Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/5fmjisAdqMK_xE1jbfNXDWleVGU.roa
File:                     5fmjisAdqMK_xE1jbfNXDWleVGU.roa (raw, json)
Hash identifier:          CJeS1Ou40YwLv+ccE6kKj1rYM5PLGRiiCO83oZWJSMc=
Subject key identifier:   E5:F9:A3:8A:C0:1D:A8:C2:BF:C4:4D:63:6D:F3:57:0D:69:5E:54:65
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09BF
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/5fmjisAdqMK_xE1jbfNXDWleVGU.roa
Signing time:             Wed 29 Sep 2021 02:38:36 +0000
ROA not before:           Wed 29 Sep 2021 02:38:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        61.60.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495 (0x9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E5F9A38AC01DA8C2BFC44D636DF3570D695E5465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:f6:89:df:0a:29:96:29:4e:21:1a:a5:47:
                    b1:c8:77:7d:56:87:10:85:c0:81:9f:d3:2e:d9:c3:
                    3d:8a:6f:20:8d:93:78:57:97:99:3b:16:03:84:e6:
                    35:9c:af:4f:c6:43:f5:5f:9e:99:e0:bc:92:0d:83:
                    b1:05:d6:7a:73:ae:ab:cf:e3:16:18:bf:21:9a:56:
                    8f:a1:72:1b:6d:1c:98:84:ce:b3:05:d2:58:db:f7:
                    4a:c3:31:d9:df:19:66:fa:dd:b4:e0:1c:8b:98:bc:
                    97:f4:7b:b6:00:82:d7:38:68:8c:00:a2:10:dc:2a:
                    2c:aa:79:41:7c:de:66:c3:47:da:a7:96:49:60:16:
                    ab:7f:c0:6f:e4:97:2a:0a:e8:5d:38:a1:c3:24:4a:
                    e5:3a:f4:56:d6:d5:f1:ac:8c:0f:e9:be:52:e6:4b:
                    7c:2f:cc:43:0d:ed:3b:8f:63:9b:23:c9:40:8b:46:
                    93:4e:d2:88:4e:57:71:c7:35:aa:05:1c:b6:29:a1:
                    d1:27:75:7e:67:45:f5:34:11:63:c8:63:9e:0e:ea:
                    2f:47:74:e9:dc:25:dc:4f:f8:0c:3b:db:79:2d:70:
                    63:6f:b3:c6:6d:8f:9a:79:32:c2:72:cd:26:8c:7d:
                    f5:4c:b3:af:3d:08:04:96:40:94:c9:a6:4a:a4:eb:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:A3:8A:C0:1D:A8:C2:BF:C4:4D:63:6D:F3:57:0D:69:5E:54:65
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/5fmjisAdqMK_xE1jbfNXDWleVGU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:6d:4a:60:73:6b:2d:c7:2e:9a:4d:ef:72:69:a0:55:35:8c:
         6e:03:6b:ca:22:e4:7a:f2:91:72:9b:23:43:60:3e:dc:08:10:
         43:0d:a9:70:d0:5a:ff:d8:14:a8:44:16:d3:08:d2:a6:1e:94:
         0c:41:bd:66:4b:24:b6:c5:35:8e:dc:c0:92:08:ee:68:03:6b:
         fe:47:18:63:8a:4c:9d:5e:b9:88:6d:3a:79:62:73:be:94:8b:
         0d:25:b9:24:29:3b:75:06:5f:56:a5:bb:c9:3f:9f:f4:dc:0d:
         38:47:63:fe:a6:0b:fe:48:c5:cf:e9:5c:51:2e:1f:d7:de:e0:
         17:b7:8f:a5:c6:fb:42:5e:0e:cb:78:ae:80:72:66:8e:12:1e:
         7d:ad:f3:f5:86:b8:1f:82:0a:37:77:ea:3d:c4:a9:7f:89:11:
         00:f2:3d:b4:62:98:69:72:03:01:f2:0c:fa:e8:e9:95:06:65:
         43:65:42:aa:91:f8:23:0b:5e:8d:57:50:56:e2:92:d7:1e:32:
         81:8f:37:b3:38:e3:f8:ad:6b:bd:a3:e4:ca:ed:26:10:5f:c0:
         fb:fd:2d:45:b5:b2:02:f0:b4:f5:07:7c:ee:2f:3c:14:b6:68:
         80:dc:30:81:5d:d4:7e:ed:87:b4:37:ad:f7:a1:8c:36:00:de:
         e7:3a:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----