Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eb81ijhNquKmjXqo_UwrjkWwyoc.roa
File:                     eb81ijhNquKmjXqo_UwrjkWwyoc.roa (raw, json)
Hash identifier:          EOsuSEMyFiSETFIK/KloGRSZCftyEgdnzoc9priGvIQ=
Subject key identifier:   79:BF:35:8A:38:4D:AA:E2:A6:8D:7A:A8:FD:4C:2B:8E:45:B0:CA:87
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0CB4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eb81ijhNquKmjXqo_UwrjkWwyoc.roa
Signing time:             Wed 29 Sep 2021 02:50:09 +0000
ROA not before:           Wed 29 Sep 2021 02:50:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131611
IP address blocks:        60.198.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3252 (0xcb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=79BF358A384DAAE2A68D7AA8FD4C2B8E45B0CA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:6d:ca:05:06:29:51:87:6c:61:18:17:bc:
                    33:9c:4c:ca:48:52:1c:cd:3b:7f:52:ff:71:6a:67:
                    da:1f:63:5f:91:54:95:a7:f8:cc:d6:14:9c:2d:46:
                    b7:7f:a6:d0:a6:d4:90:33:ff:82:42:59:33:a8:f5:
                    70:51:2d:df:e7:7a:73:f8:d5:87:10:34:67:7c:90:
                    d0:85:4c:74:cf:f8:63:9e:50:7d:34:82:99:e6:a9:
                    be:47:70:f5:0e:8e:b2:2e:e3:39:60:22:f4:57:ce:
                    03:ff:4a:d1:3f:39:bb:48:fd:70:58:d0:20:65:d5:
                    1f:0a:7c:e0:ef:33:35:d5:25:9c:a8:17:61:c8:64:
                    6c:82:08:3a:a3:b8:4e:df:07:7e:b3:e8:6c:ee:b3:
                    12:6d:14:20:5b:1c:a2:51:9f:d2:c2:cc:5d:77:9b:
                    1c:24:6a:36:f4:d0:c4:46:17:69:c4:04:90:a8:dd:
                    52:4d:7a:52:af:b9:77:dd:5a:56:92:7f:d7:b4:3e:
                    b5:a6:22:d5:d9:aa:d4:02:75:39:55:f0:b9:a0:0b:
                    f5:40:f3:c6:e0:db:c4:ee:1b:93:e3:c8:c2:11:d1:
                    92:5a:ac:1c:be:fb:9b:5e:72:1c:5e:7c:70:fa:71:
                    fa:cb:58:75:1a:c6:ab:4a:41:a6:f5:4f:b7:a3:5c:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:35:8A:38:4D:AA:E2:A6:8D:7A:A8:FD:4C:2B:8E:45:B0:CA:87
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eb81ijhNquKmjXqo_UwrjkWwyoc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:aa:3c:b4:6e:b5:d3:a3:c0:34:f2:5a:ca:cb:25:93:40:
         e6:37:80:b8:9a:82:45:37:88:00:86:a3:3b:ff:8c:23:6a:af:
         f6:76:a4:32:fd:3d:9e:cb:6b:d0:cf:09:aa:57:f0:78:ba:f6:
         b9:2a:9c:aa:77:22:f0:fd:dd:11:85:b5:0d:b2:3a:d3:11:07:
         b4:54:26:75:19:08:dc:70:10:65:1c:87:3f:1d:d5:61:20:2f:
         90:9d:e0:aa:8a:17:96:0b:de:3e:7a:33:20:31:f7:5b:a1:35:
         9d:66:65:c7:b0:4d:d3:c8:4b:bd:c7:3f:a8:55:14:05:71:b0:
         9e:1d:f6:6b:24:d2:87:bc:22:8d:e9:19:12:6b:c9:cd:3f:aa:
         10:18:04:05:d9:3e:c1:33:60:df:65:67:5b:ad:dd:bc:96:be:
         42:93:e6:13:a8:d8:c6:67:5e:46:85:38:f0:15:6a:2a:7d:e7:
         aa:cf:5e:c6:a6:d3:25:17:27:76:61:f7:b1:4c:cd:c4:7c:04:
         62:ae:5f:64:0f:4d:cf:4c:38:4c:83:c1:ab:ec:78:1e:f6:c5:
         61:31:ac:1f:2b:fd:e0:d5:ea:45:6f:28:ee:4b:6b:d8:8e:37:
         4a:0b:22:b1:bf:3f:20:c6:2e:a5:3a:2c:c3:a6:3f:58:b0:f7:
         7d:9a:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org