Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-bIPTrgqbH1DWkyThpIqDp-HNo0.roa
File:                     -bIPTrgqbH1DWkyThpIqDp-HNo0.roa (raw, json)
Hash identifier:          mZqZDZIwrH30BXU+0W3GNcPZhvaoIW3irQ9gGVaIrow=
Subject key identifier:   F9:B2:0F:4E:B8:2A:6C:7D:43:5A:4C:93:86:92:2A:0E:9F:87:36:8D
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-bIPTrgqbH1DWkyThpIqDp-HNo0.roa
Signing time:             Thu 15 Sep 2022 02:47:09 +0000
ROA not before:           Thu 15 Sep 2022 02:47:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4662
IP address blocks:        210.67.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F9B20F4EB82A6C7D435A4C9386922A0E9F87368D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:98:dc:0e:08:69:fb:70:ff:54:3b:45:4c:
                    4c:4d:1e:dc:ed:eb:9a:25:fc:df:0b:2a:97:32:5f:
                    c4:8d:5a:0a:64:04:f4:3f:a2:e8:e2:3c:cd:e3:14:
                    7d:c9:7a:8a:7f:63:d4:84:e1:e5:0c:fc:81:6f:9c:
                    90:21:9f:09:d7:ee:0c:c1:c5:d8:9f:0b:28:7e:d2:
                    78:43:85:19:c8:60:0b:58:c2:7f:80:f0:06:7e:c0:
                    0d:a7:03:03:34:ae:df:a5:3b:93:44:6b:7f:a9:77:
                    78:bc:a1:de:cb:65:9b:02:05:b6:29:48:e8:0e:3a:
                    08:00:b9:92:24:06:45:6a:42:54:2d:ec:43:f4:6e:
                    d3:ec:7e:2e:f4:92:a2:e3:b2:2b:4a:d4:c2:eb:15:
                    07:a6:ce:71:33:0f:88:2e:84:23:99:d8:8f:51:c5:
                    35:98:1a:13:0d:56:7e:a7:00:07:f5:01:7d:21:32:
                    52:b3:fc:33:c2:09:4f:f1:4f:f4:49:76:5c:61:24:
                    67:40:ee:6a:20:f4:58:50:c2:65:3d:01:93:87:d3:
                    bb:cc:48:e8:d1:25:fd:14:7d:b6:78:0e:b3:30:66:
                    9a:ac:74:6a:40:c3:9c:8c:87:aa:84:2a:77:10:ea:
                    4c:00:13:95:2b:60:ee:0b:53:bb:bf:5b:7b:0a:25:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B2:0F:4E:B8:2A:6C:7D:43:5A:4C:93:86:92:2A:0E:9F:87:36:8D
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-bIPTrgqbH1DWkyThpIqDp-HNo0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:e1:1c:2e:44:8c:f4:19:4f:e9:55:96:2b:dd:8c:70:5a:
         f0:d6:7f:8d:7f:8f:fe:2f:8d:a3:c4:97:d1:99:ae:ca:8f:46:
         0d:a8:f9:81:0d:50:94:e5:5e:b3:49:fc:9e:a7:5b:e6:dd:6f:
         55:69:25:b9:78:01:bc:4e:75:0d:7f:64:9f:24:6a:d5:df:2f:
         68:45:27:0f:ca:97:57:14:a1:66:6a:10:63:de:35:d7:12:ea:
         8e:d3:ee:da:6a:16:d8:6e:c2:36:99:ad:b4:9c:41:a8:49:31:
         bc:3d:d5:7d:4b:a0:b7:23:ff:76:86:e1:0e:2e:1f:ed:4a:d1:
         5d:f6:4f:82:e5:66:16:12:a4:96:67:0d:47:2c:ae:f6:17:56:
         e4:9d:b3:75:aa:dd:b3:6e:0c:09:78:79:6e:7d:83:37:81:06:
         eb:6d:09:0b:fc:80:92:e0:69:80:bf:36:c7:30:0c:2e:c4:2e:
         aa:d3:e6:49:a2:a4:db:6e:0f:32:78:4c:fd:bd:19:d8:fe:0b:
         f5:f9:71:ed:66:fb:8e:f9:88:32:da:c6:69:f5:04:ec:70:9f:
         b8:0b:40:f4:01:79:ea:80:0c:a3:e8:63:0e:bd:c1:f9:06:79:
         b3:e6:19:53:3b:a9:eb:b0:de:c0:01:e6:52:79:01:72:ae:b1:
         d1:af:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org