Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JhtBcOUrWPzSd4ALCw7EXubOvrY.roa
File:                     JhtBcOUrWPzSd4ALCw7EXubOvrY.roa (raw, json)
Hash identifier:          Vfxwun4fM+wXWm0TJo9VDcL7CBawF3iYHXfo4gVd1d8=
Subject key identifier:   26:1B:41:70:E5:2B:58:FC:D2:77:80:0B:0B:0E:C4:5E:E6:CE:BE:B6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JhtBcOUrWPzSd4ALCw7EXubOvrY.roa
Signing time:             Thu 15 Sep 2022 02:47:02 +0000
ROA not before:           Thu 15 Sep 2022 02:47:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131611
IP address blocks:        124.9.64.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=261B4170E52B58FCD277800B0B0EC45EE6CEBEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:2a:ed:09:71:6a:66:05:af:03:e9:0a:d9:
                    26:f8:a8:8a:35:96:d3:64:49:2b:a0:0d:5b:83:d2:
                    48:64:a7:07:0e:27:71:31:67:92:aa:18:0e:d5:78:
                    6b:79:86:d0:24:68:4e:c0:0c:44:74:66:e7:45:71:
                    51:84:e3:89:de:dd:27:ae:7e:85:f2:ea:bc:72:4f:
                    da:3b:80:12:7f:e6:fa:bd:72:0e:75:9d:d8:c0:d3:
                    3d:b3:18:88:ad:9d:82:11:75:d7:9b:b1:d5:b4:9f:
                    45:60:44:fa:bb:2a:69:c5:7c:29:1b:f7:34:b1:83:
                    84:59:89:2b:47:78:84:53:d3:df:82:31:ce:0b:8b:
                    a5:de:26:c5:a8:72:f2:8b:ca:dd:cd:86:fb:f8:8e:
                    02:4e:8e:1a:83:f0:c9:53:dc:cc:7b:dd:b5:9a:b7:
                    c4:b6:02:e1:6b:82:22:ed:de:48:b7:b2:b7:7e:f7:
                    61:75:d5:30:e2:15:06:65:d3:81:58:ad:cf:fe:94:
                    e0:97:9d:92:28:97:de:32:83:b6:bc:8c:72:01:41:
                    55:09:ae:3b:32:a8:20:f0:e1:e7:70:92:42:ce:de:
                    0a:57:0e:a2:99:4e:69:5a:ba:e7:9b:57:de:a2:ea:
                    10:10:20:cc:2a:89:43:26:42:af:60:10:85:7c:40:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:41:70:E5:2B:58:FC:D2:77:80:0B:0B:0E:C4:5E:E6:CE:BE:B6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JhtBcOUrWPzSd4ALCw7EXubOvrY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.9.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:f3:4c:11:3e:68:ea:31:93:f8:7d:e5:02:1c:f6:77:4d:88:
         af:e5:95:ba:9f:ed:20:e0:64:3e:ba:e9:49:c5:63:b6:85:0f:
         77:2e:2c:e8:a1:33:c9:52:9a:01:1a:0a:1e:90:00:cc:44:26:
         70:46:9a:a8:e6:d7:d3:37:a2:f8:df:a9:12:80:77:4e:9b:f7:
         4b:25:00:50:ed:68:14:2f:99:2f:5e:13:72:92:e2:de:ee:af:
         46:00:83:56:1e:44:9e:e9:52:8e:91:dd:76:a0:1d:e6:6d:d7:
         ac:60:e3:a6:03:66:9b:79:3b:dc:eb:91:18:a0:d2:db:35:df:
         fb:89:f4:03:34:ea:9e:8d:d7:d9:15:f7:f9:8f:9a:1c:86:48:
         91:5e:1c:2a:0c:8e:d5:6e:4d:47:c5:2d:7d:6b:88:4c:2a:c0:
         d2:df:d1:86:20:e4:2d:d0:b8:4e:4e:c3:85:db:30:3d:7f:3b:
         f1:8d:52:9d:66:60:46:07:f2:fd:b9:92:62:20:e4:87:44:d9:
         11:fb:ab:a1:e3:1c:c5:eb:17:e5:7e:69:0f:8a:16:54:9a:04:
         40:84:8b:50:6e:bc:eb:12:63:ce:e5:b5:09:1e:86:07:26:b6:
         70:11:af:b4:9c:2d:80:3d:70:b7:37:4c:8f:ba:b8:c1:81:5e:
         d0:32:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:57 2025 by rpki-client