Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nqCxOSvcEV9M3rRP3nrHQDuVmus.roa
File:                     nqCxOSvcEV9M3rRP3nrHQDuVmus.roa (raw, json)
Hash identifier:          DGjtxWT5AtDxm3fNLT0/3hbYCoE03Nsd6qK1zVKIm3U=
Subject key identifier:   9E:A0:B1:39:2B:DC:11:5F:4C:DE:B4:4F:DE:7A:C7:40:3B:95:9A:EB
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       09A4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nqCxOSvcEV9M3rRP3nrHQDuVmus.roa
Signing time:             Wed 16 Dec 2020 02:51:10 +0000
ROA not before:           Wed 16 Dec 2020 02:51:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.17.80.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2468 (0x9a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Dec 16 02:51:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9EA0B1392BDC115F4CDEB44FDE7AC7403B959AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:e9:02:e2:c9:74:ac:fb:12:7e:fb:23:ed:
                    f9:da:27:d1:b2:73:9f:0a:d9:cd:8a:95:3e:86:2b:
                    be:37:a1:64:1e:a5:4a:38:9c:58:90:18:f7:f0:57:
                    ac:bd:b8:92:2b:d7:c7:5b:dd:84:1a:b4:40:16:3c:
                    4c:ca:d5:77:dd:cf:6a:0b:92:6c:37:71:ca:1e:dc:
                    fa:bd:bb:e7:7b:30:26:68:86:53:6a:ef:96:ab:42:
                    37:61:b8:f4:6b:2b:35:e0:c7:4c:48:6f:8e:91:1c:
                    ea:a5:c5:77:cb:c5:0e:a0:25:b2:de:4c:45:00:6d:
                    12:0c:43:a0:d9:66:18:91:dd:17:f9:2d:f2:56:ba:
                    31:35:14:95:7e:60:7d:05:77:5a:0a:b6:21:8e:08:
                    9b:19:42:0e:50:21:c1:9f:2e:5e:90:d1:88:e8:6d:
                    88:df:3f:ee:13:1b:9e:4b:42:49:87:06:5c:75:6d:
                    7f:fb:64:b8:bf:10:e2:9b:f7:7e:97:c4:92:de:0f:
                    d4:15:a5:46:6e:c7:34:ee:c8:b1:46:39:2d:0e:b7:
                    94:ad:bd:6a:b9:b0:46:ec:50:46:37:89:d5:73:1b:
                    e7:37:9a:72:79:4c:7b:d3:6e:ff:1d:53:4a:27:57:
                    da:d3:de:64:a7:3a:20:03:60:25:3e:c5:98:fa:27:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A0:B1:39:2B:DC:11:5F:4C:DE:B4:4F:DE:7A:C7:40:3B:95:9A:EB
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nqCxOSvcEV9M3rRP3nrHQDuVmus.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:bd:48:54:01:9c:ee:58:b6:18:12:06:49:3b:b1:11:0e:
         c6:56:19:05:f5:22:b4:da:94:a7:c7:40:28:f0:c8:59:0c:64:
         3c:62:20:42:5d:c8:79:50:b7:43:44:7c:27:60:c0:45:2e:d9:
         aa:07:41:8f:a7:ff:f9:48:98:5c:ea:e6:cc:4f:55:1e:5a:03:
         99:a2:73:3c:76:bc:b3:f4:6e:36:02:fb:09:9e:78:61:8b:07:
         f1:3a:79:98:98:ba:61:10:4d:d8:84:3e:6b:75:14:2b:3b:8a:
         97:08:4a:fe:ca:72:6a:f2:fa:89:d3:b5:af:a1:78:bc:38:2b:
         58:2a:48:1d:5c:59:98:e6:39:b2:fc:e0:64:05:82:bb:46:b6:
         45:63:83:53:fc:db:4e:ab:ed:8c:43:50:71:8d:ab:99:c9:11:
         67:1e:07:e7:53:de:92:fd:29:5d:dd:a7:35:da:95:24:ba:41:
         0f:97:2c:43:81:f6:38:6d:5a:5c:da:ee:3a:44:f6:1e:6a:23:
         95:5a:06:3e:af:46:39:94:2f:d7:e5:a3:22:3e:c7:3f:65:28:
         23:72:44:c5:90:a7:39:57:e7:60:79:d7:9d:97:e5:f2:7d:27:
         ad:18:da:86:f4:f9:78:43:83:6a:2c:76:7f:37:dc:6d:8f:4b:
         06:4d:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----