Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RoANIRENqPNHSmaU--Piea8_0Ws.roa
File:                     RoANIRENqPNHSmaU--Piea8_0Ws.roa (raw, json)
Hash identifier:          l+I+C6RMtconMUVpj6/AFbh/gkdOIESRRabXiqGZxS4=
Subject key identifier:   46:80:0D:21:11:0D:A8:F3:47:4A:66:94:FB:E3:E2:79:AF:3F:D1:6B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B1E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RoANIRENqPNHSmaU--Piea8_0Ws.roa
Signing time:             Sun 07 Feb 2021 13:10:24 +0000
ROA not before:           Sun 07 Feb 2021 13:10:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.162.0/24 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2846 (0xb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:24 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=46800D21110DA8F3474A6694FBE3E279AF3FD16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:35:90:70:ec:e7:23:e7:6b:05:ad:f1:dc:
                    6d:8f:ce:15:db:9e:58:a3:f7:f7:ca:da:d1:f2:4d:
                    4c:2f:5b:1e:05:53:ce:54:32:66:79:9c:b7:1d:81:
                    fe:9d:5c:a9:ad:56:5a:36:bb:30:5b:85:6f:7f:83:
                    65:30:a2:11:10:2c:ff:67:bf:1c:3f:80:8c:30:14:
                    8a:7a:86:73:c0:40:63:4f:36:69:f5:da:75:c2:72:
                    10:2c:ec:c5:0e:42:ad:e1:02:5f:c4:50:6f:da:50:
                    7a:ac:89:5b:e2:47:92:47:06:54:76:20:c4:a5:eb:
                    83:e7:0f:67:63:e3:00:a3:53:21:91:44:8f:79:44:
                    53:13:a1:d9:95:84:02:f4:68:19:be:34:5d:9c:88:
                    db:08:93:44:ae:dd:72:73:7c:a8:9a:b3:44:27:e3:
                    95:f9:0f:67:ad:00:62:35:38:05:86:6c:7d:07:15:
                    02:33:00:78:3d:0b:b8:7a:f7:e0:75:28:76:6c:50:
                    47:40:27:61:27:19:a3:18:37:8c:e9:d4:7a:7f:2c:
                    5f:5d:41:f7:ac:a8:8d:12:1a:86:e5:cf:e0:aa:02:
                    1b:8d:d5:83:1d:1b:8b:f6:3f:58:95:b9:7c:ee:7d:
                    f3:57:70:22:61:89:bc:75:94:6b:ce:6f:af:b0:6f:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:0D:21:11:0D:A8:F3:47:4A:66:94:FB:E3:E2:79:AF:3F:D1:6B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RoANIRENqPNHSmaU--Piea8_0Ws.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:75:df:28:8a:d1:b5:5b:68:51:3e:38:ad:67:4a:5a:be:13:
         38:5c:0a:3e:8f:12:51:ec:b3:8f:91:bc:dc:27:3a:eb:ba:25:
         e1:fa:ee:72:05:0e:24:b7:a0:82:d1:e7:9b:6d:74:09:eb:36:
         74:63:90:0b:23:a6:bf:b9:93:74:e4:eb:f7:20:89:07:d8:c7:
         20:a8:2d:b2:2c:50:e3:a9:23:98:31:e9:5d:c6:ce:89:dc:7e:
         d7:de:39:de:c1:c1:7b:af:46:d0:1b:a2:4f:ad:52:df:51:12:
         10:ea:d0:d2:71:fb:9a:d0:5e:f1:25:99:71:eb:bf:44:e0:4b:
         56:0b:dc:42:45:8e:83:4e:ce:90:6b:5f:07:25:a3:ed:60:fa:
         fc:70:ba:f9:88:e6:3f:5a:02:dd:bb:12:89:64:00:5a:0c:a9:
         6a:85:a0:91:00:ec:0a:78:db:18:07:c3:48:14:7a:38:e9:dc:
         04:a7:f5:fc:1f:3f:59:79:04:a7:84:7e:9b:ac:a3:4a:f9:35:
         32:ac:b1:8f:c0:8b:fe:34:46:96:e5:dc:e1:ab:d6:f9:97:56:
         71:b2:ae:61:a4:35:3d:40:69:9d:38:c2:7d:6c:58:f8:a4:04:
         0f:08:04:bf:ae:9c:86:09:52:02:a6:ec:ce:b2:31:74:18:61:
         5b:ea:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:38 2025 by rpki-client