Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TBEorxojl9RVtBzVSeKLshh91Qo.roa
File:                     TBEorxojl9RVtBzVSeKLshh91Qo.roa (raw, json)
Hash identifier:          siHy+Jbx2bt8pntfi9z6Bs+Qg8XBneT4utET0F/Ewyg=
Subject key identifier:   4C:11:28:AF:1A:23:97:D4:55:B4:1C:D5:49:E2:8B:B2:18:7D:D5:0A
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0A68
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TBEorxojl9RVtBzVSeKLshh91Qo.roa
Signing time:             Sun 07 Feb 2021 11:36:11 +0000
ROA not before:           Sun 07 Feb 2021 11:36:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:36:11 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C1128AF1A2397D455B41CD549E28BB2187DD50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:37:ca:e9:93:40:91:a7:e8:90:4b:93:2c:
                    55:c1:17:c5:cb:89:12:c4:c3:ac:c9:e0:ef:0e:43:
                    19:0e:59:39:58:9d:fc:a5:80:be:b7:81:d7:e6:e6:
                    d5:7f:15:f6:35:cd:31:34:72:7c:66:3f:fe:9c:21:
                    06:31:e6:7c:bf:bd:5c:8a:ed:6c:59:83:ef:2e:38:
                    d0:f3:7e:25:4d:03:9a:45:3a:2e:7f:39:c2:02:df:
                    ed:60:0d:47:75:79:c4:6f:45:5d:91:dc:09:80:6e:
                    d2:0b:18:2c:2c:55:9a:21:22:4f:77:ca:54:89:49:
                    4f:7a:40:46:07:8d:58:f4:89:ec:e4:78:a5:e6:32:
                    fd:8e:19:ea:31:fa:82:1a:90:92:dc:2e:7a:eb:44:
                    55:9b:8d:b4:be:05:89:83:b6:07:c1:ff:1e:94:a6:
                    d1:f6:be:70:64:f5:29:ec:3a:ce:42:b5:c6:19:13:
                    8c:1a:02:54:e6:55:fa:5f:66:c9:e4:45:bd:ce:c4:
                    33:3b:43:0b:94:c5:3d:76:b3:68:54:99:41:2c:aa:
                    47:59:ad:69:56:de:e2:00:86:f7:49:9b:8f:a0:57:
                    c6:76:6e:97:18:c5:61:82:4d:3d:b3:27:c9:8a:08:
                    c3:da:e2:32:85:35:38:0c:1c:3d:72:21:95:b7:b9:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:28:AF:1A:23:97:D4:55:B4:1C:D5:49:E2:8B:B2:18:7D:D5:0A
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TBEorxojl9RVtBzVSeKLshh91Qo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:57:ad:4b:4a:1e:75:88:cb:74:6e:79:b9:67:37:84:a5:
         42:17:af:c3:a9:ed:d0:25:9c:e8:85:c1:b6:78:d7:b6:bb:a9:
         74:5a:c3:52:b0:a0:60:54:36:16:2d:75:91:bc:86:dc:ee:80:
         51:6b:85:14:38:34:1d:cb:ca:00:b7:8a:8e:c5:ad:ff:bd:87:
         e3:6f:0e:a4:1e:0e:0e:94:45:1f:d0:46:79:04:d6:2f:f3:16:
         0f:4b:15:86:fd:67:0f:81:fc:0d:09:9b:f3:b4:34:56:c6:12:
         31:b9:7f:40:65:cd:cb:90:a2:36:d5:e2:8c:8c:de:48:34:24:
         97:21:88:f6:f4:9f:8a:51:0a:e7:b0:91:3b:72:12:a4:20:eb:
         d1:97:58:56:68:18:43:f9:b7:7e:17:81:6e:0e:8a:c4:12:31:
         7b:9f:38:80:57:03:96:cd:a9:4a:f4:23:0c:06:78:c2:cd:0f:
         3d:b8:6c:3b:bd:86:33:3a:98:94:ce:04:24:8b:d3:09:7b:16:
         ff:92:90:d9:04:40:81:7a:e0:de:37:2b:95:bf:15:70:20:12:
         90:90:99:0b:e8:36:9b:70:6e:09:43:44:25:3a:bd:ba:6c:8b:
         03:88:c4:5f:a6:56:f2:a0:42:d2:04:f0:79:c3:3c:dc:c1:38:
         35:dd:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:15 2025 by rpki-client