Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/iEtPIn_VTdj-rQa04wOAJY3Aj_E.roa
File:                     iEtPIn_VTdj-rQa04wOAJY3Aj_E.roa (raw, json)
Hash identifier:          XL0Jo1qOgC+hcvj0iMgzxlWNPIvIomOwqj4trF6m2/U=
Subject key identifier:   88:4B:4F:22:7F:D5:4D:D8:FE:AD:06:B4:E3:03:80:25:8D:C0:8F:F1
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C65
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/iEtPIn_VTdj-rQa04wOAJY3Aj_E.roa
Signing time:             Wed 29 Sep 2021 02:49:47 +0000
ROA not before:           Wed 29 Sep 2021 02:49:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        210.192.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=884B4F227FD54DD8FEAD06B4E30380258DC08FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:c8:45:b0:9b:93:4c:dd:ee:54:38:39:43:
                    6e:69:d6:c3:ef:51:19:89:b1:4c:c3:7d:2a:d8:67:
                    83:d5:ea:09:28:b1:15:90:96:76:08:77:a9:fb:2a:
                    31:29:cb:75:7f:d6:27:b2:3f:b1:57:50:49:50:cb:
                    ae:ba:29:3f:66:f8:8f:22:0b:da:13:36:2e:8d:90:
                    89:5d:6c:26:ac:5a:97:38:3e:19:db:15:1b:68:ac:
                    1a:57:eb:c1:52:8b:fa:af:d3:b9:18:05:da:6d:5e:
                    a8:78:94:61:e3:fd:8d:76:83:cd:2c:9b:0e:1a:5c:
                    fb:eb:dc:23:78:a7:b3:f4:7d:53:1c:2f:f8:c4:3d:
                    44:59:ce:34:c7:0a:02:88:0e:dc:22:b0:8d:fc:51:
                    eb:66:f4:55:a3:66:ff:af:b1:c2:42:fa:52:1a:47:
                    f2:3b:19:e9:bc:ef:88:d9:6e:30:8b:be:83:38:8a:
                    a8:c4:a0:48:02:b1:d7:28:d6:25:10:79:3f:5a:e4:
                    32:24:a8:0b:26:f8:c9:f8:e7:7f:11:43:f8:2c:48:
                    68:44:00:04:6a:2a:03:37:cc:11:e1:ef:b6:e5:4b:
                    5e:34:f9:af:c3:8d:1d:66:e3:2d:7f:e7:ff:cd:14:
                    06:01:6b:53:b9:ad:20:3e:9b:41:73:13:86:9e:04:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:4F:22:7F:D5:4D:D8:FE:AD:06:B4:E3:03:80:25:8D:C0:8F:F1
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/iEtPIn_VTdj-rQa04wOAJY3Aj_E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:c9:97:ca:74:a3:de:ad:57:b0:6d:d5:8e:fd:7b:cf:3e:
         16:0e:81:78:b0:9c:28:23:98:0b:cb:5e:d0:5a:0c:a7:fd:ef:
         5d:1d:ad:6c:09:bb:a7:fc:fa:46:72:4e:ae:c0:d4:1a:8c:e7:
         95:48:5c:7d:db:2d:2f:78:98:20:ab:d8:32:9c:7e:f1:40:c3:
         05:9f:61:ae:7e:0d:bd:cb:f2:49:8a:fa:a9:ca:e8:ff:0f:7b:
         82:f6:39:fd:6c:7d:d8:f5:05:98:82:f0:17:1e:47:dd:2e:28:
         67:0f:ed:dc:91:7c:8b:e5:b8:8c:f9:86:96:d8:83:44:10:86:
         cd:25:54:2d:0a:99:7c:46:ce:a6:1d:bc:f0:e5:32:ea:d7:4b:
         41:2a:48:43:b8:5a:81:14:8e:c4:d4:57:56:94:3f:3e:a7:62:
         cf:e2:7a:33:f8:e9:a3:1b:c3:8a:9b:83:69:db:45:85:3d:8d:
         82:f6:f2:52:2d:4a:47:5b:13:d6:2a:e3:41:d1:5a:73:6b:bc:
         a3:1c:c1:0b:80:25:d1:12:4f:f1:94:c0:39:03:a1:9e:79:1c:
         bb:16:ec:c6:cb:eb:85:c4:28:a6:00:d4:4a:73:36:91:92:36:
         1d:23:f2:0a:d3:6b:18:a2:b9:21:46:1c:4e:24:a5:50:4e:b5:
         14:68:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:35 2025 by rpki-client