Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mChcdK3RLdyuYwzR-ky1Q1H5R_4.roa
File:                     mChcdK3RLdyuYwzR-ky1Q1H5R_4.roa (raw, json)
Hash identifier:          /Re4J/0C9Id0FfY61RTGbMEvH5ZigDUQNi8pSQ3vJdA=
Subject key identifier:   98:28:5C:74:AD:D1:2D:DC:AE:63:0C:D1:FA:4C:B5:43:51:F9:47:FE
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07E9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mChcdK3RLdyuYwzR-ky1Q1H5R_4.roa
Signing time:             Tue 29 Sep 2020 09:57:32 +0000
ROA not before:           Tue 29 Sep 2020 09:57:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        124.12.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=98285C74ADD12DDCAE630CD1FA4CB54351F947FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:6b:b5:3f:41:9e:54:d5:29:7b:89:bb:24:
                    e6:97:4f:5e:98:68:d4:3b:f3:4d:6e:85:5b:6c:67:
                    53:fb:22:90:66:42:e1:27:ed:63:84:33:32:49:7d:
                    e2:08:73:1b:25:34:60:ff:c4:f5:ef:53:fb:e4:e4:
                    3e:71:cd:66:05:de:d4:ac:8d:b0:4c:a0:b4:67:0e:
                    50:4d:b0:52:ae:0a:43:99:9f:76:9f:ee:77:83:33:
                    0c:07:40:65:0d:56:fa:58:32:92:ee:a3:d3:02:21:
                    6a:06:73:bd:3c:59:39:fb:bf:fe:74:7e:7a:66:9e:
                    94:56:1e:7d:2b:ee:f3:14:7e:7c:25:c3:43:e6:a9:
                    9c:f3:53:72:91:9c:44:f6:cc:2d:56:ac:e1:7a:d1:
                    01:ea:83:bf:30:4d:3e:d1:85:c1:40:52:89:e3:7f:
                    f5:9f:c1:b9:b0:5e:36:6c:75:4e:ad:97:74:17:43:
                    39:c7:a2:ff:2c:ff:9f:77:06:c8:9c:15:5c:28:70:
                    0f:79:12:37:9f:e4:48:27:d1:af:1b:93:e1:0a:e1:
                    74:19:32:c2:ba:28:92:23:bd:c6:55:4e:22:47:d8:
                    b9:f1:df:06:50:14:20:b0:34:64:eb:a3:81:a4:49:
                    81:7d:af:e6:2e:2b:9d:5f:73:c2:31:83:09:1a:d7:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:5C:74:AD:D1:2D:DC:AE:63:0C:D1:FA:4C:B5:43:51:F9:47:FE
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mChcdK3RLdyuYwzR-ky1Q1H5R_4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:e2:d9:f1:11:4b:bb:4a:07:ff:01:b6:bd:af:91:96:e7:
         8c:d1:5d:d0:6f:8c:66:46:a6:3f:75:a4:c7:62:9e:89:7b:e4:
         10:28:7b:b0:ce:70:fd:db:31:ed:f5:4e:44:ad:73:1a:83:eb:
         95:0b:06:fb:82:d8:3f:36:4b:f8:7e:a4:65:34:15:eb:e2:11:
         46:f6:c2:06:0d:dd:64:c0:09:eb:7d:5c:4d:bf:f8:93:e7:33:
         a2:82:fa:0b:97:9d:7f:cc:19:9c:85:ee:ee:2e:da:47:7c:e6:
         4f:64:dd:b4:b0:0c:f1:1b:9d:6a:48:e5:14:6a:0e:4e:11:49:
         f6:b0:6b:d9:8a:75:90:d9:ed:da:66:14:09:8c:dd:6d:60:c8:
         d1:0d:f3:83:49:ff:f2:6a:f7:eb:9f:9a:bd:1f:46:ed:70:60:
         50:51:09:b3:f0:1c:c8:07:52:09:21:c7:5b:65:5c:81:51:f6:
         5b:07:5e:4e:33:49:b2:9d:cf:b7:02:a0:dd:b5:5d:87:66:34:
         6c:39:6e:f1:17:f7:13:43:62:a0:ba:b1:3b:6f:ba:20:71:51:
         65:47:15:64:d6:f1:26:9f:58:b3:86:9d:2d:0b:1b:f1:03:8d:
         c2:31:92:5f:9a:4b:62:06:2a:85:8e:1e:eb:ae:e5:5e:6a:85:
         83:85:bd:ef
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3MzJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk4Mjg1Qzc0QUREMTJE
RENBRTYzMENEMUZBNENCNTQzNTFGOTQ3RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdKmu1P0GeVNUpe4m7JOaXT16YaNQ7801uhVtsZ1P7IpBmQuEn
7WOEMzJJfeIIcxslNGD/xPXvU/vk5D5xzWYF3tSsjbBMoLRnDlBNsFKuCkOZn3af
7neDMwwHQGUNVvpYMpLuo9MCIWoGc708WTn7v/50fnpmnpRWHn0r7vMUfnwlw0Pm
qZzzU3KRnET2zC1WrOF60QHqg78wTT7RhcFAUonjf/WfwbmwXjZsdU6tl3QXQznH
ov8s/593BsicFVwocA95Ejef5Egn0a8bk+EK4XQZMsK6KJIjvcZVTiJH2Lnx3wZQ
FCCwNGTro4GkSYF9r+YuK51fc8Ixgwka17FXAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUmChcdK3RLdyuYwzR+ky1Q1H5R/4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbUNoY2RLM1JMZHl1WXd6
Ui1reTFRMUg1Ul80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AHwMMA0GCSqGSIb3DQEBCwUAA4IBAQA9MuLZ8RFLu0oH/wG2va+RlueM0V3Qb4xm
RqY/daTHYp6Je+QQKHuwznD92zHt9U5ErXMag+uVCwb7gtg/Nkv4fqRlNBXr4hFG
9sIGDd1kwAnrfVxNv/iT5zOigvoLl51/zBmche7uLtpHfOZPZN20sAzxG51qSOUU
ag5OEUn2sGvZinWQ2e3aZhQJjN1tYMjRDfODSf/yavfrn5q9H0btcGBQUQmz8BzI
B1IJIcdbZVyBUfZbB15OM0mync+3AqDdtV2HZjRsOW7xF/cTQ2KgurE7b7ogcVFl
RxVk1vEmn1izhp0tCxvxA43CMZJfmktiBiqFjh7rruVeaoWDhb3v
-----END CERTIFICATE-----