Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/eHjilTdSUlqtfTNh-vqyGpyK3Is.roa
File:                     eHjilTdSUlqtfTNh-vqyGpyK3Is.roa (raw, json)
Hash identifier:          /0CivfbkEJ+HJHQf3WOqtw9v7rVuDJ3MtUez7KWUuaE=
Subject key identifier:   78:78:E2:95:37:52:52:5A:AD:7D:33:61:FA:FA:B2:1A:9C:8A:DC:8B
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       07A1
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/eHjilTdSUlqtfTNh-vqyGpyK3Is.roa
Signing time:             Tue 29 Sep 2020 10:05:48 +0000
ROA not before:           Tue 29 Sep 2020 10:05:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9676
IP address blocks:        122.201.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953 (0x7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 29 10:05:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7878E2953752525AAD7D3361FAFAB21A9C8ADC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:fb:27:2d:32:dd:b8:75:13:16:12:e7:bf:
                    c2:66:2c:d7:05:38:29:57:8a:5b:f6:22:65:2e:5c:
                    b7:4a:93:51:3f:00:bf:db:08:4b:66:06:19:68:e9:
                    01:8f:00:9d:84:65:f7:c1:62:81:29:37:6a:c2:f7:
                    40:20:8a:cd:02:a2:69:c4:e5:ed:20:2f:19:f5:4c:
                    a9:5f:cf:9d:3a:0e:6c:3e:4e:c2:2a:29:cb:f2:17:
                    0b:c2:bb:a7:9b:56:79:87:ad:a3:39:14:59:37:71:
                    03:c0:18:a7:83:4b:94:c1:8a:71:a9:42:75:31:df:
                    59:93:2e:02:f8:79:69:44:ef:fc:61:59:e7:c0:9a:
                    05:ac:9e:c1:41:2e:2d:fc:96:5b:b9:31:da:ce:cb:
                    f5:2e:9a:7a:fa:6c:c5:2e:dc:44:98:a6:fb:ba:bf:
                    14:f1:a8:8d:a5:ed:4f:eb:cc:fd:b5:82:3f:79:88:
                    6d:67:ce:f3:06:b2:f0:ca:7e:99:7d:6d:21:7d:38:
                    4b:b7:94:ea:d3:51:c5:d7:94:ff:5e:93:9f:c4:3f:
                    0e:57:bc:77:be:c0:e1:c8:99:70:53:e0:9b:78:0b:
                    0f:d9:67:08:56:78:f0:54:f2:f7:8d:c2:d7:05:bf:
                    08:6f:42:a0:17:76:32:9d:fa:7e:d4:81:6f:58:ca:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:E2:95:37:52:52:5A:AD:7D:33:61:FA:FA:B2:1A:9C:8A:DC:8B
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/eHjilTdSUlqtfTNh-vqyGpyK3Is.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:b6:2a:91:0e:ce:b0:a5:af:4c:f4:dd:b3:19:7f:e7:17:
         26:4c:21:3b:87:79:8d:ef:39:b5:2a:a8:17:23:89:0b:46:5d:
         75:57:4c:ea:e1:e9:13:a5:e8:72:4e:2f:30:a3:5e:cd:f4:a6:
         db:6d:ed:a9:0f:d3:2a:bd:c1:fa:6e:b9:e5:cd:c1:6b:10:e7:
         d3:37:c8:fc:e6:d3:43:f1:ac:3a:11:37:d7:88:36:00:b9:6c:
         ad:e3:e0:ef:7a:fe:9e:e1:7a:71:80:5d:f0:18:84:9c:45:dc:
         47:e1:79:4f:d8:6c:a7:d2:99:f6:1b:de:45:0e:08:cc:ec:bb:
         4e:81:4b:b5:3e:b7:61:81:54:18:d8:3f:78:26:32:e4:99:b8:
         f5:14:f3:10:55:5b:1e:ed:68:4b:47:82:d3:36:e9:08:a9:ec:
         bc:70:63:db:f0:3b:5c:e1:42:35:11:26:9b:a9:39:e6:86:d6:
         60:ee:0b:61:d3:4c:25:be:22:f6:02:b7:0e:b6:62:25:d9:e6:
         9e:25:da:ce:28:a1:af:a0:2d:8f:98:0b:c0:ff:0e:27:7b:bd:
         a3:9d:96:54:4a:99:10:a8:89:7b:f3:b8:0b:9b:2e:a5:7a:90:
         7c:0c:89:59:20:a3:d6:56:27:68:c9:8a:4e:61:eb:36:81:2e:
         2a:3c:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org