Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ArqIzT-CzliZedoSZGAojFbazS0.roa
File:                     ArqIzT-CzliZedoSZGAojFbazS0.roa (raw, json)
Hash identifier:          dub6EMlEaQMGrI4FhI76bJTab3efvpeJ6tyGX5ky9Ec=
Subject key identifier:   02:BA:88:CD:3F:82:CE:58:99:79:DA:12:64:60:28:8C:56:DA:CD:2D
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       080B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ArqIzT-CzliZedoSZGAojFbazS0.roa
Signing time:             Tue 29 Sep 2020 09:57:42 +0000
ROA not before:           Tue 29 Sep 2020 09:57:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.243.64.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=02BA88CD3F82CE589979DA126460288C56DACD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:46:b9:48:6f:a9:b7:c5:8c:9c:4a:ce:72:b9:
                    09:a8:39:0e:f7:df:fb:06:66:a1:02:26:26:b3:1f:
                    62:fd:0a:21:e6:49:b4:5d:24:10:59:f6:58:78:29:
                    e9:64:21:2b:1f:5e:f1:ab:02:58:d8:a6:56:c9:52:
                    95:26:d8:59:61:86:f8:83:5e:0c:f6:a2:45:e5:cd:
                    a3:6f:92:b6:99:36:bd:83:72:63:91:f5:de:83:f3:
                    4d:b5:e7:31:9b:11:84:29:89:0f:22:10:f8:3c:ea:
                    52:b8:c1:e2:ac:45:29:d1:0b:5e:f6:d1:57:17:a4:
                    82:cb:4d:12:ec:2a:18:6a:91:73:ab:3b:a4:71:60:
                    7d:d0:60:39:8a:af:ea:ed:52:52:1d:a3:6c:d6:ab:
                    53:f3:6d:1b:8a:7a:12:a9:20:86:7e:d0:94:79:15:
                    b2:14:52:83:2c:ab:d2:fb:ad:8e:53:ee:4d:bf:42:
                    b2:9c:2d:ef:f2:23:1a:e1:ab:83:41:59:a1:4d:e7:
                    74:c6:a9:c8:91:2b:7d:f9:6d:d6:54:df:6f:7a:89:
                    e8:2a:44:bf:bf:9a:dc:ed:e2:3c:d0:0d:1f:3c:60:
                    5e:73:b0:21:b8:d9:84:61:fe:01:df:0c:83:64:c7:
                    a4:37:48:7b:0b:ca:a6:60:b6:f2:42:46:b1:25:03:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BA:88:CD:3F:82:CE:58:99:79:DA:12:64:60:28:8C:56:DA:CD:2D
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ArqIzT-CzliZedoSZGAojFbazS0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.243.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:b2:45:b2:df:54:d5:ec:d1:0d:e8:5b:2c:43:91:75:c9:
         ba:2c:2d:56:8a:5f:39:02:41:69:70:42:7a:77:a8:57:b2:f7:
         65:cc:c9:69:e1:19:5c:80:bc:35:ae:60:1c:cc:8c:8b:f1:f7:
         ca:37:a5:08:e5:f1:8b:f3:82:76:22:08:e8:82:ad:89:0e:ec:
         8e:3a:39:98:8e:c3:0d:e8:96:77:3c:bb:69:d1:d2:2e:26:d8:
         d4:8e:34:a9:1e:3b:79:60:3e:71:59:19:d1:cd:31:a0:b8:30:
         56:5c:d5:85:13:aa:46:7a:19:f1:07:33:e9:93:0b:58:bd:30:
         23:e8:ff:cb:26:88:10:f1:e5:ce:2d:ac:0b:b2:c1:b5:9a:08:
         72:1f:b3:92:25:54:ec:0c:03:a7:6b:4e:5e:9c:f7:7d:10:55:
         3f:f7:0f:29:67:5e:6d:e5:0c:a8:74:74:28:28:64:a3:4c:6d:
         db:28:81:fa:54:a9:4b:2d:e0:86:a7:8c:d1:df:44:cb:93:92:
         ce:ab:fe:c0:c9:d5:cb:93:12:ef:3b:68:a5:a5:1f:af:04:69:
         cc:d9:80:bf:cc:aa:98:3d:ee:29:a7:5f:ac:da:3a:7e:6b:be:
         36:29:07:20:14:90:8e:82:74:ec:02:ad:f2:d7:24:80:b1:32:
         64:2b:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:00 2025 by rpki-client