Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kx_kBOi8T5wERg8BNgMRqkHMBDQ.roa
File:                     kx_kBOi8T5wERg8BNgMRqkHMBDQ.roa (raw, json)
Hash identifier:          UBF7tS9+bG6A3UKuxMJbmCsADvhHVyIMt4bnv5AtA0w=
Subject key identifier:   93:1F:E4:04:E8:BC:4F:9C:04:46:0F:01:36:03:11:AA:41:CC:04:34
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0825
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kx_kBOi8T5wERg8BNgMRqkHMBDQ.roa
Signing time:             Tue 29 Sep 2020 09:57:48 +0000
ROA not before:           Tue 29 Sep 2020 09:57:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        175.96.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=931FE404E8BC4F9C04460F01360311AA41CC0434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8a:61:7c:d4:e5:f3:72:87:7c:e7:62:19:6e:
                    3e:82:24:32:3c:1f:5a:ec:0f:cb:bb:ce:41:41:5e:
                    b4:1c:87:4f:02:1c:92:f4:a4:50:7c:60:43:23:da:
                    8f:28:dc:f6:92:1e:05:b4:94:79:07:8f:11:3c:64:
                    85:02:d8:73:97:79:8f:18:c5:14:f2:f5:f9:99:85:
                    6e:1c:86:af:b4:70:1f:a1:88:ac:12:61:48:55:64:
                    b2:d4:26:66:56:1e:64:99:3c:7c:01:3d:67:a7:03:
                    08:6e:cc:39:99:c9:f1:91:0b:0f:cd:d9:e4:e8:1e:
                    5b:aa:4b:7a:b0:4d:99:15:3a:2b:ac:e9:57:59:0e:
                    2a:ee:96:29:33:57:06:5a:60:a1:2c:60:a1:2e:c8:
                    bd:1f:8c:93:01:31:53:6c:2d:d5:42:c4:84:71:a6:
                    61:fd:89:73:a4:7e:bd:3f:86:88:05:a3:7b:99:30:
                    24:1f:1b:47:5c:bf:6c:7f:7c:e0:2c:c9:be:80:42:
                    0e:e2:63:d9:0a:c7:be:ba:b6:6b:53:cb:9c:fd:27:
                    0c:bf:74:2d:ef:0e:f8:83:ad:5a:3f:a2:97:d2:60:
                    f4:2a:96:df:a6:d0:3d:8b:97:70:e2:f8:56:32:b9:
                    fa:b7:c8:66:b3:32:60:4b:8a:73:e4:9c:81:02:0b:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1F:E4:04:E8:BC:4F:9C:04:46:0F:01:36:03:11:AA:41:CC:04:34
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kx_kBOi8T5wERg8BNgMRqkHMBDQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:eb:54:54:f8:62:57:e8:90:d3:e9:2d:ce:4a:97:fc:6c:
         ec:b3:5e:e4:b8:a0:6b:0b:30:67:fe:59:27:d8:a6:77:29:29:
         6b:a6:b7:59:79:c2:9c:94:fb:bc:2c:82:4d:81:45:10:58:1e:
         6d:e2:f3:5d:4b:7b:cd:ec:05:ef:e8:ef:07:5c:6f:bc:91:43:
         fa:a1:a9:3a:56:54:51:0d:f1:35:1e:8e:3c:54:f9:e6:ba:2c:
         4b:a4:8a:4a:4e:e2:27:b1:c2:fb:ba:9d:20:bb:9d:14:1d:07:
         ce:e3:6e:c9:f9:01:3c:78:ce:60:d9:d3:16:1a:5c:ed:33:6d:
         47:42:b9:29:40:8d:13:d2:b1:70:03:e7:81:5e:e6:9c:eb:e7:
         3b:f0:83:0b:08:88:e2:2b:ea:80:cc:9b:37:eb:ab:c4:f3:14:
         1a:03:4c:a9:5c:87:08:1b:e2:02:9d:d0:d0:7e:b2:c1:8a:7b:
         06:40:f0:30:d4:08:3e:36:21:8b:d4:16:63:f2:45:2e:fc:b3:
         53:ba:37:b1:47:36:3e:e9:c9:a6:0a:73:61:a2:62:a3:79:c0:
         45:b7:93:7a:ea:ff:9d:35:62:a9:61:27:73:31:58:db:84:80:
         a1:64:ff:73:b0:8d:77:37:ef:e6:b4:e1:07:5a:b0:41:e2:2c:
         44:4b:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----