Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vpmE7qMWD3WBBC89hs0S_ytVrS4.roa
File:                     vpmE7qMWD3WBBC89hs0S_ytVrS4.roa (raw, json)
Hash identifier:          1pgen+okv7TCkvwlyL4HEFw/bdmedlXve1K13bWZtdo=
Subject key identifier:   BE:99:84:EE:A3:16:0F:75:81:04:2F:3D:86:CD:12:FF:2B:55:AD:2E
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       081F
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vpmE7qMWD3WBBC89hs0S_ytVrS4.roa
Signing time:             Tue 29 Sep 2020 09:57:47 +0000
ROA not before:           Tue 29 Sep 2020 09:57:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131628
IP address blocks:        175.99.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE9984EEA3160F7581042F3D86CD12FF2B55AD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:06:7e:fa:e4:61:00:c9:43:65:fd:97:cf:
                    e0:cc:fe:61:af:9f:de:8e:48:d1:9b:19:2f:7d:ac:
                    9d:2a:75:da:83:b2:2a:1b:50:5c:5b:16:5b:e7:4f:
                    49:1f:96:d2:20:ac:6b:11:b2:93:ed:8b:7f:74:03:
                    03:60:ab:d8:22:82:8f:d6:59:c6:0e:22:bd:ba:a9:
                    88:16:6a:18:71:b1:a0:8f:ed:e5:0d:34:04:ab:e6:
                    22:c0:5e:61:b4:9f:e9:0d:e8:1f:a5:00:89:58:b8:
                    d9:54:8f:82:bd:bc:9d:0d:47:cf:47:f7:aa:05:d0:
                    61:bd:40:c3:f9:f7:ad:99:76:48:fb:84:66:c9:19:
                    8f:31:b6:cd:89:7a:36:91:1b:04:4c:13:fa:f6:b4:
                    f6:b6:52:f9:40:0d:34:85:f2:4c:c5:d9:f7:d7:fc:
                    ef:d4:9c:90:bd:d9:2d:97:50:d0:29:db:70:92:21:
                    92:bc:f9:9d:f5:70:35:a2:bc:01:c4:c3:9c:29:71:
                    45:85:72:ca:72:d7:66:88:dd:e9:bb:d9:2f:64:48:
                    ac:af:28:0d:3e:3e:f5:30:07:c8:7b:1a:19:a2:5f:
                    24:17:32:42:93:12:70:e3:a6:87:98:ba:6d:31:f3:
                    69:b6:56:1b:db:bc:d2:15:4f:69:7e:cb:e3:e5:36:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:84:EE:A3:16:0F:75:81:04:2F:3D:86:CD:12:FF:2B:55:AD:2E
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vpmE7qMWD3WBBC89hs0S_ytVrS4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.99.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:92:1e:29:81:e3:b4:a8:9c:83:66:fe:03:e1:0f:1f:90:
         3f:c4:76:5d:28:55:10:9a:1f:ce:aa:91:f4:74:16:fa:d9:40:
         72:38:fa:5a:c2:c9:0f:09:6a:22:f0:a9:32:a2:46:f3:b8:5b:
         20:c9:eb:4d:2d:89:26:fc:e6:a4:e3:fd:9f:d4:3f:45:90:e0:
         56:83:6b:af:4d:fa:23:47:6d:48:11:44:e6:62:4f:1e:15:72:
         fe:ec:2c:57:f3:aa:35:3d:ea:39:88:9b:71:34:d1:7d:7a:01:
         56:2f:6e:99:d7:de:0d:1a:6a:5f:91:1c:e8:ae:94:38:34:f3:
         e4:93:30:95:73:e2:7a:d6:fd:67:5f:ed:4c:09:c2:e8:a0:bf:
         30:4f:4c:74:c5:84:d6:ce:4f:27:a7:47:97:7f:2f:f2:27:a1:
         ea:28:20:e6:7c:9d:ad:4e:50:c9:34:44:88:ea:5c:ba:2f:3c:
         b9:95:34:3c:97:66:52:6f:94:79:ec:a8:5a:b3:3c:31:56:1c:
         e6:29:f1:e8:c9:8d:dc:db:d4:d4:62:bd:83:67:e0:fe:8b:2a:
         ca:09:c0:fb:20:6d:30:5f:8b:53:d2:ec:65:be:f0:86:9e:64:
         ab:ef:7b:1a:04:be:a1:1f:14:eb:35:65:4b:49:65:58:67:50:
         c6:2b:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----