Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/teoXuqVTF20ILKtWvPpwSZwWlRU.roa
File:                     teoXuqVTF20ILKtWvPpwSZwWlRU.roa (raw, json)
Hash identifier:          8q8iDqZW9ZKef/BKWPLg1kJKvdR3MUyTD6j1Ra7ESYw=
Subject key identifier:   B5:EA:17:BA:A5:53:17:6D:08:2C:AB:56:BC:FA:70:49:9C:16:95:15
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C3E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/teoXuqVTF20ILKtWvPpwSZwWlRU.roa
Signing time:             Wed 29 Sep 2021 02:49:35 +0000
ROA not before:           Wed 29 Sep 2021 02:49:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        210.17.50.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3134 (0xc3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B5EA17BAA553176D082CAB56BCFA70499C169515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:c3:cc:f8:af:56:0c:7b:08:0b:a1:3b:30:
                    41:1c:bb:7a:38:14:0c:20:04:98:8c:82:34:07:07:
                    42:94:43:8e:df:98:5b:be:d1:17:3c:29:41:e6:86:
                    99:5a:b4:30:47:c1:3e:86:f6:7b:4e:8f:89:49:fe:
                    f8:61:67:88:e9:3f:a0:ec:81:da:9d:00:a5:54:f0:
                    d5:34:9c:ec:0b:d2:e6:b0:6b:df:62:4a:24:83:7a:
                    99:60:af:c2:d0:4e:4c:18:fb:2c:81:cf:96:d8:a1:
                    9f:d5:a8:2a:40:db:66:8f:30:86:d8:96:38:df:61:
                    b4:66:3d:eb:b2:23:d2:ff:2d:50:2d:ee:ed:66:aa:
                    b3:63:cc:95:6e:cb:16:0f:5d:6c:3a:f9:fb:0a:22:
                    0c:d4:a8:a6:2f:03:ee:91:e4:15:3b:ac:f6:d6:79:
                    ae:83:5e:93:11:2b:72:2e:36:19:ba:4d:97:11:40:
                    27:f5:57:07:21:99:20:d2:d9:11:43:90:79:cf:94:
                    e8:f3:59:98:09:2a:e9:0d:9c:be:d8:01:bd:f8:f2:
                    0a:c9:da:bc:7c:6a:1a:ba:8f:5b:20:5f:99:50:9c:
                    4e:9f:1a:c7:65:68:df:8d:3d:8d:40:8c:91:af:8a:
                    b9:de:d8:6e:73:7e:b4:5e:06:aa:d2:ed:74:1c:0b:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:17:BA:A5:53:17:6D:08:2C:AB:56:BC:FA:70:49:9C:16:95:15
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/teoXuqVTF20ILKtWvPpwSZwWlRU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:69:da:e2:37:12:fa:74:cb:5a:1e:60:e3:59:11:84:0a:62:
         f8:63:a4:c9:7f:07:21:c5:49:45:c4:f2:5d:7b:da:1c:f4:5d:
         d8:9a:e5:e6:f0:b9:32:18:e3:a5:4c:29:17:7f:dc:2b:1a:f3:
         e9:fa:45:1c:08:ff:e4:54:c1:7b:d1:e8:fd:2d:0a:ca:a4:c3:
         51:b2:bc:be:0b:a8:6e:dd:54:ea:6c:97:b0:aa:2d:dd:81:ab:
         9f:f5:3e:5b:e1:0b:37:04:37:2a:ec:92:fc:ad:12:f3:07:67:
         72:58:94:30:b2:57:ff:28:79:d5:ee:db:95:7b:7a:9f:0b:6a:
         62:71:06:25:e6:bb:b2:ab:39:8c:c4:b1:de:15:39:28:97:07:
         59:d5:1e:df:6e:e4:b5:1a:cc:8a:5b:39:4d:46:ce:43:9c:d4:
         84:38:23:3c:9e:67:48:15:e6:be:59:e9:4f:d1:c2:bc:8c:ed:
         71:2e:39:f7:ef:d3:53:e3:08:48:c9:4b:87:ce:71:23:ff:0e:
         44:25:c7:98:9a:c0:b4:4f:f8:41:a1:fd:34:45:6a:dc:ea:24:
         8b:b4:6d:ee:0a:05:57:b1:0f:0e:71:bf:ba:27:2f:ca:9e:0f:
         3a:49:6d:31:bd:d0:df:12:33:f1:c6:9c:0e:f4:1f:49:55:53:
         c9:1b:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----