Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vmTq1oLdcCJiD4j2zYJm5cydMAk.roa
File:                     vmTq1oLdcCJiD4j2zYJm5cydMAk.roa (raw, json)
Hash identifier:          EOC/HRrmTRboc40cwncu4aDVlY9a7/Yvjr0ocKVigUI=
Subject key identifier:   BE:64:EA:D6:82:DD:70:22:62:0F:88:F6:CD:82:66:E5:CC:9D:30:09
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0A92
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vmTq1oLdcCJiD4j2zYJm5cydMAk.roa
Signing time:             Sun 07 Feb 2021 11:36:38 +0000
ROA not before:           Sun 07 Feb 2021 11:36:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.62.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2706 (0xa92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:36:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE64EAD682DD7022620F88F6CD8266E5CC9D3009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7e:78:52:3a:f7:8f:6f:c5:cb:e8:f9:52:f8:
                    36:23:71:14:eb:0b:de:58:4c:8a:ef:0e:4a:a7:05:
                    73:b4:6f:94:a5:43:bc:97:4f:e1:23:7c:52:da:6c:
                    a6:6f:4a:cb:b9:e9:0b:89:84:18:b5:b5:55:05:cd:
                    9c:70:8c:12:8a:42:b9:09:60:4f:b1:d1:22:aa:0a:
                    12:ae:e6:30:20:f9:e6:1a:8c:25:d8:89:71:f3:fb:
                    85:24:fe:21:11:f9:db:16:46:1f:d9:23:78:07:c3:
                    14:20:8a:4a:f3:ed:72:f4:c4:a4:41:54:f2:72:f3:
                    ea:46:c1:84:77:00:6f:2c:0b:18:12:2a:b9:ba:39:
                    36:f6:38:92:12:0d:70:95:16:80:7d:6e:00:b7:33:
                    70:e3:4e:d4:93:7b:4f:bf:91:30:8e:bf:74:52:cd:
                    f4:23:b0:7a:1c:2b:54:65:81:ca:dc:c9:cb:d7:82:
                    5b:6e:3e:92:15:cf:d6:50:a8:88:54:44:d5:3a:a2:
                    ed:25:dd:74:0b:9d:7d:57:4a:55:40:df:46:59:e1:
                    c1:8d:a4:99:ef:2f:de:7c:68:5c:1e:65:d8:e2:cd:
                    bd:55:5b:de:c8:ab:34:35:d7:16:8e:60:3e:7c:d1:
                    62:fb:7a:9d:00:e0:9c:39:bb:af:63:2f:a3:e5:02:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:EA:D6:82:DD:70:22:62:0F:88:F6:CD:82:66:E5:CC:9D:30:09
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vmTq1oLdcCJiD4j2zYJm5cydMAk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:13:c8:80:e5:3f:99:46:ea:7c:cc:89:85:6c:c3:41:02:
         6f:32:96:27:40:6e:12:05:a2:2e:2c:b9:b7:49:b5:e2:00:90:
         4f:f6:2a:88:fa:ac:84:04:71:12:ff:c9:75:cc:7d:43:b4:e9:
         33:b7:1e:2e:20:fd:c1:e4:19:99:92:45:19:aa:0f:ae:55:73:
         2a:65:12:95:c8:e9:1b:4b:88:8c:ee:0b:c2:4c:52:36:02:0d:
         22:cb:e2:76:d1:42:7a:71:ce:23:1c:53:a7:30:f6:d2:9a:43:
         a1:4c:e8:58:40:c4:36:c7:06:a7:bd:eb:00:23:1b:02:73:ec:
         59:db:bb:a2:71:07:2f:8e:48:ff:0f:ba:87:e4:b4:63:2e:70:
         26:40:88:94:44:5a:05:17:11:59:0e:d6:72:9f:ff:b7:b0:d5:
         5d:51:c0:5e:62:60:84:79:00:19:2d:4b:7d:e1:d1:0e:22:91:
         18:00:f1:6d:4f:d2:77:05:34:b6:9d:6b:e7:6f:54:fd:17:16:
         38:6b:b5:05:1a:a4:d1:23:a5:c0:12:3c:36:d0:cf:3c:96:b9:
         45:5a:78:c3:9b:02:42:53:c8:40:c7:ca:1f:9d:5a:54:45:a9:
         46:36:93:c6:d7:bd:fb:02:58:10:9e:11:a9:b1:27:75:10:17:
         5e:b8:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----