Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/_ewCIyl8ytanDLhetp66btmJ3zk.roa
File:                     _ewCIyl8ytanDLhetp66btmJ3zk.roa (raw, json)
Hash identifier:          POJcBGjYVtYx1MHLFOv2SBPIsK3BB+oqWJKa55SExIo=
Subject key identifier:   FD:EC:02:23:29:7C:CA:D6:A7:0C:B8:5E:B6:9E:BA:6E:D9:89:DF:39
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0919
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/_ewCIyl8ytanDLhetp66btmJ3zk.roa
Signing time:             Sun 07 Feb 2021 11:55:16 +0000
ROA not before:           Sun 07 Feb 2021 11:55:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        61.65.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Feb  7 11:55:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FDEC0223297CCAD6A70CB85EB69EBA6ED989DF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:de:b0:aa:11:e4:62:57:a0:c6:4f:e2:39:
                    0d:18:7a:1c:2c:16:bc:28:97:db:57:4f:14:c5:d3:
                    28:4d:c5:af:3a:7d:00:d4:a8:2a:64:8d:06:e4:ef:
                    d6:24:42:ce:9f:53:22:d2:dc:22:50:35:42:df:a4:
                    d3:46:05:f0:11:ce:c8:93:36:ea:37:fb:58:75:44:
                    9c:a1:52:4c:b3:e5:b0:b0:f3:48:cc:ec:56:a6:ee:
                    53:a1:88:26:98:c4:e8:4c:27:fa:37:c1:95:f2:c4:
                    91:7d:3b:9b:a8:97:3c:b6:39:85:2d:46:9a:41:36:
                    58:72:31:85:91:d3:f4:e0:b7:f2:6b:7a:dc:0c:82:
                    a9:8c:83:f3:54:43:df:c4:3d:0b:8e:53:aa:a9:47:
                    1f:e4:7a:0b:74:e1:b0:d8:25:02:6d:2f:81:8c:ff:
                    2b:22:4d:1a:77:cb:97:53:ad:88:03:eb:28:bc:4e:
                    3a:8f:8a:6e:89:1d:f8:3b:86:4e:ab:b6:db:af:75:
                    95:3c:af:da:59:74:f5:d9:9b:8d:2e:07:b5:e1:07:
                    73:92:54:d6:f7:87:29:4c:e2:60:b6:81:24:42:2d:
                    6f:7e:cd:2e:05:e2:61:01:10:d2:5d:7b:47:29:d0:
                    26:dd:2c:20:2e:12:24:ef:d8:ef:79:bf:92:2b:c4:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:02:23:29:7C:CA:D6:A7:0C:B8:5E:B6:9E:BA:6E:D9:89:DF:39
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/_ewCIyl8ytanDLhetp66btmJ3zk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:80:26:e0:8f:54:bd:99:8a:ce:ad:2b:ff:ac:28:bf:ca:
         71:23:c4:88:1e:6e:a3:4f:1e:76:67:d7:1b:8a:4b:3f:b6:24:
         84:ce:c1:4f:e6:3b:d8:24:ea:df:cd:12:41:bc:89:fb:05:19:
         97:59:01:b3:04:20:15:16:90:68:76:98:6d:7b:24:7c:90:48:
         98:c8:ff:c7:8f:87:f0:de:1f:b6:76:64:1b:84:ca:18:44:46:
         56:2f:65:c4:47:b0:ca:5a:d3:5c:de:36:3c:43:7e:ce:69:15:
         04:66:bf:39:de:f5:8e:0e:91:fe:e5:04:52:26:81:af:3e:55:
         78:de:25:6e:a3:c4:d3:ef:97:63:c3:59:5d:b4:4b:cc:5c:ea:
         f1:02:75:28:6d:6e:b4:01:9a:78:36:ea:97:e8:65:29:9d:9d:
         ed:48:f7:d2:d6:fb:cf:04:c6:91:7f:c9:ec:3b:e4:50:7b:59:
         9b:12:ce:9b:64:6e:ab:cc:7f:e0:62:87:a1:71:c6:c1:de:0f:
         82:00:92:40:e5:45:e6:5e:61:0a:1c:23:d7:75:15:56:07:49:
         0f:85:01:b4:08:35:d3:0a:47:bf:b7:d4:e2:25:0f:7b:2d:30:
         89:45:2e:d2:0c:d0:1f:d0:22:97:c6:53:e7:39:db:2e:a7:bd:
         67:01:a7:f2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMTAyMDcx
MTU1MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZERUMwMjIzMjk3Q0NB
RDZBNzBDQjg1RUI2OUVCQTZFRDk4OURGMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfnt6wqhHkYlegxk/iOQ0YehwsFrwol9tXTxTF0yhNxa86fQDU
qCpkjQbk79YkQs6fUyLS3CJQNULfpNNGBfARzsiTNuo3+1h1RJyhUkyz5bCw80jM
7Fam7lOhiCaYxOhMJ/o3wZXyxJF9O5uolzy2OYUtRppBNlhyMYWR0/Tgt/JretwM
gqmMg/NUQ9/EPQuOU6qpRx/kegt04bDYJQJtL4GM/ysiTRp3y5dTrYgD6yi8TjqP
im6JHfg7hk6rttuvdZU8r9pZdPXZm40uB7XhB3OSVNb3hylM4mC2gSRCLW9+zS4F
4mEBENJde0cp0CbdLCAuEiTv2O95v5IrxFMpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/ewCIyl8ytanDLhetp66btmJ3zkwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vX2V3Q0l5bDh5dGFuRExo
ZXRwNjZidG1KM3prLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Bz1BADANBgkqhkiG9w0BAQsFAAOCAQEApjiAJuCPVL2Zis6tK/+sKL/KcSPEiB5u
o08edmfXG4pLP7YkhM7BT+Y72CTq380SQbyJ+wUZl1kBswQgFRaQaHaYbXskfJBI
mMj/x4+H8N4ftnZkG4TKGERGVi9lxEewylrTXN42PEN+zmkVBGa/Od71jg6R/uUE
UiaBrz5VeN4lbqPE0++XY8NZXbRLzFzq8QJ1KG1utAGaeDbql+hlKZ2d7Uj30tb7
zwTGkX/J7DvkUHtZmxLOm2Ruq8x/4GKHoXHGwd4PggCSQOVF5l5hChwj13UVVgdJ
D4UBtAg10wpHv7fU4iUPey0wiUUu0gzQH9Ail8ZT5znbLqe9ZwGn8g==
-----END CERTIFICATE-----