Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/VwMT6qTR-jIfuOcXduecCa29X0U.roa
File:                     VwMT6qTR-jIfuOcXduecCa29X0U.roa (raw, json)
Hash identifier:          p7HWcMJKGvbfda1WgrSa8QQv7czGTpyDH/e1ti1boAo=
Subject key identifier:   57:03:13:EA:A4:D1:FA:32:1F:B8:E7:17:76:E7:9C:09:AD:BD:5F:45
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       09BC
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/VwMT6qTR-jIfuOcXduecCa29X0U.roa
Signing time:             Wed 29 Sep 2021 02:38:35 +0000
ROA not before:           Wed 29 Sep 2021 02:38:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9676
IP address blocks:        61.63.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 02:38:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=570313EAA4D1FA321FB8E71776E79C09ADBD5F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:bd:2a:ec:a3:8e:bb:8e:f9:2a:79:5a:60:
                    27:f3:c0:9a:4e:88:28:9f:53:6e:0b:af:4e:61:4d:
                    2e:89:d9:90:c1:44:98:6c:db:8f:41:a1:c4:1e:7d:
                    8f:9f:8c:8e:8c:10:cc:64:db:77:44:06:31:5a:1b:
                    51:1a:e8:46:5d:e1:37:f9:d2:0e:b1:9e:a1:69:34:
                    de:bc:a7:6f:f7:92:db:7c:9b:00:06:fa:03:7b:b8:
                    fa:29:1b:ea:87:d9:2b:03:d8:32:2f:fa:1c:89:8b:
                    1d:01:7e:e3:f4:80:b2:44:8f:4d:23:a7:ce:9e:a2:
                    9f:64:8a:1a:9f:46:65:ec:32:68:fe:ee:4e:26:b0:
                    8b:1a:3a:1f:59:93:e0:09:47:1b:26:7e:8a:b3:10:
                    7c:ae:81:e7:22:42:52:c4:25:9c:e0:71:82:40:7a:
                    94:8a:18:20:fc:ec:6e:f3:d5:9c:63:1c:c8:c0:f5:
                    d7:6d:a2:68:fc:99:0d:a2:0b:41:59:7c:3a:3e:65:
                    c2:cd:0c:0a:94:b5:1e:29:18:af:64:21:30:59:48:
                    6f:e1:79:12:7a:b5:65:e2:34:5f:6e:ba:77:3e:d9:
                    d6:eb:d8:b6:4a:8a:22:26:ad:27:25:76:80:da:40:
                    6f:83:ba:18:9a:f4:28:1a:b0:e6:18:2e:74:fa:af:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:13:EA:A4:D1:FA:32:1F:B8:E7:17:76:E7:9C:09:AD:BD:5F:45
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/VwMT6qTR-jIfuOcXduecCa29X0U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:b5:8d:ed:8a:9b:ef:c6:a4:1f:a7:70:6b:c7:58:bd:86:e9:
         ca:01:e5:98:93:9e:fa:b0:80:15:40:1e:ea:7a:7b:d6:b6:40:
         1c:da:3a:45:f7:fb:d1:49:50:e4:b2:36:48:bd:43:39:46:75:
         cc:b6:45:6d:f4:95:20:28:2d:f2:ca:0a:0f:5c:0f:0d:7f:9c:
         57:a9:e6:78:74:0b:69:6f:ca:d7:e0:94:44:e1:f5:ea:4d:d7:
         f7:2a:0b:78:e0:7b:ae:a6:a7:d2:73:44:76:73:a1:8e:26:77:
         e1:3d:2a:07:33:8f:a9:56:62:53:93:ee:3f:fd:a2:b7:f3:47:
         d5:61:d0:64:29:e2:36:19:ea:70:1b:d4:bc:99:e3:05:4b:0e:
         30:fc:a5:66:ab:86:72:32:c3:ee:6a:60:9b:aa:40:6d:11:9d:
         b0:d5:a7:67:59:b6:dc:e1:4a:97:db:18:d0:08:f2:00:7a:22:
         5b:7f:17:89:eb:2c:03:27:93:91:0d:a1:c9:35:9d:cb:61:6d:
         a6:6e:42:1a:d6:4d:58:47:1f:b6:6a:77:5b:9f:85:5f:c2:d2:
         aa:76:0a:41:69:53:66:07:d8:31:38:f2:01:b0:16:f7:2c:cc:
         23:77:10:fe:90:fe:4c:82:b5:51:9e:ed:70:c1:34:bd:b0:21:
         20:9a:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org