Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3VaYev8sRe6N7OrqxJne-g7opkg.roa
File:                     3VaYev8sRe6N7OrqxJne-g7opkg.roa (raw, json)
Hash identifier:          rUl46QEiRifzdmti9YF7CXxxBfPTK2wNjvrFRmLZlvY=
Subject key identifier:   DD:56:98:7A:FF:2C:45:EE:8D:EC:EA:EA:C4:99:DE:FA:0E:E8:A6:48
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0796
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3VaYev8sRe6N7OrqxJne-g7opkg.roa
Signing time:             Tue 29 Sep 2020 10:05:46 +0000
ROA not before:           Tue 29 Sep 2020 10:05:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        61.60.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DD56987AFF2C45EE8DECEAEAC499DEFA0EE8A648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:6a:ae:34:8f:ec:60:4a:5d:50:fb:e5:cb:
                    be:35:ec:69:af:0a:eb:c2:84:e5:db:fd:67:66:f4:
                    11:68:16:65:a5:07:e5:91:a1:0b:dd:a8:f8:75:db:
                    c3:6d:91:6f:98:07:0c:1a:bd:d7:fe:09:b6:05:fc:
                    2b:2c:22:34:58:50:b7:05:6f:06:47:f4:79:68:f6:
                    97:66:7c:cf:65:47:51:7e:9e:27:a4:b5:f1:02:49:
                    01:1f:1c:0f:d3:57:0b:6a:f6:a3:90:0b:d7:6f:d5:
                    c5:60:92:97:ff:96:56:1f:f2:ac:c3:cc:ae:36:26:
                    bf:a4:41:b6:9d:90:50:bc:a5:ca:3e:79:b2:ce:58:
                    c8:16:cd:f4:9d:06:cd:55:12:7f:f2:92:fb:e1:71:
                    78:61:a4:a4:8f:fc:7b:68:4e:5e:bd:6a:15:66:f4:
                    9a:f8:45:14:10:d9:d9:83:58:86:a2:5a:c0:77:bc:
                    cd:fe:13:54:04:06:11:4c:85:93:b1:42:37:42:7c:
                    e3:bb:49:5d:b1:5d:88:3d:ef:86:af:c2:78:d3:77:
                    3d:67:af:bc:54:4d:92:81:09:05:58:5b:f8:af:78:
                    45:7b:02:c2:83:f7:23:b7:c5:ec:61:75:20:d6:42:
                    2f:5f:5a:09:a3:3b:31:fd:a4:de:b4:e3:57:95:e8:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:98:7A:FF:2C:45:EE:8D:EC:EA:EA:C4:99:DE:FA:0E:E8:A6:48
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/3VaYev8sRe6N7OrqxJne-g7opkg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:cd:4e:4a:7f:e4:8c:9c:d0:72:06:ff:31:cd:4c:55:3f:
         e1:c9:82:b8:3f:10:1f:9f:52:e6:e8:b1:5e:0a:68:d0:be:90:
         7a:cb:ac:57:5e:44:32:a0:dc:48:24:68:38:31:a0:a1:45:7e:
         98:6c:40:55:c8:17:89:4c:d2:c2:c4:43:bb:0c:55:d1:3b:29:
         e4:4e:0a:ad:4d:48:72:75:75:a0:f0:12:58:02:43:f3:2a:c2:
         4b:d1:5a:86:ba:5c:df:d2:9c:c9:c3:ad:6a:d5:39:1a:58:cd:
         a5:d1:9a:c6:02:04:59:f1:15:e5:6e:1a:60:a4:0f:1f:3c:a1:
         4b:9f:74:29:18:d5:1e:c4:bf:74:05:50:e4:7c:b3:1e:0e:bf:
         e9:8e:6b:3c:15:52:24:be:4a:4c:0a:a2:8e:97:3d:bd:64:68:
         41:37:3a:de:bf:f6:61:96:f1:1f:4f:ec:56:da:37:3b:5d:ef:
         a5:70:78:35:cd:d9:23:04:ee:2b:56:0d:7b:46:56:18:e2:36:
         12:70:ca:72:17:6e:12:64:61:5c:86:f7:d6:06:51:a9:2f:6d:
         9c:6b:e7:39:12:51:09:4e:af:0f:9b:4d:15:73:29:50:63:d4:
         5a:aa:73:e4:e4:02:89:a5:4b:f3:6c:bc:ec:e2:3c:dc:37:f4:
         ea:72:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org