Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-U7sRm9XGSGu23nsdvJEWxTWKiU.roa
File:                     -U7sRm9XGSGu23nsdvJEWxTWKiU.roa (raw, json)
Hash identifier:          PSYzPSQ3CtbUReYPIwpzKm+2bcvFFEFSm+rhtJ5nYs4=
Subject key identifier:   F9:4E:EC:46:6F:57:19:21:AE:DB:79:EC:76:F2:44:5B:14:D6:2A:25
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0A76
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-U7sRm9XGSGu23nsdvJEWxTWKiU.roa
Signing time:             Sun 07 Feb 2021 11:36:19 +0000
ROA not before:           Sun 07 Feb 2021 11:36:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        124.108.128.0/18 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:36:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F94EEC466F571921AEDB79EC76F2445B14D62A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:62:e8:de:99:6f:02:46:06:a5:71:c2:34:
                    b9:ea:09:03:e3:8f:56:5f:7f:6d:dd:76:aa:04:d1:
                    76:fc:a3:3e:c7:bd:8e:f4:0f:56:3e:4a:dc:7e:4a:
                    ff:8b:ba:26:89:e1:c5:cb:c8:a5:8d:41:3f:18:32:
                    be:0a:b8:ca:44:f2:6e:fd:bc:d3:91:a2:83:12:6d:
                    d4:2b:0f:b2:75:bb:25:eb:92:82:2b:09:d5:a6:22:
                    31:6f:8d:a7:14:da:b2:83:5c:aa:11:56:10:c5:99:
                    b0:4a:d2:87:a1:23:b0:83:6e:f5:4a:bb:7b:12:c8:
                    b6:e0:27:c1:d8:10:14:2d:05:24:f3:17:07:30:48:
                    4b:b7:79:c8:73:23:45:23:6e:b4:51:8c:ac:a6:57:
                    0e:2d:8f:51:59:f6:b1:b6:24:aa:f1:62:ed:6f:5d:
                    08:3e:82:37:97:09:2e:93:bb:59:e1:c2:c4:c8:fc:
                    8f:61:a5:65:0f:52:a5:b8:4e:7f:0a:4c:10:6a:b8:
                    9d:3f:41:da:4f:b2:5d:b0:e7:8f:e0:7d:ea:cc:d5:
                    44:21:a3:cb:96:e9:3d:88:4a:a1:f4:3d:56:c6:f9:
                    02:ed:3e:ac:c0:0d:c8:3f:f5:07:49:b4:e9:19:94:
                    80:93:6d:91:88:3d:57:35:e6:47:f5:19:9c:21:32:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4E:EC:46:6F:57:19:21:AE:DB:79:EC:76:F2:44:5B:14:D6:2A:25
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-U7sRm9XGSGu23nsdvJEWxTWKiU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:93:7b:fe:40:2f:02:ea:d1:3a:73:b3:5b:e0:f6:86:c6:b6:
         b7:57:a0:b3:18:58:b1:05:25:45:26:4a:27:65:11:75:f5:87:
         d4:3b:51:32:e9:bb:84:63:2e:cd:fc:3e:d9:5d:af:a5:80:ca:
         cc:c8:47:a4:c1:19:6e:d7:8e:64:1a:11:52:81:6c:37:55:5a:
         c8:b3:a5:2f:13:4c:35:8f:ee:ca:32:b3:c0:9f:b0:5a:31:82:
         6f:63:5e:27:4b:b9:0b:81:18:9c:0c:c3:73:dc:66:84:a3:27:
         1b:93:ce:a0:9e:85:18:9a:fe:fe:6c:13:ff:f6:bb:46:8f:fc:
         8b:4b:71:4b:b1:bb:9d:79:b8:2c:f1:a3:0e:7c:46:31:5c:85:
         bc:8c:4c:9e:c3:ad:46:7a:b6:07:6d:8b:00:28:2c:32:ba:51:
         2f:3c:a5:c3:f5:be:68:fa:d2:1f:0d:a4:33:a1:63:6a:11:89:
         34:a3:fb:8d:60:9b:ef:21:0a:9d:a8:f1:84:61:23:6f:06:9a:
         0c:f6:54:0e:3d:cb:bd:bd:81:67:17:14:03:2b:0a:6b:0f:07:
         44:93:e2:6a:97:10:f1:20:d8:47:34:77:88:69:10:8d:55:e7:
         af:1a:52:1e:e8:bd:f9:15:d5:e9:3a:e9:04:15:eb:d0:78:1c:
         a3:38:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:42 2025 by rpki-client