Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gUS0_n_6sQbp6E2CsweeI6kuOi8.roa
File:                     gUS0_n_6sQbp6E2CsweeI6kuOi8.roa (raw, json)
Hash identifier:          HWLelbicq7mZP0lU7LHtI/OY+FkOCdJJGrg+GDxX7zs=
Subject key identifier:   81:44:B4:FE:7F:FA:B1:06:E9:E8:4D:82:B3:07:9E:23:A9:2E:3A:2F
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0792
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gUS0_n_6sQbp6E2CsweeI6kuOi8.roa
Signing time:             Tue 29 Sep 2020 10:05:44 +0000
ROA not before:           Tue 29 Sep 2020 10:05:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        61.58.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8144B4FE7FFAB106E9E84D82B3079E23A92E3A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:07:bd:ab:b4:65:fe:c3:79:ee:f8:36:b9:
                    55:0c:d4:f9:6a:ad:34:aa:dc:87:ae:d9:a1:e1:9c:
                    24:a6:a9:74:f6:1e:22:7b:bd:c0:bd:5f:49:b9:71:
                    a0:dd:24:bb:f0:7a:58:56:03:80:16:e6:4a:57:26:
                    8f:4e:e5:b8:d9:a5:e1:29:36:a6:bd:d0:0d:a2:40:
                    96:6a:7f:59:e5:85:1e:6b:2a:07:63:76:17:c4:84:
                    08:0f:e5:79:38:a8:ec:f9:e7:c8:92:8b:a9:70:08:
                    38:0f:69:d8:f5:b3:a6:ca:ea:f3:4f:8d:ee:0c:08:
                    6c:49:83:80:9e:65:8b:29:ef:9c:fd:6d:69:2d:b4:
                    90:21:32:37:df:cc:74:50:24:dc:91:4d:10:68:b1:
                    50:79:36:79:71:ee:43:19:a3:d0:97:54:09:65:de:
                    57:07:cb:b8:42:93:78:50:75:18:f1:44:3c:15:04:
                    d5:68:d5:0e:02:2a:9e:84:27:2f:00:cf:74:bf:0f:
                    67:14:8b:8c:53:5e:54:37:f8:3b:35:29:2a:cb:f5:
                    22:04:3e:fe:d2:70:c7:24:05:df:29:fe:c9:4d:9f:
                    d8:a6:1d:1f:32:a1:ac:75:4f:c0:4b:1a:e9:b6:8a:
                    ea:c0:cb:f3:ef:7e:2a:7a:90:11:eb:9f:49:b9:ed:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:44:B4:FE:7F:FA:B1:06:E9:E8:4D:82:B3:07:9E:23:A9:2E:3A:2F
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gUS0_n_6sQbp6E2CsweeI6kuOi8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:24:cf:26:52:85:f1:09:63:df:80:90:3e:79:7c:ae:82:
         4a:20:05:f3:60:32:11:65:43:d2:aa:dd:ae:ff:2f:ab:89:b2:
         31:52:77:e3:7b:a2:f0:f8:2e:d2:9e:b2:6a:fd:bc:15:06:0e:
         21:39:a2:8d:f0:9f:6c:c2:4d:e1:65:1c:09:68:4c:49:4c:32:
         ec:ce:7f:ea:3c:45:9c:6a:4c:39:dd:af:5c:b9:e9:0b:49:f3:
         58:af:b1:f2:f8:4e:8b:c9:7d:e8:37:38:86:d0:fa:49:f7:f1:
         d2:94:ea:c4:2e:df:ce:a7:f7:45:fc:70:00:84:e9:25:e5:31:
         bf:c7:f6:b0:51:93:be:e2:16:93:7a:96:93:cc:1f:4a:d7:00:
         06:26:59:29:fe:a0:15:32:20:2f:2e:d5:dc:c3:4c:de:74:e6:
         c4:17:d0:0a:e8:4a:93:21:89:70:7a:2a:c6:87:d3:27:9f:09:
         ec:4c:dc:07:2a:a4:a2:c0:bc:c8:5e:8a:dd:62:ae:a3:2e:4b:
         36:c7:6d:4e:68:3b:2e:16:75:f9:d7:12:3d:32:cb:1e:d9:08:
         2c:2d:ca:88:7f:1e:03:94:2d:86:9b:a3:45:82:c9:ae:11:8d:
         c0:87:07:24:b6:4e:0d:19:31:b2:af:e3:96:1f:d9:2e:f0:4b:
         fe:f6:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----