Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/BfEaUjEJLm6ydzgZTfrAMkxThdM.roa
File:                     BfEaUjEJLm6ydzgZTfrAMkxThdM.roa (raw, json)
Hash identifier:          7/oRGxUGRrxucj9e1czV1oXCbCc/HKe+tV3xFWiuw+M=
Subject key identifier:   05:F1:1A:52:31:09:2E:6E:B2:77:38:19:4D:FA:C0:32:4C:53:85:D3
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09BE
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/BfEaUjEJLm6ydzgZTfrAMkxThdM.roa
Signing time:             Wed 29 Sep 2021 02:38:35 +0000
ROA not before:           Wed 29 Sep 2021 02:38:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        61.60.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=05F11A5231092E6EB27738194DFAC0324C5385D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:3a:85:40:4d:ad:17:cf:2c:7e:f5:6a:2e:
                    d7:96:9a:37:40:f6:7b:6a:0e:f5:49:79:52:b5:0f:
                    77:da:2e:b1:0d:40:da:c6:74:32:22:8c:56:67:b4:
                    a6:9f:6f:cc:ad:b6:38:ee:db:5f:34:a3:7f:30:a9:
                    01:82:b1:08:db:b8:bd:d1:c2:a0:38:88:f9:dc:41:
                    91:f4:5a:10:96:85:a7:b7:61:b6:a1:bc:da:97:dd:
                    07:1a:27:a3:96:4d:17:a5:a1:84:84:f9:04:f9:3c:
                    57:0d:ec:1d:29:12:5f:93:dd:2b:94:f0:ec:fa:bd:
                    61:76:ec:df:ff:1e:48:1c:96:82:52:8a:5b:b6:6c:
                    05:e7:67:f5:0e:f9:c7:30:3d:33:5c:f4:0b:47:51:
                    85:1b:06:e5:71:e6:35:69:20:3c:0e:17:e5:10:2d:
                    6a:98:80:d3:11:8e:e5:55:ec:8a:c0:08:35:f2:d1:
                    17:14:dc:08:4e:8b:a8:d1:5e:0a:a9:38:fd:3e:82:
                    f0:50:c2:44:98:fe:4d:c1:84:48:9f:64:54:75:bb:
                    2b:65:ed:10:23:19:65:b9:4f:db:73:85:fa:41:0f:
                    6a:98:e0:43:d5:dd:4d:89:c2:32:51:9e:df:70:f4:
                    5c:60:bf:0f:2e:6f:19:13:73:16:3a:06:b7:31:d7:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F1:1A:52:31:09:2E:6E:B2:77:38:19:4D:FA:C0:32:4C:53:85:D3
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/BfEaUjEJLm6ydzgZTfrAMkxThdM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:8a:2b:25:08:c0:bd:36:e1:4e:02:b7:75:bb:7f:b1:e2:
         28:77:27:86:47:91:e5:72:bb:19:be:9f:a1:23:50:dc:08:48:
         26:5a:eb:f7:dc:cf:fd:f1:c9:02:a8:e0:be:2c:fd:db:42:b8:
         2b:db:f8:c8:ab:a3:15:62:44:64:70:a2:f6:26:f1:6f:d0:93:
         97:45:83:bb:19:2e:26:76:6c:c1:70:46:48:af:51:5f:10:48:
         c6:7b:af:86:9b:39:bc:4b:30:2e:89:b2:5d:3e:b7:32:91:56:
         5a:5d:ff:c0:cf:9c:c4:e8:e6:07:2d:d6:5d:70:83:e0:1e:b8:
         cf:ee:a4:bd:23:dd:b4:0a:f3:30:ef:5e:be:32:42:8a:a8:b0:
         99:ac:32:36:3e:fa:14:7e:8f:1e:43:32:e2:9a:fd:1e:91:4e:
         8c:26:c7:9e:3f:f5:87:7a:52:2f:bc:b0:b7:c6:66:21:1a:e1:
         c9:85:72:6b:ec:ff:e9:57:d0:e2:cb:38:99:10:68:9f:b0:e4:
         ec:15:55:39:07:a6:0c:da:cc:66:52:f5:f1:8e:34:86:63:ec:
         f5:0c:18:ba:ec:65:c7:a0:14:39:9c:d6:93:5c:58:25:a1:05:
         3b:d6:e9:a7:8d:48:d1:4b:c8:f5:32:45:3f:6c:95:b6:3f:b3:
         ec:d5:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:07 2025 by rpki-client