Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vJ3DB0xla3eZnwU54wJLAkBMyLM.roa
File:                     vJ3DB0xla3eZnwU54wJLAkBMyLM.roa (raw, json)
Hash identifier:          wFYdZhxH1l4M5HVER/ADSihTHa2L15iI59DMoP6QfBc=
Subject key identifier:   BC:9D:C3:07:4C:65:6B:77:99:9F:05:39:E3:02:4B:02:40:4C:C8:B3
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C3D
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vJ3DB0xla3eZnwU54wJLAkBMyLM.roa
Signing time:             Wed 29 Sep 2021 02:49:35 +0000
ROA not before:           Wed 29 Sep 2021 02:49:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        210.17.51.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3133 (0xc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BC9DC3074C656B77999F0539E3024B02404CC8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:47:c5:89:63:83:03:35:20:8b:cf:ba:aa:
                    cb:80:4c:6e:a3:3b:dc:2d:6e:b7:c9:fd:ea:b2:89:
                    2b:58:20:d5:6f:a3:5a:46:65:9d:01:7f:aa:d9:89:
                    39:a6:96:61:30:b6:89:72:04:05:67:da:57:b4:82:
                    4a:3a:e7:79:07:9d:55:c5:04:6f:8a:04:f6:5e:2c:
                    42:90:65:9d:2c:52:af:bb:3e:10:f6:b6:6a:e6:54:
                    ed:d5:c6:94:d0:fa:b9:3c:10:86:1c:05:f5:83:6c:
                    f5:be:31:94:41:b0:aa:55:ae:fc:06:8c:ba:69:b5:
                    00:7a:58:e9:c0:b6:49:3c:a8:27:91:c6:43:02:54:
                    98:2b:05:86:a5:b4:42:a7:f5:fc:88:39:20:ce:28:
                    95:f8:32:6a:76:7f:ee:c8:68:80:6b:bd:a3:a9:dd:
                    f6:07:81:32:49:01:e3:ab:7d:20:b8:ff:e5:d6:42:
                    09:48:55:e6:97:6e:8a:ab:9d:5d:5a:34:e3:68:11:
                    34:5d:68:c2:be:22:4a:61:06:d8:63:9f:3a:3d:8b:
                    98:ea:93:a7:d4:d0:cd:20:87:e1:b1:c7:22:30:f5:
                    4c:93:13:ea:a1:a2:aa:44:2a:94:89:83:61:20:17:
                    15:5c:31:02:20:f6:e0:83:b1:29:b1:71:6b:58:5e:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9D:C3:07:4C:65:6B:77:99:9F:05:39:E3:02:4B:02:40:4C:C8:B3
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vJ3DB0xla3eZnwU54wJLAkBMyLM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:85:63:3e:ac:c0:91:19:cc:62:d0:1d:c3:cc:5d:92:4d:
         4a:c2:5a:2a:b4:22:f7:4b:69:d6:ea:c4:20:3b:39:ca:a2:a8:
         fc:5e:ed:5c:16:d0:1c:55:a4:df:e7:5c:be:86:b6:6d:84:a0:
         ec:d6:8b:86:06:0c:97:2d:36:9d:3f:26:71:c5:da:f4:52:4b:
         91:c6:2c:1a:b8:f5:e4:02:61:67:30:43:fc:0e:7d:24:96:fa:
         ae:65:8e:e0:16:0f:86:91:48:a1:b4:75:e3:97:ea:93:99:5f:
         39:00:89:55:db:70:06:5a:0d:e6:3e:3b:b1:99:e0:a1:65:e6:
         49:e8:24:26:12:25:5d:2e:83:68:9e:0e:d1:03:1a:b6:51:53:
         7d:96:32:bf:9a:b7:9d:19:88:40:5b:9d:bf:95:59:b8:ed:5f:
         a9:0d:6f:9f:40:92:03:2d:7b:d5:60:17:52:e7:42:4c:4f:61:
         7a:a0:ee:e8:e6:f2:30:e1:75:3f:e2:4a:a0:81:17:36:70:1f:
         85:50:6b:15:d6:5e:1c:88:16:8e:65:eb:4f:2f:ad:4b:6e:bd:
         f1:ff:8c:1e:cc:7b:9a:9b:c5:bd:44:76:71:6e:09:98:a6:72:
         fb:02:50:8e:43:4d:34:a1:e2:3b:45:4c:b6:bc:3b:df:6c:f8:
         a5:13:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----