Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rrEN50maRxmMGExjfMDV3nrEJfw.roa
File:                     rrEN50maRxmMGExjfMDV3nrEJfw.roa (raw, json)
Hash identifier:          KtmsohqeyqKQAtM1CmTkLps6x0f39ucJRmKpqqralUg=
Subject key identifier:   AE:B1:0D:E7:49:9A:47:19:8C:18:4C:63:7C:C0:D5:DE:7A:C4:25:FC
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B26
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rrEN50maRxmMGExjfMDV3nrEJfw.roa
Signing time:             Sun 07 Feb 2021 13:10:32 +0000
ROA not before:           Sun 07 Feb 2021 13:10:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        60.199.107.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2854 (0xb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:32 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AEB10DE7499A47198C184C637CC0D5DE7AC425FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:ac:b2:ec:ee:5a:7f:94:dc:93:df:3d:22:
                    ce:a3:e6:1f:2e:cc:f4:e4:5d:21:e5:9e:fb:94:ce:
                    62:d7:da:4e:2f:03:07:d4:06:02:ff:92:e4:d2:cd:
                    cd:74:3d:65:43:5c:a8:5b:54:ce:0b:8d:28:2d:bb:
                    6b:93:cb:f2:3d:a5:e1:48:00:61:3b:19:79:ac:01:
                    a8:38:12:36:eb:42:a3:f3:1b:47:f1:3a:95:a2:6c:
                    37:79:ae:70:de:15:dc:c1:73:12:04:5d:23:a1:c3:
                    91:df:ed:39:6b:8f:4d:31:1e:f7:30:dc:3a:21:68:
                    b5:ec:4a:cc:10:3b:5a:7b:61:79:ee:e2:1b:e9:5e:
                    c8:a8:5c:1b:88:3e:25:9b:a2:38:d8:40:23:2e:f9:
                    aa:cd:1f:29:ce:6c:26:6b:41:e2:1e:fb:9c:a7:95:
                    77:d2:2f:13:ec:29:10:4c:1f:ea:d2:29:9f:32:ea:
                    dd:e3:ed:da:d0:57:b9:3d:22:21:39:b3:2b:f8:dc:
                    5f:fa:80:15:eb:c2:c6:24:54:4a:fd:3e:f9:f2:da:
                    c8:9c:f2:2e:75:b0:6b:25:df:32:15:52:33:13:38:
                    3e:f6:39:eb:5b:6f:6f:99:fb:e8:b5:63:69:2f:9a:
                    8f:db:bb:31:1c:62:14:73:1f:48:70:7b:96:64:38:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B1:0D:E7:49:9A:47:19:8C:18:4C:63:7C:C0:D5:DE:7A:C4:25:FC
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rrEN50maRxmMGExjfMDV3nrEJfw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:53:d0:d0:23:79:7d:a4:c2:bf:f5:32:33:aa:49:77:3c:f3:
         96:c2:1d:e8:15:97:03:be:6f:a8:98:66:52:79:46:87:7c:27:
         e9:41:38:6a:5b:ed:69:20:2a:cb:17:35:cf:2a:e3:95:b7:e1:
         d6:c6:9d:f8:a3:89:a6:75:ab:15:48:1c:af:76:4c:de:8f:74:
         63:0d:1f:d1:7e:54:0f:c0:cc:19:9b:7e:6a:7b:6c:fe:21:47:
         d5:45:cf:64:8f:42:d3:3f:7a:0d:46:81:46:fa:ae:e6:8a:0d:
         e5:83:db:da:77:d8:ed:4b:a0:20:f8:29:84:ea:20:e1:17:d7:
         d8:61:03:fc:cc:5a:a8:ca:fd:00:f3:fb:4e:5e:43:40:39:4a:
         49:26:e6:95:3b:e2:f6:0c:17:f0:4f:7f:75:3b:e7:e8:c4:79:
         7d:0d:8e:59:d4:d2:10:86:b0:26:d5:2d:73:9b:96:b1:17:01:
         bd:fc:7e:9b:7e:52:63:31:23:34:ac:3a:6b:16:31:99:20:44:
         f2:d2:a8:fa:3d:75:79:ef:26:c1:25:90:23:03:15:3e:7f:45:
         d2:34:ec:39:48:28:cb:33:29:3d:32:2a:d8:61:b3:e5:db:9a:
         de:f6:2a:64:db:bd:7d:db:95:db:ca:9b:b3:03:e1:1c:66:5b:
         94:f5:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:16 2023 by rpki-client on console-fra.rpki-client.org