Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/19-rkAuqO6fhUB8MQgmkkqVUXOM.roa
File:                     19-rkAuqO6fhUB8MQgmkkqVUXOM.roa (raw, json)
Hash identifier:          NTzqD3jFy2ZyOwSBDWh0tFi9JnzYKlgOMgupbUfrMiU=
Subject key identifier:   D7:DF:AB:90:0B:AA:3B:A7:E1:50:1F:0C:42:09:A4:92:A5:54:5C:E3
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09C4
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/19-rkAuqO6fhUB8MQgmkkqVUXOM.roa
Signing time:             Wed 29 Sep 2021 02:38:37 +0000
ROA not before:           Wed 29 Sep 2021 02:38:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        210.62.176.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2500 (0x9c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D7DFAB900BAA3BA7E1501F0C4209A492A5545CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:59:8c:4d:d6:32:dc:d2:a8:0b:f1:b5:79:
                    83:d1:a3:2d:07:e1:18:94:c8:a7:15:64:68:91:ad:
                    e7:03:12:21:0a:73:7a:58:55:81:a0:c5:e7:e8:e1:
                    f5:a5:f5:28:f2:2f:eb:52:de:ed:f4:68:7c:46:93:
                    d0:c1:89:50:39:e8:3a:a7:00:b4:50:4f:6c:0a:ad:
                    71:19:34:8e:7f:40:70:1a:d1:64:b5:81:69:76:3c:
                    c5:c9:1a:06:ef:69:00:a4:4e:fd:ee:68:c3:77:c7:
                    da:86:1f:54:44:c4:d4:8c:07:b3:c2:71:88:7a:99:
                    1e:a1:05:79:23:10:1e:ba:4b:5d:ca:a3:12:af:17:
                    9d:cb:d7:72:5f:cb:ae:22:5c:19:0e:d5:5e:51:bc:
                    77:0e:3b:62:cb:37:d8:0b:cd:db:2f:09:a9:6e:16:
                    aa:11:35:81:ff:fa:cb:ae:25:c7:3f:4d:57:af:37:
                    ca:1c:6e:d5:5a:c1:53:b9:0e:05:b6:65:fe:e5:ae:
                    7e:96:83:b2:a3:3d:97:a0:05:14:ff:ac:63:f5:75:
                    d4:88:b5:c8:49:d8:7e:dd:c3:b4:33:07:1c:75:48:
                    fe:07:06:51:a3:b9:41:49:c7:4a:46:ff:3b:d8:b2:
                    9c:12:6e:cc:7c:1a:45:29:4c:5e:56:71:c6:d1:7f:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DF:AB:90:0B:AA:3B:A7:E1:50:1F:0C:42:09:A4:92:A5:54:5C:E3
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/19-rkAuqO6fhUB8MQgmkkqVUXOM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:fd:59:6d:4e:16:ed:8a:a5:f6:17:7d:cf:32:3b:96:f7:
         cd:28:bf:f5:4e:03:ac:f7:d0:46:2c:07:29:e8:dd:90:5b:2b:
         b4:93:35:ca:48:01:66:59:88:2f:ec:95:f0:fb:01:b8:06:e4:
         25:82:c6:c8:51:7f:04:28:ac:51:78:fd:51:82:87:91:87:0e:
         2d:95:b2:72:bb:18:01:a1:80:d1:c4:0f:db:0e:24:03:60:4a:
         cd:d3:bf:2d:5b:5f:86:17:92:cc:11:3a:14:e2:30:4a:72:45:
         bb:79:aa:e5:d3:17:f1:75:8d:f8:62:cc:6d:9d:87:1b:5a:50:
         c3:f4:e4:72:8e:87:c1:fc:88:29:56:e4:f1:67:47:dd:6f:b9:
         8f:b4:7a:51:23:95:46:19:83:43:f7:6f:71:96:cb:24:20:c5:
         2d:49:41:d9:c0:25:2e:9c:62:9c:e1:18:16:4e:ef:d3:1f:ed:
         64:c0:4d:d4:9e:0b:3b:a0:20:d5:7a:3f:f5:c1:b1:29:32:13:
         8b:29:46:a6:84:67:0d:fa:74:13:21:bd:95:11:fa:65:4a:27:
         38:d9:5c:a8:0d:84:6d:c0:11:b9:51:b6:48:8f:9e:82:b3:d9:
         cd:fe:8a:7a:4c:f0:4d:83:af:92:ff:18:83:e0:fa:e2:bf:f4:
         cd:6e:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:50 2025 by rpki-client