Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/J8JSavUMUZgiq028IUDA0tY9Lbg.roa
File:                     J8JSavUMUZgiq028IUDA0tY9Lbg.roa (raw, json)
Hash identifier:          77S3MMaO60WGhE3rdztNW7WLj3OSxELwLe20P7lWlvQ=
Subject key identifier:   27:C2:52:6A:F5:0C:51:98:22:AB:4D:BC:21:40:C0:D2:D6:3D:2D:B8
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       079E
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/J8JSavUMUZgiq028IUDA0tY9Lbg.roa
Signing time:             Tue 29 Sep 2020 10:05:48 +0000
ROA not before:           Tue 29 Sep 2020 10:05:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        122.201.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=27C2526AF50C519822AB4DBC2140C0D2D63D2DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:d2:bd:7d:95:18:82:ac:a0:c8:d6:7f:9d:
                    a6:b8:9e:66:47:62:01:9a:b2:ad:36:e1:49:c8:8c:
                    ab:42:37:72:55:08:c9:09:93:2a:c4:98:bc:97:8b:
                    cb:be:15:b3:f2:bb:98:f9:7b:1a:fa:9a:b3:9d:0f:
                    da:12:f8:c4:ec:23:b9:83:1a:48:e4:b1:1f:4c:b7:
                    e0:a1:6d:76:25:0f:22:c7:13:e7:f9:f4:b8:56:b0:
                    53:4d:d0:f8:7c:e3:6e:3d:12:5d:6d:26:44:34:26:
                    58:c7:10:08:1e:d8:65:f9:92:3f:1b:91:b2:d7:ec:
                    36:48:18:70:e4:e0:58:87:b4:f2:17:0d:17:db:33:
                    49:21:73:46:80:d9:fb:a5:8b:ea:93:26:4d:d7:2c:
                    d1:56:79:af:8a:1d:be:56:c5:43:09:64:49:09:d0:
                    f4:2e:c9:93:9b:66:64:d1:74:b5:65:cb:a8:33:2f:
                    df:3d:fd:9a:46:43:5c:ef:14:21:4b:7f:26:fb:b1:
                    3d:bf:dd:6c:9f:33:8b:dc:b8:ce:33:f1:60:c0:bc:
                    45:8c:4c:aa:dd:14:56:b1:06:4b:af:a9:1d:05:7b:
                    5a:ab:b1:94:ab:9a:90:4d:62:7b:38:0f:42:f2:69:
                    ea:50:3f:06:87:06:0f:4f:86:c2:83:70:e7:18:bc:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:52:6A:F5:0C:51:98:22:AB:4D:BC:21:40:C0:D2:D6:3D:2D:B8
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/J8JSavUMUZgiq028IUDA0tY9Lbg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:c9:38:b3:f9:df:09:a9:da:72:bc:0a:0a:86:4e:3e:d9:f6:
         26:4a:51:fe:e4:5c:0c:46:46:70:cf:1b:41:08:7b:44:99:e7:
         49:70:3d:95:25:10:58:56:d9:74:38:6e:0e:f9:65:39:6f:8b:
         28:7b:cd:90:02:ba:45:67:78:03:85:f3:b3:8b:85:79:a8:4f:
         ed:1b:7d:44:26:53:fc:e6:8d:1d:54:22:9e:18:66:b1:21:a8:
         7b:72:f4:15:5f:b2:38:9e:bd:6b:fa:2a:b9:34:6e:7c:80:ff:
         92:78:e8:b1:f4:ba:51:2c:d2:a7:f0:86:ce:55:6c:76:4d:50:
         1b:eb:42:a4:87:4e:32:b0:5e:bc:f7:eb:d2:03:50:67:b2:2f:
         dc:66:0e:f2:6f:c6:99:f2:bc:01:dd:3a:a3:e7:c2:82:b9:a4:
         cc:f8:01:a5:cf:3f:61:2e:f2:41:d7:72:26:ee:d2:0c:1a:84:
         29:6f:ff:71:1b:fd:29:de:de:4f:f2:18:a7:f7:53:b5:89:22:
         9d:be:6f:bb:27:7f:af:d6:30:c4:14:1a:a2:35:e0:c2:46:f7:
         7c:76:6c:c1:75:07:c7:fe:df:d1:6c:00:72:27:40:5a:d0:ad:
         cf:4d:1a:fa:82:f3:79:6c:97:a2:42:58:5f:1c:4e:b3:62:84:
         08:e7:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----