Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bfoKmYDspmeamJG2knBSz5aS8hE.roa
File:                     bfoKmYDspmeamJG2knBSz5aS8hE.roa (raw, json)
Hash identifier:          Nv4JP/JMdT0Yx7s6P38M1/9xHv1OVSyrGO/rvCdKvAE=
Subject key identifier:   6D:FA:0A:99:80:EC:A6:67:9A:98:91:B6:92:70:52:CF:96:92:F2:11
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09B9
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bfoKmYDspmeamJG2knBSz5aS8hE.roa
Signing time:             Wed 29 Sep 2021 02:38:35 +0000
ROA not before:           Wed 29 Sep 2021 02:38:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        61.65.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2489 (0x9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6DFA0A9980ECA6679A9891B6927052CF9692F211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:17:07:6a:90:54:d0:fa:9f:21:f0:2f:dd:
                    5b:cf:39:28:6d:93:d8:19:cf:c9:16:74:37:68:58:
                    75:f8:d8:9a:a9:f7:fa:0c:7d:c1:35:12:b0:cf:5d:
                    cb:96:b8:47:87:00:aa:12:ec:94:d5:07:09:4e:6f:
                    a3:fb:ac:f9:a1:e4:9c:7c:3b:ce:4d:ce:bb:fa:bd:
                    4c:28:c1:d3:5c:86:6e:44:c6:de:68:77:4b:69:87:
                    0d:75:ec:57:e2:c8:68:f4:f2:9b:bd:32:eb:47:bf:
                    ef:0e:63:f6:e5:f1:4e:26:33:01:b4:fb:25:79:ae:
                    b7:06:fe:d5:ee:74:66:78:4e:b9:a2:75:54:f4:ff:
                    99:a3:e7:10:5a:e7:f1:79:81:5f:25:48:a0:96:a8:
                    2f:d1:21:72:33:46:3b:14:72:a7:17:25:4f:37:c9:
                    e4:d4:c0:11:5d:98:cf:1a:46:7e:d4:3d:1c:b8:f9:
                    87:f6:7c:47:e6:56:59:65:12:01:5c:f5:00:f1:71:
                    08:d7:4b:13:a6:d4:b0:a5:2b:db:09:f6:5e:8a:1a:
                    83:66:c7:c6:20:f2:d5:93:52:52:00:8a:1f:d6:e5:
                    00:86:5d:95:5c:62:ef:ed:74:67:87:b6:03:39:67:
                    81:12:32:72:2e:9e:fb:25:f2:d9:31:3d:f4:9a:e8:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FA:0A:99:80:EC:A6:67:9A:98:91:B6:92:70:52:CF:96:92:F2:11
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bfoKmYDspmeamJG2knBSz5aS8hE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:60:15:ec:fe:28:03:ae:db:e6:7a:39:39:65:f9:6d:4e:b9:
         ca:7d:11:cf:e7:a2:8c:45:3c:a1:02:38:3a:31:1e:85:17:42:
         2b:0e:63:28:fd:8a:2c:20:13:a7:09:09:e9:71:a1:56:ab:53:
         f7:33:b5:4b:25:72:be:63:e2:86:06:45:c3:04:99:90:47:58:
         31:0f:a1:5e:aa:2a:16:37:82:6f:3f:ed:e4:d4:c5:78:3a:61:
         8f:50:71:30:43:4b:df:01:ad:da:e0:d0:5b:87:c8:cc:90:47:
         ed:07:50:05:52:fe:45:d7:d3:7b:f7:38:f2:58:46:a2:89:0b:
         c5:82:20:33:7a:06:71:81:9b:bf:e2:35:ed:cc:d6:5c:18:09:
         d9:77:c3:c4:89:55:d8:ed:4f:08:2f:79:27:3e:0c:db:4e:1d:
         3e:7f:b9:93:50:c6:53:d9:9d:0d:75:ff:b1:1a:76:a8:8d:71:
         80:a4:77:e0:a3:76:74:21:33:4b:53:6d:ad:2f:9e:8e:9d:ae:
         6c:9f:0b:56:d7:9b:95:85:0f:5d:9b:9a:dc:47:f5:da:d4:27:
         9b:ca:4b:6c:de:e9:63:29:40:2d:1c:97:4d:66:76:68:15:e7:
         50:1d:06:58:76:9b:1c:ba:4c:b7:a2:48:ad:3c:f7:8c:2e:4a:
         4c:17:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----