Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/eJjwwBV6LVrOtW-r26Nd3vOMfJw.roa
File:                     eJjwwBV6LVrOtW-r26Nd3vOMfJw.roa (raw, json)
Hash identifier:          zZYYDRfDAkbLyCKE4ObsHlKZrAvZ+Eu59ACNgoephfs=
Subject key identifier:   78:98:F0:C0:15:7A:2D:5A:CE:B5:6F:AB:DB:A3:5D:DE:F3:8C:7C:9C
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0794
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/eJjwwBV6LVrOtW-r26Nd3vOMfJw.roa
Signing time:             Tue 29 Sep 2020 10:05:45 +0000
ROA not before:           Tue 29 Sep 2020 10:05:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        210.62.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7898F0C0157A2D5ACEB56FABDBA35DDEF38C7C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:8b:a2:10:24:fd:c3:b9:8c:d5:b2:1d:b4:
                    42:49:6d:6f:a3:f1:73:8b:f4:6e:45:b5:47:a1:94:
                    58:fb:8b:fc:e7:45:95:9f:25:c6:41:c4:62:69:9e:
                    47:03:dd:30:62:4a:0c:2f:cb:dd:3a:49:d8:ac:ff:
                    ee:bf:49:9b:02:9e:32:03:ce:bc:52:32:f3:7e:23:
                    39:c1:d6:a9:66:f7:d5:98:68:09:7c:80:50:94:45:
                    06:5d:b2:33:4b:7a:6e:e1:60:c7:36:6b:fe:6f:ee:
                    36:57:ba:58:df:1b:92:f0:6f:00:5f:7a:53:88:31:
                    27:2e:91:b7:d1:4e:6f:78:ca:6e:a8:6f:a8:fd:31:
                    77:2e:60:40:5b:dd:3f:ac:78:43:49:26:e6:5c:11:
                    20:ec:12:9b:65:32:cf:55:4f:6d:42:c2:d7:95:68:
                    50:40:f2:84:19:c3:ea:b3:19:14:f3:3b:fe:51:47:
                    c4:bd:59:c0:c4:56:37:29:32:5d:af:4a:ca:be:7c:
                    91:c1:49:e3:7c:eb:e0:de:f9:e7:77:f2:99:dc:61:
                    4f:05:8a:23:de:3d:04:fb:69:fe:3f:7a:a9:b7:29:
                    bd:6e:75:81:e6:08:dd:9c:fe:08:3c:ec:25:e6:9c:
                    77:bb:47:aa:d2:d1:19:f1:bc:b6:08:12:3f:6d:9a:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:98:F0:C0:15:7A:2D:5A:CE:B5:6F:AB:DB:A3:5D:DE:F3:8C:7C:9C
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/eJjwwBV6LVrOtW-r26Nd3vOMfJw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:3b:95:85:77:53:0d:2e:60:8c:63:4d:a0:9e:1d:a2:ea:
         0e:ba:0f:10:3e:9e:e5:5c:e5:5f:d0:f1:84:5f:fa:c3:ca:b4:
         ff:12:5b:57:24:9c:1d:65:1c:75:e7:20:c6:7b:eb:f6:24:f6:
         b7:45:a8:d3:d6:29:63:b9:1a:bc:b2:2d:30:46:0c:a0:fb:a5:
         d7:ca:9c:84:ac:c1:cb:77:af:10:83:d2:04:ec:8f:9f:6b:97:
         8c:c2:a3:5e:5b:82:fc:c2:b5:ba:3d:16:8a:ca:72:71:03:38:
         8e:96:c4:58:6a:d4:8a:5d:07:8b:7f:ab:2f:88:33:f7:19:f0:
         6d:c5:72:54:71:ca:50:14:7a:d0:19:20:cb:ca:35:2b:da:2b:
         1b:16:01:ad:95:17:74:89:39:9b:e4:5c:10:40:a0:63:67:24:
         05:e9:56:00:1f:f2:7b:a8:ab:65:cd:11:57:02:98:5e:51:45:
         5e:49:20:e9:53:8c:b0:1e:3b:57:84:98:8c:8e:b4:07:b8:4a:
         68:f3:1e:61:3f:b9:34:68:db:3b:4a:8d:c8:88:fe:20:af:ee:
         5a:26:f7:46:01:de:1d:3c:47:66:69:fe:62:d8:65:60:5c:97:
         a8:bd:90:75:41:86:69:c0:8c:f3:a0:0c:2a:d3:58:d2:39:77:
         01:5f:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----