Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ouUejf9vvCi6XaW_gpWcEgEjiJU.roa
File:                     ouUejf9vvCi6XaW_gpWcEgEjiJU.roa (raw, json)
Hash identifier:          qsVUP0cb2MLSgMuEckpIpWDcQTWC4e4uebywcLbQHM8=
Subject key identifier:   A2:E5:1E:8D:FF:6F:BC:28:BA:5D:A5:BF:82:95:9C:12:01:23:88:95
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       079F
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ouUejf9vvCi6XaW_gpWcEgEjiJU.roa
Signing time:             Tue 29 Sep 2020 10:05:48 +0000
ROA not before:           Tue 29 Sep 2020 10:05:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        101.0.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A2E51E8DFF6FBC28BA5DA5BF82959C1201238895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:d9:61:55:7d:19:c6:31:fb:05:53:cd:8c:
                    0a:30:85:81:22:aa:3e:c3:61:4c:25:0f:2c:97:a1:
                    e0:3b:00:8c:8f:5e:46:f4:6d:d1:06:a1:f9:86:2e:
                    ff:fb:92:2e:42:28:57:43:57:f6:dd:de:a5:29:4a:
                    b8:cf:3b:a9:60:5e:78:78:db:b4:89:fd:5f:4f:8b:
                    36:94:b0:ee:53:dc:3d:5d:2f:69:67:dd:62:59:e4:
                    18:be:d7:46:1f:e0:0f:fc:20:53:59:54:e8:72:ea:
                    d5:f9:70:1e:da:74:2a:af:7f:26:3f:8b:70:c4:28:
                    aa:9e:0d:26:82:a2:f1:65:d7:49:72:63:e7:0b:0a:
                    ef:7b:59:c2:89:59:84:b7:77:55:61:07:ca:36:36:
                    c3:40:f7:1e:67:99:ce:70:38:4c:5e:d9:01:fe:3a:
                    ad:17:00:98:3c:28:d2:76:34:ad:b9:96:06:f2:2f:
                    c5:bf:78:12:4f:c1:ce:45:9e:f0:b0:28:7f:01:8d:
                    b1:05:75:86:db:7f:96:01:95:d4:ef:92:5c:19:d9:
                    68:5c:7e:82:47:39:b2:91:d6:f7:a2:e7:28:bb:fd:
                    aa:84:e8:ae:cb:58:74:ca:96:dc:de:e4:f8:c5:70:
                    ee:dd:28:64:12:81:df:5e:3f:e8:fe:a5:86:44:87:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E5:1E:8D:FF:6F:BC:28:BA:5D:A5:BF:82:95:9C:12:01:23:88:95
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ouUejf9vvCi6XaW_gpWcEgEjiJU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:3b:6b:65:7c:e3:f5:98:6c:4e:6a:ff:01:ae:5e:e1:b0:
         d8:86:85:04:28:9d:d8:94:d3:7b:a5:33:21:59:af:ae:a3:b7:
         d6:98:e0:7a:a9:28:c1:4f:de:40:78:1c:84:c3:e5:05:87:09:
         29:91:ad:b3:f7:10:e3:3e:8a:b8:52:d0:e3:ba:b8:2e:d0:85:
         50:d5:4e:a0:4f:05:81:b8:60:f8:27:3a:bd:07:a5:38:e3:1d:
         50:f9:92:66:e5:8a:54:b6:e5:10:dc:ec:61:92:93:03:b8:47:
         64:da:2d:06:64:91:30:dc:91:75:0a:da:19:9a:e0:7a:2f:fe:
         5f:68:d0:ba:81:c8:0c:0b:5a:ec:68:5f:26:16:6c:be:a2:6a:
         d1:80:86:7d:9b:d3:da:6c:43:70:d8:8f:8e:a4:4a:d0:fa:9b:
         e6:b6:5d:e8:6a:b8:7d:ca:1c:02:a9:7a:16:aa:94:2c:b7:b4:
         88:e0:ec:a4:61:27:8f:64:c6:03:67:f9:f6:72:c0:94:ee:fd:
         06:ed:a1:d7:52:52:ec:9e:7d:cc:56:6b:a5:52:a2:a5:01:6c:
         ad:a8:6a:f3:3b:41:90:42:60:a0:4b:de:d1:e6:f2:3a:40:6d:
         d7:2c:04:78:1e:49:dd:d3:be:71:32:6b:bd:d1:81:7b:7a:a9:
         30:43:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----