Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pk6bsgk2pMX5OdDk6bG8XmOSkq0.roa
File:                     pk6bsgk2pMX5OdDk6bG8XmOSkq0.roa (raw, json)
Hash identifier:          O5TvJoDsaukBM1iP9F3MqfTZpybCNVwgpaJ56mWB4Eo=
Subject key identifier:   A6:4E:9B:B2:09:36:A4:C5:F9:39:D0:E4:E9:B1:BC:5E:63:92:92:AD
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C6B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pk6bsgk2pMX5OdDk6bG8XmOSkq0.roa
Signing time:             Wed 29 Sep 2021 02:49:49 +0000
ROA not before:           Wed 29 Sep 2021 02:49:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        211.79.0.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3179 (0xc6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A64E9BB20936A4C5F939D0E4E9B1BC5E639292AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:a8:77:dc:33:cb:19:f1:14:3d:c3:32:cc:
                    9b:59:5c:95:fb:fb:14:4c:e4:31:16:02:7a:0c:41:
                    9f:1c:bf:3b:f5:05:aa:61:da:4f:c2:fd:36:c8:3e:
                    ce:e6:10:28:30:70:e4:53:8f:dd:e8:b9:a0:fa:43:
                    8d:6d:d3:90:c4:ce:f4:b6:ef:52:0c:06:70:65:ae:
                    28:d6:91:4e:41:6b:cb:07:83:30:77:38:d5:5d:9b:
                    61:37:9c:d8:fc:9d:c3:b7:9d:3a:fe:10:03:fa:4b:
                    35:84:47:bb:ca:f7:8a:b3:4a:ef:0f:b3:6f:d3:78:
                    19:fa:c1:cc:44:70:df:8f:32:f1:96:28:c7:4a:81:
                    b0:25:5d:57:9d:f2:4a:d4:05:b0:52:1a:22:d5:86:
                    c2:59:81:4b:62:6c:e7:ee:58:a1:97:e0:28:64:77:
                    27:26:25:10:dc:90:77:d7:ed:30:49:3b:ab:02:fe:
                    89:67:b0:55:db:a4:6b:75:0e:44:e4:bf:4a:d3:81:
                    39:84:91:49:52:18:d5:f2:b5:5b:24:42:c1:80:44:
                    cb:1f:8e:04:7e:50:45:c3:e2:fd:46:d4:7b:74:ec:
                    5b:32:d8:4d:24:ac:74:07:25:a4:e4:7b:e8:18:08:
                    5e:a9:b7:16:bf:06:e6:d5:5b:ac:e7:9b:69:e2:07:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:9B:B2:09:36:A4:C5:F9:39:D0:E4:E9:B1:BC:5E:63:92:92:AD
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/pk6bsgk2pMX5OdDk6bG8XmOSkq0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:76:4b:5c:bd:de:8a:02:18:62:24:1e:0c:9e:38:30:4a:ca:
         77:70:38:f5:96:e2:e8:c8:ff:fa:7e:92:20:35:a7:1b:4f:4a:
         e7:d9:36:71:d7:33:1d:07:d8:0f:cf:18:f7:f4:bb:c2:64:2a:
         a9:7c:22:29:70:66:f5:9b:d6:48:da:e2:eb:c1:1c:87:e1:de:
         08:67:d4:37:16:92:77:22:fc:32:e0:87:7d:70:33:c6:7c:90:
         57:fa:0d:67:a0:37:3a:0a:a5:a2:5b:dd:a9:74:9e:48:66:5b:
         c0:f6:a4:af:bd:76:d4:c0:5e:05:89:82:9d:72:0c:43:e9:f0:
         95:7a:d5:39:0a:bf:4d:ac:75:7c:cb:68:c8:5b:64:af:89:05:
         0a:8b:b2:90:51:af:8f:12:05:cf:18:cd:63:fc:79:a2:3c:99:
         22:d5:9e:f9:63:47:98:8c:7c:49:a6:5f:6b:a9:e1:62:6a:3f:
         16:bd:8e:97:d4:cd:1f:0c:30:af:b5:96:79:3b:a4:43:ec:1c:
         7a:2c:c2:82:19:e8:4f:e6:af:15:11:62:8b:e5:49:dd:6e:d8:
         26:35:7c:13:50:c9:9c:db:ca:19:72:32:c0:f5:40:56:2f:fb:
         e6:68:11:f6:b7:f2:2a:81:7d:79:22:a7:92:a3:24:81:b6:62:
         36:b6:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:24 2025 by rpki-client