Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa
File:                     7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa (raw, json)
Hash identifier:          j7UxlI2EVXKecY5ACr3PgALmnQCbU+Up3GUb6TiHp7U=
Subject key identifier:   EE:4F:59:44:56:79:F3:E3:3A:86:23:03:90:B2:54:06:7C:5E:DA:2E
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0795
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa
Signing time:             Tue 29 Sep 2020 10:05:46 +0000
ROA not before:           Tue 29 Sep 2020 10:05:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        61.63.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE4F59445679F3E33A86230390B254067C5EDA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:7c:ae:c0:84:d5:e4:f0:4c:23:8e:f6:30:
                    88:83:03:b2:dc:3b:f3:96:c0:da:c7:8d:e0:71:97:
                    ba:71:5a:9d:0f:92:c1:af:37:cb:47:7c:34:5f:83:
                    b3:f5:f4:03:6e:f1:09:24:a3:f8:1c:ba:c6:1c:e6:
                    04:02:ec:47:4a:b0:0a:39:93:23:07:16:8d:d7:29:
                    07:5b:e6:6a:38:59:9d:af:01:df:74:3b:fc:2f:74:
                    bd:4e:f9:d6:d1:2b:4d:9b:6e:b1:05:8e:90:94:74:
                    7a:bf:a6:10:d6:f1:6f:d3:ac:81:44:5f:fd:5f:11:
                    12:42:e2:c5:64:8f:34:0e:1c:94:56:0a:56:ef:ac:
                    05:62:a2:74:fb:93:7d:89:b0:b4:67:7d:a3:25:ba:
                    67:47:db:af:c3:2e:2f:34:62:3f:1c:f9:35:32:a6:
                    07:a2:fd:17:3c:51:56:98:6a:2a:fe:cb:78:ec:49:
                    47:7a:68:ce:43:10:4c:7b:2f:af:53:15:7b:ba:5d:
                    a4:82:f6:ac:21:e2:7c:dd:3d:e0:ac:bc:94:9a:bb:
                    da:58:8e:7e:da:f2:56:a5:e1:77:08:eb:45:d8:b8:
                    19:f3:90:b6:47:f2:54:54:93:e3:20:3e:bc:36:62:
                    6e:40:89:d3:99:b9:90:45:98:6f:94:e0:f3:14:37:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:59:44:56:79:F3:E3:3A:86:23:03:90:B2:54:06:7C:5E:DA:2E
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7k9ZRFZ58-M6hiMDkLJUBnxe2i4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:b0:11:15:20:f9:c3:98:fe:65:ec:2c:6e:3e:7b:ce:a9:5a:
         7a:ab:ce:d7:e8:88:f6:83:cf:70:24:e8:60:a5:f4:39:19:86:
         2a:bd:da:e6:a4:bb:4c:dc:81:ca:98:43:37:ee:5e:f0:39:2a:
         bf:c1:30:06:0f:51:1a:b9:b3:cf:df:7f:d1:07:34:0b:47:1f:
         c8:9a:1d:5b:ea:fc:d0:77:77:c6:0b:70:ad:bd:8e:28:b8:10:
         55:f9:b1:1d:98:25:a4:bb:2d:bc:14:ff:e7:f6:15:3a:31:8c:
         38:bc:e1:00:37:a3:75:a1:30:6b:6e:6e:01:8a:7a:ce:73:a2:
         96:e6:62:26:f6:84:10:8a:8e:34:5b:3c:90:76:57:f9:57:3f:
         95:67:a6:f2:1b:6c:55:6e:76:1f:59:f0:52:20:f4:5f:88:47:
         dc:b2:c7:a1:4c:12:3e:80:e5:07:f9:43:03:2f:47:00:d4:4f:
         72:0c:75:e8:67:48:81:ad:d5:d5:0d:38:55:0f:ad:be:da:6d:
         63:4c:b5:58:a0:82:0b:c0:6d:e2:11:1e:cd:c8:3c:34:48:c5:
         99:21:60:5b:01:2d:c5:2f:8e:28:74:92:4c:a0:a6:63:a1:73:
         1a:f8:98:73:a1:90:02:51:3c:9a:42:35:c2:18:34:92:62:f0:
         81:2b:0a:52
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMDA5Mjkx
MDA1NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVFNEY1OTQ0NTY3OUYz
RTMzQTg2MjMwMzkwQjI1NDA2N0M1RURBMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDiHyuwITV5PBMI472MIiDA7LcO/OWwNrHjeBxl7pxWp0PksGv
N8tHfDRfg7P19ANu8Qkko/gcusYc5gQC7EdKsAo5kyMHFo3XKQdb5mo4WZ2vAd90
O/wvdL1O+dbRK02bbrEFjpCUdHq/phDW8W/TrIFEX/1fERJC4sVkjzQOHJRWClbv
rAVionT7k32JsLRnfaMlumdH26/DLi80Yj8c+TUypgei/Rc8UVaYair+y3jsSUd6
aM5DEEx7L69TFXu6XaSC9qwh4nzdPeCsvJSau9pYjn7a8lal4XcI60XYuBnzkLZH
8lRUk+MgPrw2Ym5AidOZuZBFmG+U4PMUNzz9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU7k9ZRFZ58+M6hiMDkLJUBnxe2i4wHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vN2s5WlJGWjU4LU02aGlN
RGtMSlVCbnhlMmk0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BT0/gDANBgkqhkiG9w0BAQsFAAOCAQEAqLARFSD5w5j+Zewsbj57zqlaeqvO1+iI
9oPPcCToYKX0ORmGKr3a5qS7TNyByphDN+5e8Dkqv8EwBg9RGrmzz99/0Qc0C0cf
yJodW+r80Hd3xgtwrb2OKLgQVfmxHZglpLstvBT/5/YVOjGMOLzhADejdaEwa25u
AYp6znOiluZiJvaEEIqONFs8kHZX+Vc/lWem8htsVW52H1nwUiD0X4hH3LLHoUwS
PoDlB/lDAy9HANRPcgx16GdIga3V1Q04VQ+tvtptY0y1WKCCC8Bt4hEezcg8NEjF
mSFgWwEtxS+OKHSSTKCmY6FzGviYc6GQAlE8mkI1whg0kmLwgSsKUg==
-----END CERTIFICATE-----