Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/t_2LhPtHac7bf97PvUBXZLrZRw0.roa
File:                     t_2LhPtHac7bf97PvUBXZLrZRw0.roa (raw, json)
Hash identifier:          OdIPq7EZcE161Ehp9MTGV49YkHmxcmKDs0UARUrjzro=
Subject key identifier:   B7:FD:8B:84:FB:47:69:CE:DB:7F:DE:CF:BD:40:57:64:BA:D9:47:0D
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       079B
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/t_2LhPtHac7bf97PvUBXZLrZRw0.roa
Signing time:             Tue 29 Sep 2020 10:05:47 +0000
ROA not before:           Tue 29 Sep 2020 10:05:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        2402:9c00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B7FD8B84FB4769CEDB7FDECFBD405764BAD9470D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:46:13:0d:42:af:ce:8a:06:83:19:88:15:
                    7b:a4:e8:23:d6:97:4e:b2:03:d9:b7:5e:a0:f4:0c:
                    e1:c5:23:84:b9:a2:bb:a2:e4:1f:64:bf:df:61:0c:
                    b0:fe:3e:94:94:33:46:33:6a:ef:8d:aa:9e:ca:f2:
                    c9:55:34:6b:8e:9b:8d:ab:ed:e0:48:46:d1:64:79:
                    7e:34:d3:85:9c:8e:8c:01:e6:58:75:6c:47:60:22:
                    1d:59:64:0d:6b:78:1a:47:37:a5:21:4d:13:30:5d:
                    64:2d:ba:2d:7c:a8:2d:9a:86:af:e0:98:27:9e:33:
                    c0:36:2f:a4:18:e3:92:b4:8c:e5:2f:ac:9f:d3:63:
                    15:a0:1f:f7:32:10:dd:8d:14:dc:eb:78:a1:66:0e:
                    5c:53:52:a7:2a:56:7f:ff:5e:19:55:38:22:9a:fe:
                    55:0c:5f:a8:7f:bb:ca:33:06:22:3c:83:7a:a8:e4:
                    7a:fb:bf:b9:f2:d7:9a:dd:10:c2:21:f1:54:31:27:
                    a9:74:62:85:fc:da:0a:14:9a:74:d7:61:8a:99:25:
                    48:d2:ff:e7:96:2f:86:5e:8c:13:76:bd:39:28:6a:
                    d9:b0:f1:c6:33:9d:4a:ce:65:05:60:d6:46:95:9f:
                    96:2c:16:f6:13:e0:fa:1f:04:e8:73:df:a4:39:00:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FD:8B:84:FB:47:69:CE:DB:7F:DE:CF:BD:40:57:64:BA:D9:47:0D
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/t_2LhPtHac7bf97PvUBXZLrZRw0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:ca:4c:1c:10:5d:77:19:48:9c:5b:af:9f:3d:d9:37:01:
         21:a6:ea:c1:18:03:b9:61:9b:f6:c0:29:1a:2f:36:ab:a7:e3:
         f2:c8:c4:e7:c2:bb:b6:72:1f:1c:e0:68:6e:84:e6:92:32:43:
         29:e6:d8:9f:3b:ed:19:a2:f1:8a:cc:65:f7:f3:56:9a:20:1f:
         8d:c2:9d:fb:b2:7e:2c:0f:c5:11:e7:42:57:7e:85:b7:c1:28:
         23:ae:88:5e:2e:68:df:6f:3d:47:a6:ef:99:b6:6e:cd:7d:be:
         b8:eb:03:61:7e:10:5c:ad:68:07:aa:24:ff:08:c5:c0:3c:bf:
         3b:bd:02:02:49:1b:e9:39:4e:f4:dc:9d:6d:27:64:22:58:32:
         00:0a:2f:a4:3a:57:f2:ba:a2:27:57:b9:32:28:9d:60:44:46:
         a9:a1:ce:bf:d7:89:7d:ec:e7:e6:63:15:da:3f:7c:30:e1:8e:
         d0:36:da:d5:62:e0:fb:9e:84:c8:d6:20:6d:65:97:cb:c5:51:
         0f:97:0c:f8:65:6b:da:5e:e9:8e:c0:2a:f3:dd:72:f2:e6:df:
         89:d1:4c:8a:db:e5:11:b0:68:4e:00:6f:d7:2f:63:8e:15:69:
         9f:d4:09:fe:83:40:31:b5:5a:56:bf:5e:08:c5:35:b8:8b:28:
         d2:09:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----