Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YPD74ZI7M7-XsVEBN_zsYjm2Eks.roa
File:                     YPD74ZI7M7-XsVEBN_zsYjm2Eks.roa (raw, json)
Hash identifier:          Hx6K/42fSfyY1qP9jjCcnEj+8+7QWx6KddjzMwI59M0=
Subject key identifier:   60:F0:FB:E1:92:3B:33:BF:97:B1:51:01:37:FC:EC:62:39:B6:12:4B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0976
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YPD74ZI7M7-XsVEBN_zsYjm2Eks.roa
Signing time:             Wed 16 Dec 2020 02:11:06 +0000
ROA not before:           Wed 16 Dec 2020 02:11:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.110.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422 (0x976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Dec 16 02:11:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=60F0FBE1923B33BF97B1510137FCEC6239B6124B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:b7:ca:42:8a:45:29:ce:23:a3:8a:57:91:
                    1c:79:b2:25:d2:c1:75:a3:f8:0e:4c:7e:14:17:06:
                    0c:19:08:85:8a:6f:06:f3:76:aa:c3:bd:c4:9c:59:
                    63:a0:07:08:d6:ea:16:8b:bc:8f:62:86:bb:d2:bd:
                    67:1e:1e:db:ba:00:68:41:ad:41:b1:ed:83:af:41:
                    df:c7:76:2b:e0:88:c0:03:3a:b9:3e:6f:09:60:c5:
                    7a:a0:02:70:cd:9b:d3:f3:ea:e2:fe:90:fb:a7:07:
                    f0:9c:b7:79:1b:ca:a6:17:5b:04:fa:28:d3:43:4b:
                    8d:3e:c7:7a:27:08:1d:1c:ca:8b:47:63:16:43:40:
                    3c:32:af:91:a6:dc:89:5e:30:ba:24:9f:d1:18:99:
                    56:46:1f:93:a5:52:91:ab:e3:79:39:46:cf:32:aa:
                    b8:2a:3d:68:f4:16:c3:99:1e:5f:f8:bd:0a:23:9d:
                    20:00:0f:6f:19:76:32:15:d0:4e:4e:25:a1:a5:e1:
                    03:96:42:32:9b:96:e6:0d:bc:3e:14:00:1f:33:17:
                    a3:e7:ff:dd:f7:ac:39:f8:da:4a:6b:0a:82:5a:55:
                    ee:36:37:53:f2:dd:8c:f4:b1:4d:ba:df:28:36:a8:
                    e9:a6:16:ee:e9:6f:e2:31:0c:b3:c7:f1:ee:64:8b:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:FB:E1:92:3B:33:BF:97:B1:51:01:37:FC:EC:62:39:B6:12:4B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YPD74ZI7M7-XsVEBN_zsYjm2Eks.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:03:2d:52:b4:a6:aa:bb:ee:0d:75:17:5d:0b:20:45:3f:
         2d:eb:ba:64:87:93:9e:d0:e8:ba:96:59:10:96:05:44:5c:1e:
         fb:09:a8:48:95:52:fd:45:fb:7e:e1:f4:45:c0:af:89:2b:b5:
         97:82:92:53:fe:01:83:96:5b:0d:f0:a7:35:a1:b1:b3:f8:09:
         9c:bb:6b:b4:6f:a5:a4:42:43:7a:d5:68:30:fa:90:26:9f:8e:
         b3:e9:8f:93:28:c5:30:7f:f0:7a:d3:82:20:ef:38:1d:e2:73:
         5b:09:3a:1b:23:d5:19:cb:10:e1:e7:ba:de:21:4e:a1:c3:d8:
         cd:ec:8f:38:2f:eb:4a:73:a0:27:b0:92:dd:32:c0:b4:77:be:
         9f:5b:af:57:ab:4c:a1:46:6f:78:95:0b:d8:e1:ed:67:e0:b6:
         02:7a:b0:47:38:26:b6:3f:13:a9:d3:05:d5:f0:ce:d8:13:4d:
         90:da:1a:8f:4e:33:b9:8b:ad:cf:36:62:ff:7e:6d:51:23:4d:
         5b:b9:df:87:14:57:97:e3:a3:7b:fc:ce:7a:ae:39:03:45:64:
         5c:0f:1d:df:19:aa:68:4d:b1:b6:95:a0:a2:2b:51:82:28:5f:
         5c:cf:eb:b7:1a:bd:2e:c8:23:ed:41:ff:cf:c8:52:30:69:f4:
         04:99:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org