Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mefzYAiRQI8CJlemW6GY-ue3Llw.roa
File:                     mefzYAiRQI8CJlemW6GY-ue3Llw.roa (raw, json)
Hash identifier:          5ApiAIk8946+9V51IDroancSjF+qgFAHTyPRCvueEc0=
Subject key identifier:   99:E7:F3:60:08:91:40:8F:02:26:57:A6:5B:A1:98:FA:E7:B7:2E:5C
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0815
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mefzYAiRQI8CJlemW6GY-ue3Llw.roa
Signing time:             Tue 29 Sep 2020 09:57:44 +0000
ROA not before:           Tue 29 Sep 2020 09:57:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        61.31.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069 (0x815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=99E7F3600891408F022657A65BA198FAE7B72E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:87:61:02:7b:c2:ed:e6:1e:ce:07:17:2c:
                    b8:b9:d6:b6:80:43:89:e9:80:cc:49:21:c0:3a:e6:
                    4d:e3:bc:2c:30:ee:ab:de:a1:db:1a:b3:a2:97:b3:
                    4d:ed:56:0a:56:9c:f9:2b:8d:37:47:6b:1e:9d:25:
                    76:0d:c3:58:c8:c6:23:da:97:35:a4:3f:79:df:61:
                    7e:2c:03:d2:31:f4:7a:a3:c8:3f:c2:b7:ad:87:bc:
                    9e:07:fb:f2:d8:40:17:2c:e3:32:82:cc:11:04:93:
                    75:de:4a:46:9e:27:57:52:b4:0b:aa:8b:40:de:b9:
                    26:68:b8:b7:dd:33:32:52:8c:bf:b3:b3:1a:f1:56:
                    d1:36:86:84:0f:cd:ba:38:3e:8a:f2:bc:49:b9:90:
                    27:3e:11:62:aa:bf:a0:dc:a8:40:6f:91:3d:20:6d:
                    8c:0d:65:c3:67:17:49:7b:05:aa:6e:27:07:aa:4c:
                    b1:9b:a9:1f:12:05:a1:b0:fd:35:4b:6c:f0:cd:3f:
                    0a:2e:ec:c0:3b:2c:ca:c0:2a:49:36:8a:ba:5e:c1:
                    a3:5b:4b:3a:1d:48:b2:20:15:e3:c3:5d:d8:08:11:
                    35:01:e6:7b:8d:87:69:cd:1d:01:4b:3e:c2:8a:78:
                    19:69:09:4c:78:c1:cf:36:63:84:13:c0:87:34:ad:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E7:F3:60:08:91:40:8F:02:26:57:A6:5B:A1:98:FA:E7:B7:2E:5C
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mefzYAiRQI8CJlemW6GY-ue3Llw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:20:fe:95:d5:ab:b6:4b:4f:76:5a:2c:95:85:47:4a:d8:
         c5:62:e3:5a:71:eb:97:b8:a5:fa:91:0d:de:90:bd:cf:ed:7a:
         03:3b:c1:8c:fc:42:2f:c8:57:0b:7a:c9:40:a2:6a:cc:61:17:
         1c:07:cf:4c:35:56:7d:23:5a:95:59:17:41:3a:01:6b:4f:f5:
         95:ef:60:3e:92:43:52:56:f2:2b:87:bf:e4:1e:61:a7:19:cf:
         66:23:32:49:d4:55:28:f2:a3:c4:5a:fd:51:ef:0e:2e:11:0a:
         d2:5e:f5:4d:54:5c:44:b2:e4:97:18:8c:2a:6a:19:c1:3e:d5:
         47:39:17:37:cb:18:12:6a:4f:46:20:84:cd:6a:e9:59:24:77:
         b5:66:b8:0d:76:d3:f5:c4:6f:e9:d4:01:a2:05:aa:42:9e:4d:
         01:ec:3b:a4:8a:9b:59:71:ed:29:6c:8c:04:e9:d5:66:75:7a:
         71:f4:b4:91:15:c2:66:08:7a:ac:f3:52:c0:47:e5:7d:be:1d:
         26:9c:47:ec:c4:03:de:1c:b4:ca:c1:67:20:14:3d:c5:af:b8:
         8c:51:b0:4f:d6:df:79:b9:1b:aa:58:bf:f7:25:60:ac:3b:b4:
         86:ab:ce:c2:a0:2f:0e:fc:7f:dc:f7:35:94:89:bf:82:29:08:
         71:82:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----