Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nwf1yVPmRMqvbxBQDJ6QbqQmRzI.roa
File:                     nwf1yVPmRMqvbxBQDJ6QbqQmRzI.roa (raw, json)
Hash identifier:          Lt89czrkHrjbj5v6p0a8hCwnXjccEzp+o1k7vkqCiso=
Subject key identifier:   9F:07:F5:C9:53:E6:44:CA:AF:6F:10:50:0C:9E:90:6E:A4:26:47:32
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0959
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nwf1yVPmRMqvbxBQDJ6QbqQmRzI.roa
Signing time:             Fri 11 Dec 2020 05:57:09 +0000
ROA not before:           Fri 11 Dec 2020 05:57:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        61.30.239.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393 (0x959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Dec 11 05:57:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9F07F5C953E644CAAF6F10500C9E906EA4264732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:ad:fd:1a:a0:16:61:36:5f:b0:88:4a:7b:
                    03:4c:f2:23:a1:1d:80:3c:f2:90:29:b1:76:4b:5b:
                    2b:d5:ec:48:b8:88:77:ba:bc:f1:57:cf:c8:66:9f:
                    e6:07:ac:36:8d:22:72:87:35:2a:aa:ed:cb:d2:64:
                    a1:0b:a5:28:9b:af:2b:1e:9a:ba:7c:e9:a3:1d:01:
                    ac:28:51:7b:66:80:e5:ab:63:b3:d6:ec:e4:a2:6f:
                    18:09:a9:45:fa:b5:61:a9:9b:09:8e:c1:ab:b7:a8:
                    9b:48:71:e8:94:cf:a7:de:93:21:36:ee:c9:c1:82:
                    04:99:2e:55:eb:ee:bc:f9:3c:69:ef:9b:30:7e:31:
                    b2:bb:39:2b:f9:eb:79:1f:aa:38:af:97:78:38:03:
                    9b:05:97:b8:70:06:96:a2:72:ca:9d:91:bc:e0:74:
                    df:28:24:81:11:46:39:a8:16:03:49:9e:ae:db:e2:
                    01:5b:91:ec:7d:8c:8a:39:50:b6:4b:5c:29:f1:c9:
                    94:5c:74:86:89:20:47:c0:bb:6a:65:9b:47:b8:f9:
                    46:79:a1:cc:5a:a7:b1:05:3a:66:98:44:f2:72:12:
                    68:b7:89:08:6a:ec:70:e5:d0:55:c0:24:67:a0:94:
                    80:f9:21:5e:b4:c5:83:22:2b:4e:36:7a:3d:9d:e5:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:07:F5:C9:53:E6:44:CA:AF:6F:10:50:0C:9E:90:6E:A4:26:47:32
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nwf1yVPmRMqvbxBQDJ6QbqQmRzI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.30.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:22:2f:d4:b3:e2:fa:ef:81:8d:55:64:21:25:bd:7b:2b:7b:
         5f:dc:16:ad:4c:90:c7:f0:b0:d3:de:67:17:dc:1a:44:73:17:
         87:c9:fb:96:e8:5b:28:5f:e9:78:13:90:86:1b:b0:8c:f3:1b:
         2e:7d:74:a5:16:54:fb:56:a2:4e:25:b7:c3:06:55:94:41:2a:
         87:7a:85:d8:c7:d2:00:99:c0:5d:d0:ee:6a:87:63:e9:45:a4:
         92:b5:a2:55:0c:fc:75:07:89:b1:6a:db:73:dc:19:f4:41:36:
         54:7c:75:e1:cf:05:27:71:1a:9a:9c:a4:21:ad:24:1f:2a:9c:
         af:7c:38:86:ee:04:de:d2:e9:1e:81:e6:b7:ce:42:9c:3d:b1:
         81:23:ae:93:26:67:a3:f3:c2:c9:7a:3a:67:1c:e4:98:92:ae:
         4f:66:7b:fa:01:dd:ad:ee:b4:80:b4:52:aa:ed:6a:08:22:99:
         92:db:eb:4c:28:eb:80:0d:b9:3c:40:bf:49:e7:a1:2e:db:84:
         a9:09:78:af:24:b9:27:e9:de:5a:49:57:79:30:17:78:53:83:
         27:22:ec:4d:cb:78:a5:ea:93:6b:35:a0:7d:12:c3:5d:ed:ca:
         e1:c5:e2:8c:ce:40:1d:16:17:a6:a1:bd:f3:f6:5f:4b:c8:be:
         0a:b8:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----