Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7bRM2szJS0gSOeLTIfu2hNTDjqU.roa
File:                     7bRM2szJS0gSOeLTIfu2hNTDjqU.roa (raw, json)
Hash identifier:          3+S3TerSxlbdIDXdRXSTgZycn+e8Nvll4D1X/JxU+3o=
Subject key identifier:   ED:B4:4C:DA:CC:C9:4B:48:12:39:E2:D3:21:FB:B6:84:D4:C3:8E:A5
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0909
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7bRM2szJS0gSOeLTIfu2hNTDjqU.roa
Signing time:             Sun 07 Feb 2021 11:55:05 +0000
ROA not before:           Sun 07 Feb 2021 11:55:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        211.79.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Feb  7 11:55:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EDB44CDACCC94B481239E2D321FBB684D4C38EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:b5:c9:87:dd:96:45:5e:68:5a:0c:2b:45:
                    f2:9b:e1:39:5d:00:61:7f:87:f0:bc:61:a9:52:15:
                    62:e5:ec:d4:2c:ea:68:d1:90:cd:00:5b:1e:b3:bc:
                    0c:a2:e8:e0:6d:87:58:d9:7e:b9:92:72:51:d4:5d:
                    28:31:69:3d:a9:d4:64:40:0b:10:3f:94:26:d5:cf:
                    15:d6:b4:81:a9:9d:7e:7a:70:2c:7d:44:16:b2:91:
                    45:d0:ab:6e:12:1a:0f:6c:2d:ba:57:42:1e:58:d9:
                    d0:1e:79:e4:58:44:df:7b:18:ba:4b:80:43:16:fd:
                    0d:97:a4:2b:93:a3:16:70:d9:c0:ab:05:ca:ea:69:
                    af:ce:27:08:cf:a2:e7:4e:b2:35:0c:cb:b1:e6:f8:
                    84:c2:7b:f2:82:a3:34:3a:7b:f1:f5:c3:f1:44:c8:
                    d9:d4:3c:44:d6:f7:3c:dc:c3:99:ce:10:9a:51:2b:
                    19:00:db:45:95:a8:eb:57:e0:2a:59:3e:06:0a:24:
                    f9:4b:25:f1:09:cc:ba:15:64:c9:ce:6e:0b:78:ac:
                    32:a0:08:c6:c8:d6:07:bc:af:7c:37:5a:ca:73:0a:
                    0e:0c:3f:32:81:65:8d:8b:ce:e3:98:87:66:a0:69:
                    88:c5:2d:0d:6a:14:10:27:88:2b:fc:5d:53:e4:e8:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B4:4C:DA:CC:C9:4B:48:12:39:E2:D3:21:FB:B6:84:D4:C3:8E:A5
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/7bRM2szJS0gSOeLTIfu2hNTDjqU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:56:69:6e:66:4f:19:7a:f4:ca:ec:c3:6a:dd:d9:4e:69:
         1e:c9:34:1c:a5:1f:ee:75:35:bb:f6:d9:6a:6e:0e:85:8d:4d:
         59:b2:df:a2:4b:5a:0b:7d:bd:20:0f:cc:0b:3d:22:7b:05:c1:
         3d:2e:62:6b:3e:52:69:ba:84:d1:d3:c0:70:45:b2:78:83:b8:
         b4:08:0c:71:eb:26:8a:bd:b2:f8:8b:48:b3:ac:f2:cc:b2:68:
         39:39:46:31:9f:98:e4:44:f4:c5:85:45:13:75:a8:c7:96:77:
         4e:dd:09:d3:00:84:73:a0:02:be:0d:ea:12:0c:d9:c6:9c:a4:
         6b:86:89:5c:58:22:7b:8b:82:e5:8e:6e:55:e9:f9:66:7b:f2:
         cc:90:43:f8:56:d4:8e:5b:d7:15:6d:9c:e2:1e:15:c8:29:68:
         16:aa:b5:52:f2:83:15:75:c8:77:19:dc:84:d4:97:29:23:0c:
         b4:ba:16:48:dd:88:dd:2d:cd:b0:5b:73:cb:0c:0c:14:e4:f8:
         5c:fc:20:e5:80:58:b1:96:7c:c9:c3:92:d6:6f:e9:1c:d1:b7:
         b0:ac:73:6d:d2:5f:d3:c6:c1:69:d9:ae:f9:39:9f:d6:05:ba:
         32:c6:6f:da:fc:ab:95:7c:8a:71:35:94:f7:f2:bf:5e:5f:ec:
         0e:60:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org