Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rTsDWriXjP76CR3xSyq-y2Z-TIQ.roa
File:                     rTsDWriXjP76CR3xSyq-y2Z-TIQ.roa (raw, json)
Hash identifier:          sFxg9/W7TH8pgbu9FyQSoikOda6pA4KuLHJB/KUqGz4=
Subject key identifier:   AD:3B:03:5A:B8:97:8C:FE:FA:09:1D:F1:4B:2A:BE:CB:66:7E:4C:84
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0AE6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rTsDWriXjP76CR3xSyq-y2Z-TIQ.roa
Signing time:             Sun 07 Feb 2021 11:40:50 +0000
ROA not before:           Sun 07 Feb 2021 11:40:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        210.67.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:40:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AD3B035AB8978CFEFA091DF14B2ABECB667E4C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:53:49:ec:d2:fe:dc:c1:b2:13:60:cc:55:
                    88:7f:ff:6e:a0:45:28:1f:ab:dc:70:9f:b8:42:6e:
                    48:b1:92:71:1f:f3:d2:57:f7:b6:8d:cc:62:98:26:
                    e2:5e:95:27:5e:22:e7:80:5b:7c:48:a4:bd:26:26:
                    5c:77:86:03:a4:92:4d:ba:ca:57:fc:76:93:9d:f0:
                    73:09:5f:48:85:2c:25:14:d8:21:df:2a:8d:a2:64:
                    48:fa:80:ee:d6:38:2a:0f:e3:cb:e4:c7:60:62:e4:
                    ee:95:a8:f9:26:1f:3c:e7:85:27:6c:03:6a:57:3e:
                    0b:d7:68:ad:89:d0:d7:0e:a2:e8:e1:ac:96:60:6d:
                    d9:4a:a1:02:34:7a:f9:a1:33:c4:a4:cf:ae:e1:30:
                    8d:ae:e4:e4:28:88:84:6e:fa:aa:5f:e0:b0:54:93:
                    2d:c2:7e:2b:8a:23:50:7c:ed:26:47:3f:fa:67:33:
                    27:3c:6c:30:6b:41:6c:20:29:17:0d:d6:dc:67:ce:
                    35:c5:78:48:b4:41:3f:f9:e6:7c:a8:27:05:a7:37:
                    da:bb:9c:b0:f3:b7:fa:2c:cb:30:4e:d0:a9:2c:b6:
                    e6:55:fd:94:cc:bb:70:85:0b:a3:03:aa:51:20:d1:
                    74:a1:e4:55:3e:0b:eb:9e:b9:f3:ff:53:4f:39:af:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:03:5A:B8:97:8C:FE:FA:09:1D:F1:4B:2A:BE:CB:66:7E:4C:84
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rTsDWriXjP76CR3xSyq-y2Z-TIQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:d5:08:8f:72:c7:fa:0e:5b:34:92:77:57:2a:dc:92:30:
         54:5b:de:0b:6b:84:93:60:65:8c:45:de:de:27:63:a7:3e:9c:
         5c:61:ab:ab:6c:c3:67:41:8e:48:c1:eb:23:6e:cd:fa:0d:fb:
         dd:87:92:66:f2:d7:0c:56:61:8b:14:e3:28:84:17:96:6c:27:
         04:03:34:c0:08:3e:ea:2b:a0:61:75:b3:97:0c:14:b2:30:f8:
         49:f7:d3:0b:1e:01:7c:39:ac:d3:7e:84:65:0b:21:5d:2d:df:
         27:6c:4c:cf:8c:c0:ae:3e:79:a7:46:6a:0a:99:f1:9e:1f:52:
         5a:45:37:19:43:51:09:91:7a:86:73:9c:97:1b:bb:17:c1:c6:
         00:02:af:5d:c0:18:0f:d9:55:5a:6c:26:a5:dc:93:98:ba:9a:
         a7:72:9a:b0:5e:b4:61:ce:09:2c:ba:9c:7f:61:82:4b:d5:6a:
         f6:ca:f2:af:f8:14:42:d0:9a:74:e2:5a:34:db:b9:8f:d1:0c:
         1f:05:59:8a:dc:53:19:5f:40:25:b1:82:67:f8:50:c8:24:fd:
         e3:26:54:76:b7:d9:96:80:e3:aa:30:32:25:22:61:9f:b0:c1:
         63:4a:c5:f1:85:e4:c9:c5:08:40:9a:1f:9e:82:88:da:0b:7e:
         32:93:0b:db
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MTQwNTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFEM0IwMzVBQjg5NzhD
RkVGQTA5MURGMTRCMkFCRUNCNjY3RTRDODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+cFNJ7NL+3MGyE2DMVYh//26gRSgfq9xwn7hCbkixknEf89JX
97aNzGKYJuJelSdeIueAW3xIpL0mJlx3hgOkkk26ylf8dpOd8HMJX0iFLCUU2CHf
Ko2iZEj6gO7WOCoP48vkx2Bi5O6VqPkmHzznhSdsA2pXPgvXaK2J0NcOoujhrJZg
bdlKoQI0evmhM8Skz67hMI2u5OQoiIRu+qpf4LBUky3CfiuKI1B87SZHP/pnMyc8
bDBrQWwgKRcN1txnzjXFeEi0QT/55nyoJwWnN9q7nLDzt/osyzBO0KkstuZV/ZTM
u3CFC6MDqlEg0XSh5FU+C+ueufP/U085r3rTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUrTsDWriXjP76CR3xSyq+y2Z+TIQwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvclRzRFdyaVhqUDc2Q1Iz
eFN5cS15MlotVElRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdJDoDANBgkqhkiG9w0BAQsFAAOCAQEAT7HVCI9yx/oOWzSSd1cq3JIwVFveC2uE
k2BljEXe3idjpz6cXGGrq2zDZ0GOSMHrI27N+g373YeSZvLXDFZhixTjKIQXlmwn
BAM0wAg+6iugYXWzlwwUsjD4SffTCx4BfDms036EZQshXS3fJ2xMz4zArj55p0Zq
Cpnxnh9SWkU3GUNRCZF6hnOclxu7F8HGAAKvXcAYD9lVWmwmpdyTmLqap3KasF60
Yc4JLLqcf2GCS9Vq9sryr/gUQtCadOJaNNu5j9EMHwVZitxTGV9AJbGCZ/hQyCT9
4yZUdrfZloDjqjAyJSJhn7DBY0rF8YXkycUIQJofnoKI2gt+MpML2w==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:58 2025 by rpki-client