Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4eYH-soEOpIDS5yKWLvNDGNSU_4.roa
File:                     4eYH-soEOpIDS5yKWLvNDGNSU_4.roa (raw, json)
Hash identifier:          Ej5GF3Hx8DJZXRO2BT9oT+6dxFgPRiqMgXfblDrQmBY=
Subject key identifier:   E1:E6:07:FA:CA:04:3A:92:03:4B:9C:8A:58:BB:CD:0C:63:52:53:FE
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DA5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4eYH-soEOpIDS5yKWLvNDGNSU_4.roa
Signing time:             Thu 28 Jul 2022 09:35:05 +0000
ROA not before:           Thu 28 Jul 2022 09:35:05 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        203.105.224.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3493 (0xda5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Jul 28 09:35:05 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E1E607FACA043A92034B9C8A58BBCD0C635253FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b8:0d:1b:d3:a2:0e:e8:bc:58:96:92:50:61:
                    6a:13:65:e8:0a:63:30:cd:72:83:57:58:e4:86:90:
                    61:8b:2d:19:b6:72:1b:60:fc:73:fb:48:76:e0:85:
                    03:b9:44:90:fe:92:41:c0:ac:26:c5:5a:ee:9d:84:
                    3c:12:64:9f:0e:22:90:73:3e:88:e8:4a:e2:74:0d:
                    94:b5:9a:91:c0:2e:61:3f:bd:23:75:33:c0:40:ae:
                    c7:d7:20:73:20:0d:8e:60:96:fa:f6:79:da:0d:fc:
                    c6:98:f7:45:65:cb:a0:c4:49:42:f9:06:f8:3c:c7:
                    95:d7:15:d5:80:ca:24:b8:85:2b:30:ff:84:27:f8:
                    09:46:18:86:72:05:99:56:11:d2:80:a7:c2:0b:03:
                    a9:23:6d:93:e3:93:8f:ee:6d:df:9d:2f:28:29:9d:
                    8d:e3:0b:9a:ac:50:d9:c7:71:34:3f:e3:b7:ed:c1:
                    77:7f:70:f2:ae:9b:7b:44:c1:69:2c:0e:3e:c8:7f:
                    81:99:93:b7:0c:76:f5:29:59:9c:ae:0a:dc:52:e7:
                    e1:e5:d3:aa:6b:e6:98:b5:9f:ec:ba:87:5e:f3:0d:
                    e5:25:3d:69:02:69:3e:8b:62:5b:36:5b:95:13:fe:
                    c8:c3:c8:74:58:71:22:aa:0d:6a:be:c1:57:0d:6a:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E6:07:FA:CA:04:3A:92:03:4B:9C:8A:58:BB:CD:0C:63:52:53:FE
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4eYH-soEOpIDS5yKWLvNDGNSU_4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:90:b8:fe:5a:1b:8d:42:2c:72:1d:36:7c:26:44:0f:1b:5e:
         d7:22:04:d6:1c:ff:b3:7a:1a:00:5f:b4:ff:8d:cd:58:93:eb:
         c3:6a:69:e4:83:21:05:7d:20:cb:9b:36:14:55:68:e5:7c:97:
         cd:f8:06:7d:f5:48:89:dd:6e:f6:8d:b0:6d:b7:56:ed:d8:79:
         eb:be:b0:ba:d0:d2:f4:15:82:8f:dd:a4:a0:a2:d2:8a:cc:52:
         25:1d:82:cc:7c:81:35:8f:82:ed:e7:1f:61:8c:a3:53:b0:af:
         ab:d5:fc:de:db:47:0b:8d:af:fe:a8:d6:61:a9:44:19:84:fd:
         de:88:23:80:8f:a0:f6:d0:2e:48:db:8c:75:84:0f:b6:5c:22:
         63:af:0c:90:73:e9:54:e5:19:d0:ad:64:35:59:f2:fc:b4:cd:
         8a:68:bf:14:31:da:67:12:23:ac:df:c3:a4:79:44:dd:41:4a:
         23:4f:c7:31:57:ce:81:50:0f:b5:fd:f6:d2:b0:b5:7e:0f:aa:
         44:23:e7:5a:8c:56:06:2d:5b:51:db:c9:22:e7:b5:56:8f:00:
         1d:e6:cd:89:54:ed:85:15:2a:d1:e4:ed:78:30:65:4f:33:d6:
         5b:95:3a:a7:f1:63:d4:32:ce:20:fc:94:e3:8d:8f:b5:2c:e3:
         8e:40:c1:d6
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA3Mjgw
OTM1MDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEUxRTYwN0ZBQ0EwNDNB
OTIwMzRCOUM4QTU4QkJDRDBDNjM1MjUzRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnuA0b06IO6LxYlpJQYWoTZegKYzDNcoNXWOSGkGGLLRm2chtg
/HP7SHbghQO5RJD+kkHArCbFWu6dhDwSZJ8OIpBzPojoSuJ0DZS1mpHALmE/vSN1
M8BArsfXIHMgDY5glvr2edoN/MaY90Vly6DESUL5Bvg8x5XXFdWAyiS4hSsw/4Qn
+AlGGIZyBZlWEdKAp8ILA6kjbZPjk4/ubd+dLygpnY3jC5qsUNnHcTQ/47ftwXd/
cPKum3tEwWksDj7If4GZk7cMdvUpWZyuCtxS5+Hl06pr5pi1n+y6h17zDeUlPWkC
aT6LYls2W5UT/sjDyHRYcSKqDWq+wVcNaoRXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU4eYH+soEOpIDS5yKWLvNDGNSU/4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNGVZSC1zb0VPcElEUzV5
S1dMdk5ER05TVV80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMtp4DANBgkqhkiG9w0BAQsFAAOCAQEATJC4/lobjUIsch02fCZEDxte1yIE1hz/
s3oaAF+0/43NWJPrw2pp5IMhBX0gy5s2FFVo5XyXzfgGffVIid1u9o2wbbdW7dh5
676wutDS9BWCj92koKLSisxSJR2CzHyBNY+C7ecfYYyjU7Cvq9X83ttHC42v/qjW
YalEGYT93ogjgI+g9tAuSNuMdYQPtlwiY68MkHPpVOUZ0K1kNVny/LTNimi/FDHa
ZxIjrN/DpHlE3UFKI0/HMVfOgVAPtf320rC1fg+qRCPnWoxWBi1bUdvJIue1Vo8A
HebNiVTthRUq0eTteDBlTzPWW5U6p/Fj1DLOIPyU442PtSzjjkDB1g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:07 2025 by rpki-client