Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WbD2dMRXu-tc68Ke5UuIbdRvEQU.roa
File:                     WbD2dMRXu-tc68Ke5UuIbdRvEQU.roa (raw, json)
Hash identifier:          4iuCxejR6k91r70ShSfrUlhz95gJhe8basN4bwP69k4=
Subject key identifier:   59:B0:F6:74:C4:57:BB:EB:5C:EB:C2:9E:E5:4B:88:6D:D4:6F:11:05
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B1C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WbD2dMRXu-tc68Ke5UuIbdRvEQU.roa
Signing time:             Sun 07 Feb 2021 13:10:22 +0000
ROA not before:           Sun 07 Feb 2021 13:10:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.168.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=59B0F674C457BBEB5CEBC29EE54B886DD46F1105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:ff:14:b4:d5:f6:19:8d:af:40:28:b9:d5:
                    93:11:6e:82:a8:dc:c6:99:92:1b:e7:99:ca:a3:94:
                    da:84:3b:25:c9:50:ac:e4:13:bd:07:bc:b1:86:c6:
                    af:40:08:3d:0f:0a:2b:75:e2:ff:16:e2:a4:f0:0b:
                    3d:cf:b3:7b:de:62:6f:29:a7:2b:9c:93:35:68:c2:
                    55:cf:d7:09:d3:85:31:93:dd:84:c9:44:f8:7e:46:
                    de:63:f9:0c:7f:30:12:05:8f:03:c5:ee:58:69:e6:
                    06:21:6e:1c:5b:57:c8:35:e2:2f:2a:f9:97:59:f8:
                    92:e0:5e:74:32:e3:61:f5:62:a6:7e:8b:e1:2e:fd:
                    86:d6:66:f5:42:7c:32:ae:1c:b0:20:6c:2f:20:58:
                    86:aa:1a:8f:cd:4f:a9:45:4f:01:3a:25:ad:74:e5:
                    76:a2:67:68:21:8b:d9:e0:56:b2:15:69:d6:3e:43:
                    1e:27:5f:b3:13:51:45:d4:87:53:a2:be:bd:53:c2:
                    d9:75:af:ba:39:90:84:9b:98:a9:f5:cc:9e:25:18:
                    fa:89:fe:e4:20:a1:69:11:ad:e0:81:42:74:ca:b7:
                    55:d4:dc:7b:49:91:fb:52:b0:2f:e5:d4:99:3e:df:
                    20:ba:ef:8d:07:92:1a:93:92:e5:ab:40:bf:81:61:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B0:F6:74:C4:57:BB:EB:5C:EB:C2:9E:E5:4B:88:6D:D4:6F:11:05
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WbD2dMRXu-tc68Ke5UuIbdRvEQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:79:07:12:e1:4d:f6:93:61:5f:bf:33:61:d2:0d:2c:b7:41:
         35:1d:53:54:19:de:fe:ec:4c:e7:75:9f:52:ac:f8:a2:1f:08:
         05:71:d9:27:d2:2c:5b:2a:ab:9c:e7:b8:40:a9:a7:d7:69:5c:
         07:dd:10:c5:13:ad:17:3f:03:a5:81:c9:b3:dd:18:30:22:82:
         17:ff:42:45:07:f7:46:f4:24:2a:55:56:aa:79:74:29:cb:86:
         02:75:fc:76:d4:58:47:e8:d0:f5:a0:f0:67:84:e9:ce:92:0f:
         2a:77:2f:18:63:eb:80:79:8e:a2:73:5a:5b:1f:4b:05:0f:9a:
         05:c1:c0:cb:54:0f:8b:04:55:e0:eb:ba:49:47:70:d6:10:0f:
         eb:5c:b0:40:46:2a:c4:2c:90:5d:11:b9:e3:3f:b6:ce:b4:19:
         a4:84:35:80:84:92:cc:cc:e0:a7:ca:56:24:4a:1c:d0:ac:a7:
         04:16:95:4d:1c:77:ed:9f:4f:ca:70:71:95:df:7b:fb:11:ff:
         4e:8d:2b:b0:c7:96:e7:b1:76:6b:d7:ff:b7:aa:2f:8f:60:b7:
         dd:f8:5f:37:3e:e4:c4:b0:fe:e8:43:a1:61:78:70:a4:f1:c6:
         5f:81:ed:21:8d:09:a6:f4:5a:97:da:3d:a2:89:6c:58:01:e3:
         91:31:14:16
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MzEwMjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU5QjBGNjc0QzQ1N0JC
RUI1Q0VCQzI5RUU1NEI4ODZERDQ2RjExMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvFf8UtNX2GY2vQCi51ZMRboKo3MaZkhvnmcqjlNqEOyXJUKzk
E70HvLGGxq9ACD0PCit14v8W4qTwCz3Ps3veYm8ppyuckzVowlXP1wnThTGT3YTJ
RPh+Rt5j+Qx/MBIFjwPF7lhp5gYhbhxbV8g14i8q+ZdZ+JLgXnQy42H1YqZ+i+Eu
/YbWZvVCfDKuHLAgbC8gWIaqGo/NT6lFTwE6Ja105XaiZ2ghi9ngVrIVadY+Qx4n
X7MTUUXUh1Oivr1Twtl1r7o5kISbmKn1zJ4lGPqJ/uQgoWkRreCBQnTKt1XU3HtJ
kftSsC/l1Jk+3yC6740HkhqTkuWrQL+BYR1tAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUWbD2dMRXu+tc68Ke5UuIbdRvEQUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvV2JEMmRNUlh1LXRjNjhL
ZTVVdUliZFJ2RVFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzHqDANBgkqhkiG9w0BAQsFAAOCAQEAd3kHEuFN9pNhX78zYdINLLdBNR1TVBne
/uxM53WfUqz4oh8IBXHZJ9IsWyqrnOe4QKmn12lcB90QxROtFz8DpYHJs90YMCKC
F/9CRQf3RvQkKlVWqnl0KcuGAnX8dtRYR+jQ9aDwZ4TpzpIPKncvGGPrgHmOonNa
Wx9LBQ+aBcHAy1QPiwRV4Ou6SUdw1hAP61ywQEYqxCyQXRG54z+2zrQZpIQ1gISS
zMzgp8pWJEoc0KynBBaVTRx37Z9PynBxld97+xH/To0rsMeW57F2a9f/t6ovj2C3
3fhfNz7kxLD+6EOhYXhwpPHGX4HtIY0JpvRal9o9oolsWAHjkTEUFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org