Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/9pOQJ1AQigTroX4p9GuGqKz8XA0.roa
File:                     9pOQJ1AQigTroX4p9GuGqKz8XA0.roa (raw, json)
Hash identifier:          SaGw3pBXKm9KJ4rPMiC0M/Alzi7NFBzqfOc7GVBjfIk=
Subject key identifier:   F6:93:90:27:50:10:8A:04:EB:A1:7E:29:F4:6B:86:A8:AC:FC:5C:0D
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09BB
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/9pOQJ1AQigTroX4p9GuGqKz8XA0.roa
Signing time:             Wed 29 Sep 2021 02:38:35 +0000
ROA not before:           Wed 29 Sep 2021 02:38:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        61.63.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491 (0x9bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F693902750108A04EBA17E29F46B86A8ACFC5C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:fc:d5:c1:c9:7e:c9:20:10:f2:6a:4e:89:
                    4d:1c:67:86:a7:e1:6e:23:a6:f9:19:78:e5:42:a4:
                    11:8f:25:b7:c8:1c:b6:99:11:7a:e5:c6:8c:b2:fa:
                    f9:5a:b3:93:29:59:c5:46:94:25:ec:9b:59:f2:96:
                    f5:b0:f5:c6:53:92:ae:9d:74:23:00:87:21:cd:e7:
                    c0:ae:98:fd:a3:3a:c5:5c:70:6d:64:36:35:36:ff:
                    cc:35:52:9a:18:e6:bb:af:a5:ae:17:fb:8c:93:80:
                    ad:07:83:7d:fd:20:b8:94:30:47:32:08:ac:80:ee:
                    ed:4e:b1:bd:ee:46:b0:66:81:84:a7:c1:bb:7a:ae:
                    f2:56:b9:b6:22:5a:5e:3b:5d:c6:f8:6b:46:23:e8:
                    cb:4a:57:84:b8:58:2a:42:3c:56:1c:4b:2a:84:a2:
                    72:60:93:4f:4e:82:04:76:91:a7:a3:2b:18:01:4f:
                    ca:6d:ec:a3:48:7e:97:45:6e:36:7f:ab:71:32:7e:
                    e2:65:5f:52:d2:34:bc:72:5c:7c:a8:32:7f:c4:9a:
                    8c:80:73:1b:1b:a7:17:aa:8c:95:b4:05:7c:be:82:
                    23:79:9d:8f:33:2f:c8:5c:1a:ea:1f:63:d9:ee:9e:
                    9e:be:f9:2e:b1:fb:fd:27:c4:52:5e:4b:d0:ff:57:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:90:27:50:10:8A:04:EB:A1:7E:29:F4:6B:86:A8:AC:FC:5C:0D
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/9pOQJ1AQigTroX4p9GuGqKz8XA0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:8b:c3:c7:a2:a8:5a:12:9e:a1:d5:3e:19:e8:2e:3c:8b:
         fc:c8:ca:e5:8c:20:0d:4a:3a:f3:14:ca:7f:bd:fc:fd:94:b9:
         3e:25:d8:bc:f2:6b:92:e2:02:ae:64:b9:c9:97:6a:cc:89:c3:
         a0:bc:91:c4:48:36:91:bd:1e:3d:a6:9d:ea:24:a3:f9:35:ad:
         c7:c3:e5:b2:53:b8:29:86:4d:60:f2:f9:5a:b8:41:d3:a5:79:
         7f:2b:a3:54:db:ee:53:c9:4d:c1:8a:48:4a:e3:7a:53:cc:33:
         df:89:77:95:ed:64:91:4d:4b:8a:1f:19:b7:54:52:6e:13:95:
         e1:6f:82:77:3a:07:03:4b:d1:45:d2:1c:0c:33:1b:93:e3:eb:
         67:44:de:ae:66:70:ce:19:3b:85:ec:89:d1:53:77:f1:6a:21:
         b5:77:f4:3a:9b:16:bb:3c:6f:ae:c0:32:84:f2:ad:7d:65:f8:
         b0:eb:13:2c:e7:99:f9:3b:95:6d:04:7c:fd:7d:a9:83:41:00:
         ec:c5:4b:b4:3a:b6:46:bc:9d:21:3b:16:d3:06:7e:ad:78:b5:
         f8:b0:de:83:41:4e:2e:d6:d6:d4:a1:f3:d7:14:cd:70:46:27:
         7d:3f:be:91:50:fd:35:16:51:71:8b:27:39:33:d2:b0:9d:a8:
         cb:2a:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----