Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CBCeNSO04PjTmuTZGbeSQXrerJ0.roa
File:                     CBCeNSO04PjTmuTZGbeSQXrerJ0.roa (raw, json)
Hash identifier:          uaM6bn88kHGZZbS0Rpqv/Jb/uDvIpTzDAhJBJw3K6Jw=
Subject key identifier:   08:10:9E:35:23:B4:E0:F8:D3:9A:E4:D9:19:B7:92:41:7A:DE:AC:9D
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CBCeNSO04PjTmuTZGbeSQXrerJ0.roa
Signing time:             Thu 15 Sep 2022 02:47:06 +0000
ROA not before:           Thu 15 Sep 2022 02:47:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        210.67.192.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=08109E3523B4E0F8D39AE4D919B792417ADEAC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:9d:84:a2:8e:03:f2:01:29:ed:1f:b9:94:
                    27:ca:cf:c4:cf:58:e2:f3:0d:0c:79:26:10:13:ab:
                    a0:2d:c6:74:ff:12:fa:42:60:aa:9a:ce:e6:a6:88:
                    35:2f:0b:e6:fc:6a:56:ec:2b:80:bb:33:c8:92:a4:
                    40:88:08:55:03:94:a2:c1:2b:c6:3c:d4:3d:6c:f9:
                    4c:76:ad:a2:3b:84:e2:b0:cc:fe:61:31:07:5d:fb:
                    ad:cd:d3:47:02:b5:be:91:71:b2:58:c1:1d:1b:ac:
                    8a:02:89:49:9e:c6:e2:b6:7e:b8:e6:8c:5c:8f:d5:
                    a2:97:6e:21:73:8e:8b:b6:9c:83:df:84:d8:3d:65:
                    23:ce:bf:2f:ee:d5:f8:97:f9:4b:2b:f3:eb:d3:da:
                    0c:d6:7c:b2:a1:98:bb:bf:32:f6:c7:c0:24:85:6d:
                    d3:dd:89:28:86:2f:d3:86:b5:7a:90:a7:ee:b2:d0:
                    e1:eb:22:26:11:8c:d1:8e:92:fb:bf:8d:fa:33:ff:
                    69:1f:ba:fe:22:26:73:e3:02:e3:a1:04:e5:70:4a:
                    9a:38:cb:0f:8d:e2:75:cf:b1:e8:64:a6:08:63:50:
                    68:d7:3b:d7:ee:ec:9d:7c:be:fb:a1:81:9b:63:f1:
                    0c:4b:cd:2a:71:69:70:df:41:83:8a:d4:1a:37:e1:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:10:9E:35:23:B4:E0:F8:D3:9A:E4:D9:19:B7:92:41:7A:DE:AC:9D
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CBCeNSO04PjTmuTZGbeSQXrerJ0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:3d:73:1d:73:9c:8d:e1:d2:18:88:33:4b:c9:bb:44:76:
         a5:56:d0:bc:83:eb:96:5f:cd:3e:60:6f:73:77:08:f7:50:b4:
         0d:47:6c:14:3e:68:c2:14:f3:7d:55:b9:65:91:0d:21:87:c6:
         85:c4:d4:8a:46:a6:b8:db:63:a0:0a:ee:88:ac:41:7a:2e:77:
         d2:6b:ee:ff:e3:12:f2:1a:91:92:73:a4:50:81:4e:75:59:69:
         4f:eb:f5:9b:c8:fb:3b:e3:d8:5f:51:c5:39:c4:79:65:27:66:
         06:84:93:ed:37:dd:3c:b0:1a:b1:02:41:ee:d8:93:2c:2c:a9:
         a9:9e:04:d8:c6:02:50:e3:ce:94:12:b2:46:c5:83:70:bb:a0:
         59:94:a7:d2:3c:27:15:ed:f9:04:02:f6:c3:6d:bf:9c:2d:1b:
         f4:9c:f1:84:d0:7d:5d:a7:99:a8:08:ed:87:5d:19:af:4b:9b:
         57:12:67:64:00:65:e4:a0:14:88:ac:34:9b:e7:0f:1b:ce:10:
         62:4e:f6:d5:4a:03:a4:e1:4f:30:a8:0f:c8:61:7a:b0:8b:4e:
         2b:78:eb:b1:b2:32:3f:98:39:e2:46:ed:c3:a5:40:a6:99:8a:
         89:ec:ed:a1:e0:94:5a:a8:28:89:25:db:c5:15:46:42:c2:36:
         18:d6:95:ba
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA4MTA5RTM1MjNCNEUw
RjhEMzlBRTREOTE5Qjc5MjQxN0FERUFDOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMzp2Eoo4D8gEp7R+5lCfKz8TPWOLzDQx5JhATq6AtxnT/EvpC
YKqazuamiDUvC+b8albsK4C7M8iSpECICFUDlKLBK8Y81D1s+Ux2raI7hOKwzP5h
MQdd+63N00cCtb6RcbJYwR0brIoCiUmexuK2frjmjFyP1aKXbiFzjou2nIPfhNg9
ZSPOvy/u1fiX+Usr8+vT2gzWfLKhmLu/MvbHwCSFbdPdiSiGL9OGtXqQp+6y0OHr
IiYRjNGOkvu/jfoz/2kfuv4iJnPjAuOhBOVwSpo4yw+N4nXPsehkpghjUGjXO9fu
7J18vvuhgZtj8QxLzSpxaXDfQYOK1Bo34dlfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUCBCeNSO04PjTmuTZGbeSQXrerJ0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvQ0JDZU5TTzA0UGpUbXVU
WkdiZVNRWHJlckowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BNJDwDANBgkqhkiG9w0BAQsFAAOCAQEAFKA9cx1znI3h0hiIM0vJu0R2pVbQvIPr
ll/NPmBvc3cI91C0DUdsFD5owhTzfVW5ZZENIYfGhcTUikamuNtjoAruiKxBei53
0mvu/+MS8hqRknOkUIFOdVlpT+v1m8j7O+PYX1HFOcR5ZSdmBoST7TfdPLAasQJB
7tiTLCypqZ4E2MYCUOPOlBKyRsWDcLugWZSn0jwnFe35BAL2w22/nC0b9JzxhNB9
XaeZqAjth10Zr0ubVxJnZABl5KAUiKw0m+cPG84QYk721UoDpOFPMKgPyGF6sItO
K3jrsbIyP5g54kbtw6VAppmKieztoeCUWqgoiSXbxRVGQsI2GNaVug==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:14 2025 by rpki-client