:83:2C:08
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C92
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fWtWRWas1iJCa5vdhX__tyODLAg.roa
Signing time:             Wed 29 Sep 2021 02:49:59 +0000
ROA not before:           Wed 29 Sep 2021 02:49:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        210.17.112.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7D6B564566ACD622426B9BDD857FFFB723832C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:47:f7:db:f6:6a:38:e0:4d:d9:38:30:6e:
                    f3:a0:06:b8:21:98:af:05:f1:e3:dc:9d:44:4e:15:
                    e3:29:03:4c:48:20:ce:a4:49:42:88:fd:df:18:76:
                    3a:70:61:79:dd:84:d7:79:fd:d7:90:c4:63:58:5a:
                    92:4c:11:9a:88:c3:1f:68:85:ad:97:0f:0e:a0:95:
                    29:62:d3:1d:94:44:52:bd:1b:10:76:ac:af:ed:e0:
                    61:32:4b:97:35:0e:01:81:0b:f6:a8:2a:06:ec:1b:
                    94:ef:1b:c7:cc:57:0b:51:56:b8:de:66:21:00:6c:
                    d8:5a:4b:af:07:fd:63:2e:07:4f:44:57:94:e0:38:
                    6c:1e:d2:1e:c3:30:73:83:13:6e:b0:c1:7d:a0:57:
                    a3:1f:b5:52:12:cc:b4:a9:93:31:6f:16:87:68:8a:
                    29:53:2d:5f:da:73:5f:fe:3f:bc:3a:e2:f1:e8:37:
                    45:6f:16:69:26:73:dd:ab:ff:c3:b4:a4:48:2a:af:
                    2d:c8:6b:6a:21:f0:19:b6:0a:97:e0:4e:bb:7b:77:
                    4c:cd:15:a1:25:58:13:b1:4b:7f:77:c9:42:db:ea:
                    13:6c:70:f7:fc:1d:f2:ab:98:27:f0:a8:b7:b9:97:
                    a9:27:d1:ed:da:79:0c:a9:18:d8:c2:a6:62:09:6f:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:56:45:66:AC:D6:22:42:6B:9B:DD:85:7F:FF:B7:23:83:2C:08
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fWtWRWas1iJCa5vdhX__tyODLAg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:7e:18:a8:54:fc:0b:59:35:89:29:fc:05:60:ef:f0:ef:
         1b:06:4b:34:21:70:93:c3:8a:75:b7:eb:19:1e:4e:f3:ed:db:
         aa:67:69:0f:b6:d8:01:77:e9:03:ef:c5:ca:cb:26:41:e2:e4:
         be:57:21:67:80:ac:6f:10:5c:18:dd:1b:57:fa:8f:47:da:95:
         66:00:ef:9f:9f:34:f1:a5:9f:94:f9:81:71:92:ec:89:51:16:
         e6:f6:ec:6d:f5:d9:bb:ad:1c:ee:29:80:57:f7:01:88:e4:a0:
         d7:ca:c1:64:dd:7b:60:6d:03:17:de:56:be:ce:14:d9:bb:55:
         ae:68:9e:55:38:fb:51:b5:97:92:b0:3a:d4:e8:55:8a:b5:00:
         cc:3a:97:de:fb:34:f5:bc:47:12:66:a3:8e:e4:f6:dc:e2:76:
         00:ae:da:2f:7f:1b:c6:12:1a:6a:a9:0d:92:74:0b:94:d7:33:
         6b:2a:6e:0a:b8:91:f9:76:af:60:39:04:5a:36:b6:4b:5b:83:
         fc:5e:71:3f:9d:15:c3:50:25:be:41:2f:fa:34:9a:60:7f:ce:
         61:16:4a:b2:cc:54:44:f2:64:8d:71:0c:07:90:57:eb:88:43:
         99:c8:76:cc:6b:a8:70:b5:59:29:74:65:48:63:68:8e:4f:3a:
         47:a7:8e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----