Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/VnM42OuzdWXicPZz8-gsElrzPSs.roa
File:                     VnM42OuzdWXicPZz8-gsElrzPSs.roa (raw, json)
Hash identifier:          vVXepTHDjK0EQ4vvWcvdKoSx7UOBlBQSO0o8tFhye0s=
Subject key identifier:   56:73:38:D8:EB:B3:75:65:E2:70:F6:73:F3:E8:2C:12:5A:F3:3D:2B
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09C6
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/VnM42OuzdWXicPZz8-gsElrzPSs.roa
Signing time:             Wed 29 Sep 2021 02:38:37 +0000
ROA not before:           Wed 29 Sep 2021 02:38:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        122.201.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2502 (0x9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=567338D8EBB37565E270F673F3E82C125AF33D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:cf:df:51:3b:c2:49:94:36:3f:40:c0:25:
                    7d:d5:d1:8b:39:ff:b3:2c:e8:f9:81:7f:7d:18:95:
                    48:b1:3f:b5:aa:4c:0c:90:5e:b2:e9:61:87:3d:93:
                    60:b8:16:90:03:9b:ab:22:0b:db:9a:41:45:2c:d8:
                    dd:7a:67:c6:92:41:51:fe:d7:b1:9e:e1:3c:7b:4a:
                    cd:59:40:c2:ce:10:2d:73:76:89:80:bf:5e:8e:27:
                    3b:7f:9f:e1:0e:d7:78:5a:a1:27:6c:79:17:50:63:
                    44:37:aa:ea:ba:7d:7e:bf:7a:4b:0e:0a:b8:35:e2:
                    ef:b1:ec:e5:42:a3:b3:d6:ea:c1:9e:59:85:38:1e:
                    8d:e0:a4:11:31:ed:07:f5:a1:be:3d:3d:0e:88:ec:
                    c1:b4:40:d6:ff:52:f1:95:00:f6:3f:49:82:53:cb:
                    94:36:b9:68:6e:fe:b3:c2:2e:8b:dd:f7:eb:7c:f7:
                    28:e1:7f:13:95:52:08:48:8b:26:10:c8:36:37:05:
                    a8:03:28:98:37:63:61:89:2d:9b:a0:a5:d1:f9:99:
                    bd:73:68:d5:42:99:fc:ef:b4:e1:91:27:91:4b:26:
                    b0:ad:bd:bf:3d:c2:a9:8e:9f:ca:68:1d:82:8a:6a:
                    c8:96:52:6c:8d:bb:fb:6f:50:9f:66:07:87:ab:f0:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:73:38:D8:EB:B3:75:65:E2:70:F6:73:F3:E8:2C:12:5A:F3:3D:2B
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/VnM42OuzdWXicPZz8-gsElrzPSs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0a:6e:c6:4b:b4:b6:b5:16:4f:aa:69:29:20:a6:2e:f0:fa:40:
         95:35:fb:08:a1:93:1d:16:5f:90:0e:57:69:b9:d6:25:d4:10:
         8a:ba:a0:53:70:e2:e1:79:2b:08:53:9c:58:96:fd:dd:c9:12:
         2d:2b:de:84:30:50:a8:1c:2f:05:b1:64:c4:8c:db:de:17:b4:
         c4:2e:34:41:28:a8:fc:57:0e:ec:7f:01:26:e4:f6:80:15:d5:
         ac:2e:7a:77:0a:34:18:5b:a5:7d:e1:3b:c6:ac:65:5f:4f:e0:
         73:47:56:25:d7:cd:d4:f6:91:f8:f3:84:55:dc:ba:8b:ab:f5:
         e9:03:a1:c7:42:79:cf:44:cc:ab:4f:fb:ca:6d:87:6c:fa:58:
         94:c3:a2:44:47:a0:65:b2:ea:28:ba:79:9d:cd:dd:d5:3b:c4:
         30:72:71:a2:68:70:24:1b:b3:3e:c3:6a:b5:a7:f2:b2:36:46:
         9b:3c:cb:4b:9d:ba:ba:98:d8:c5:70:b0:3d:d5:21:6f:4d:21:
         24:37:7f:ff:d7:77:9c:e5:2b:a2:b6:e0:a2:89:2d:6c:3a:5f:
         f5:2a:05:ba:02:4d:fb:89:1c:f4:32:14:dd:50:b3:04:1b:8b:
         69:e7:70:88:27:b2:36:d7:af:63:1a:8c:51:34:15:da:d3:4d:
         2b:87:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----