Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/wyqrZmodi8o6CqbziGksWNCSV2c.roa
File:                     wyqrZmodi8o6CqbziGksWNCSV2c.roa (raw, json)
Hash identifier:          MxD8iMtph6gSBstL4lHMGUlWRQxuJa/FKCJy67PoJHE=
Subject key identifier:   C3:2A:AB:66:6A:1D:8B:CA:3A:0A:A6:F3:88:69:2C:58:D0:92:57:67
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09C9
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/wyqrZmodi8o6CqbziGksWNCSV2c.roa
Signing time:             Wed 29 Sep 2021 02:38:39 +0000
ROA not before:           Wed 29 Sep 2021 02:38:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        101.0.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505 (0x9c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C32AAB666A1D8BCA3A0AA6F388692C58D0925767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:4e:f2:c6:db:2e:b5:95:ee:cb:9e:1d:61:
                    8e:fb:3f:7b:0d:92:f8:e3:ba:43:67:6e:45:70:0f:
                    e9:95:b8:78:9a:c0:03:22:f8:ea:57:22:77:fa:06:
                    fc:f1:cc:ad:63:78:5c:29:ef:21:73:1b:75:62:65:
                    ff:26:ab:01:13:75:5b:fc:de:4e:38:f2:c0:01:60:
                    e5:17:6f:bb:ff:14:88:e3:78:b8:d7:b5:3a:4e:bf:
                    a8:f5:05:2c:16:b1:49:fc:27:1b:39:86:b6:f8:03:
                    23:2f:85:85:00:17:b7:6b:6e:54:67:22:66:b0:bc:
                    29:82:6b:d3:b6:9e:6b:a2:81:16:28:0d:94:b1:8a:
                    e6:e6:0d:1b:bb:ce:16:01:1e:bd:71:32:73:1d:e0:
                    f3:3e:23:a3:44:83:39:e9:31:0e:1e:b7:7d:08:ab:
                    0d:d8:a9:b8:4b:cc:a6:9a:a7:a6:c5:cd:2a:e2:79:
                    9b:b3:4d:83:72:95:01:38:ce:8b:81:14:da:a4:54:
                    fa:c5:76:77:d5:d4:c1:37:d9:a7:aa:1a:67:c6:0e:
                    33:7c:d9:1b:75:23:5f:06:26:23:1d:6e:fc:01:5e:
                    9d:5c:81:4f:4e:b8:16:33:bb:4e:46:7c:02:f8:58:
                    8c:c9:28:53:60:b6:30:02:23:15:2c:cc:40:76:7a:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2A:AB:66:6A:1D:8B:CA:3A:0A:A6:F3:88:69:2C:58:D0:92:57:67
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/wyqrZmodi8o6CqbziGksWNCSV2c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:dd:13:98:ae:c8:e9:43:4f:9f:6c:15:01:2f:9e:05:8b:
         b3:f6:ad:b8:32:47:66:21:8c:35:c6:50:22:53:63:ed:ff:09:
         23:cb:78:42:b5:c0:c4:ad:7e:a3:a0:55:0b:62:f0:43:e4:8d:
         39:7a:1e:a4:20:93:d8:5e:7a:a0:96:a1:b8:b1:27:72:73:66:
         78:1e:91:dc:6d:df:15:f3:4d:4c:9b:3f:f1:66:fa:2f:b1:2f:
         ea:fa:36:4b:0f:de:af:3b:81:2c:3f:9e:1c:06:e2:84:df:57:
         47:d7:74:16:8a:16:8b:f2:44:59:47:5e:07:78:5d:4f:19:f3:
         f8:04:83:e6:b7:84:96:4c:b8:52:c0:43:de:6a:bb:e4:af:53:
         4e:68:5d:1d:ed:4e:7b:ed:8b:59:c8:31:33:5d:f3:d6:26:48:
         e7:f7:95:69:1a:61:39:ea:11:d9:f7:85:f7:b2:36:21:ff:de:
         90:94:fe:b9:1d:d5:70:d4:5f:33:fa:fb:f3:87:87:f4:7e:59:
         a2:92:c6:32:48:b1:12:84:c6:3a:a5:e5:8b:94:84:28:36:67:
         a9:77:84:cc:aa:3b:c1:8d:2b:75:47:fc:5b:0e:e5:f9:42:07:
         63:73:c3:ce:0e:05:5f:03:b6:43:9e:0a:db:a7:ba:04:b2:9d:
         0b:22:63:7d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMTA5Mjkw
MjM4MzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEMzMkFBQjY2NkExRDhC
Q0EzQTBBQTZGMzg4NjkyQzU4RDA5MjU3NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVE07yxtsutZXuy54dYY77P3sNkvjjukNnbkVwD+mVuHiawAMi
+OpXInf6BvzxzK1jeFwp7yFzG3ViZf8mqwETdVv83k448sABYOUXb7v/FIjjeLjX
tTpOv6j1BSwWsUn8Jxs5hrb4AyMvhYUAF7drblRnImawvCmCa9O2nmuigRYoDZSx
iubmDRu7zhYBHr1xMnMd4PM+I6NEgznpMQ4et30Iqw3YqbhLzKaap6bFzSrieZuz
TYNylQE4zouBFNqkVPrFdnfV1ME32aeqGmfGDjN82Rt1I18GJiMdbvwBXp1cgU9O
uBYzu05GfAL4WIzJKFNgtjACIxUszEB2ekjxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUwyqrZmodi8o6CqbziGksWNCSV2cwHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vd3lxclptb2RpOG82Q3Fi
emlHa3NXTkNTVjJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BWUAwDANBgkqhkiG9w0BAQsFAAOCAQEAih/dE5iuyOlDT59sFQEvngWLs/atuDJH
ZiGMNcZQIlNj7f8JI8t4QrXAxK1+o6BVC2LwQ+SNOXoepCCT2F56oJahuLEncnNm
eB6R3G3fFfNNTJs/8Wb6L7Ev6vo2Sw/erzuBLD+eHAbihN9XR9d0FooWi/JEWUde
B3hdTxnz+ASD5reElky4UsBD3mq75K9TTmhdHe1Oe+2LWcgxM13z1iZI5/eVaRph
OeoR2feF97I2If/ekJT+uR3VcNRfM/r784eH9H5ZopLGMkixEoTGOqXli5SEKDZn
qXeEzKo7wY0rdUf8Ww7l+UIHY3PDzg4FXwO2Q54K26e6BLKdCyJjfQ==
-----END CERTIFICATE-----