Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_vVP9koj0qEEVyHFWI46tTu0LCU.roa
File:                     _vVP9koj0qEEVyHFWI46tTu0LCU.roa (raw, json)
Hash identifier:          djr7W9JVpKV0G1ab8PzGROgOAfFCekb4Gdk+3Oe5wHI=
Subject key identifier:   FE:F5:4F:F6:4A:23:D2:A1:04:57:21:C5:58:8E:3A:B5:3B:B4:2C:25
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B14
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_vVP9koj0qEEVyHFWI46tTu0LCU.roa
Signing time:             Sun 07 Feb 2021 13:10:14 +0000
ROA not before:           Sun 07 Feb 2021 13:10:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.212.0/24 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2836 (0xb14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FEF54FF64A23D2A1045721C5588E3AB53BB42C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:51:ba:7d:58:33:f5:a8:d0:ee:59:de:d8:
                    d8:1c:e0:b7:5b:6e:db:ad:db:94:c6:3e:23:b8:bd:
                    ac:cc:b8:2c:36:25:a8:db:16:f3:58:b0:92:a7:a0:
                    3f:6a:e3:fa:65:83:b6:e9:38:39:9a:37:ab:12:47:
                    20:4b:da:2b:a2:c7:96:e0:0b:2b:28:f6:e1:b7:3e:
                    6b:21:f2:36:90:91:2a:cf:cd:58:db:48:af:8e:56:
                    f6:95:4d:43:22:85:94:f8:e3:b9:28:fd:27:33:ad:
                    b8:0d:32:1a:88:4d:f5:b8:08:8b:3b:46:86:df:31:
                    94:6b:1f:40:0d:c0:0e:af:5d:c7:33:fb:75:3e:23:
                    6f:e1:62:3e:69:78:ad:2b:89:0d:ab:b8:75:e3:33:
                    a4:50:99:6d:69:47:91:6d:7f:6e:42:da:84:0d:98:
                    f7:ae:74:7c:c5:5f:c4:f2:fe:bd:0f:e7:ff:34:4c:
                    01:e0:e8:fc:73:0a:78:16:8b:13:20:2b:76:b4:c4:
                    7f:dc:cf:f8:ad:ac:e6:9f:d7:ec:48:41:dc:17:07:
                    de:a3:3c:05:bc:34:ee:c3:b1:be:f1:00:4a:5b:da:
                    4b:55:2b:20:5c:eb:c8:b2:4f:15:f6:02:e9:2b:b6:
                    f6:a6:9d:1d:27:69:63:7e:46:a0:07:df:43:ee:26:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:4F:F6:4A:23:D2:A1:04:57:21:C5:58:8E:3A:B5:3B:B4:2C:25
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_vVP9koj0qEEVyHFWI46tTu0LCU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:c4:8f:80:4e:ba:01:32:c5:59:fe:6c:fe:c1:6e:ac:fc:
         8e:cb:98:4a:c0:f1:3d:ea:d9:86:9e:09:24:e3:0c:b2:a2:39:
         d0:33:62:09:ae:a2:99:2b:d1:10:aa:c5:8f:f0:d1:d6:4f:b2:
         a7:84:a7:de:22:c1:76:6b:d2:9b:b5:5e:2b:1a:9c:fd:8e:8e:
         25:8d:59:89:a2:09:8f:ba:df:b2:32:06:5f:a4:8a:89:7e:17:
         4a:ac:58:de:d6:d6:40:5a:90:6a:47:e9:85:a8:20:37:f9:19:
         e2:2a:d8:5a:5b:aa:27:aa:69:ac:ef:41:18:30:c6:25:7d:69:
         0e:68:e5:d6:87:0a:38:13:a6:db:18:95:e9:da:b8:8a:68:cd:
         14:18:d1:ea:3f:92:fc:e8:17:64:1f:d1:c5:3f:c2:df:f5:9e:
         ee:3f:f6:53:1a:b6:dc:94:30:05:ce:ba:13:d6:7d:d3:8f:42:
         8a:cb:6e:1b:37:8d:3c:46:8a:4f:a9:2d:3b:b6:f8:f6:fd:2e:
         7b:79:7f:c2:84:bc:b0:4a:dc:99:14:32:9c:88:48:59:11:9f:
         d8:dd:03:2f:8e:7f:60:de:0f:13:33:88:f6:89:bf:5f:42:1c:
         08:35:2f:b7:d1:51:02:a5:e4:7b:5e:fb:32:d2:e8:77:92:32:
         5f:7e:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:26 2025 by rpki-client