Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1VN1--9edDAZT7P12LtxS7PKGlo.roa
File:                     1VN1--9edDAZT7P12LtxS7PKGlo.roa (raw, json)
Hash identifier:          0Uq8DnbZ8AVY6p35S8I9mav5tfWSpkIVo0gWQGSg7vE=
Subject key identifier:   D5:53:75:FB:EF:5E:74:30:19:4F:B3:F5:D8:BB:71:4B:B3:CA:1A:5A
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1VN1--9edDAZT7P12LtxS7PKGlo.roa
Signing time:             Thu 15 Sep 2022 02:47:11 +0000
ROA not before:           Thu 15 Sep 2022 02:47:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        210.17.51.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D55375FBEF5E7430194FB3F5D8BB714BB3CA1A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:6a:91:71:0f:ae:8e:d3:ec:44:f5:1f:37:
                    8e:2c:f9:7b:0c:9d:1a:24:ee:7a:14:3b:bc:e4:76:
                    aa:27:0b:33:05:45:69:b1:35:b7:f0:77:0c:27:8a:
                    de:8a:ee:f1:c5:1b:c4:b6:61:4d:84:f2:3c:4a:62:
                    8a:a8:52:32:d7:98:2c:17:95:40:e6:00:d5:18:8a:
                    0c:2e:86:8e:b8:ef:fd:f4:4d:dc:5a:a3:0f:fc:2d:
                    1e:9b:63:d4:21:7c:3e:e2:ed:e2:af:d5:56:0f:13:
                    97:31:c6:a4:2a:8c:f7:f5:32:36:09:a2:df:ab:b1:
                    4e:6e:58:b5:21:91:7a:f7:f1:da:e7:ba:f0:1a:e8:
                    97:70:f8:50:cf:d4:e1:d6:ed:a4:6c:19:16:b5:f2:
                    1c:a4:d6:6c:68:57:59:91:c3:29:2b:21:86:47:9c:
                    a6:21:0a:bd:a2:66:11:fd:86:f6:57:28:a0:15:7d:
                    5e:50:d1:fd:2d:32:21:d4:f6:55:b6:68:bd:cd:c7:
                    84:f9:df:75:a6:b5:96:bc:21:ed:0a:17:62:37:70:
                    5f:6b:c2:14:19:2e:6f:ec:bc:d1:3c:a4:44:07:f5:
                    00:1a:5e:6d:95:7f:03:f2:50:f5:a4:59:2c:46:1b:
                    7d:e7:90:b9:98:56:34:d7:b6:ba:1e:59:c2:bd:ba:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:53:75:FB:EF:5E:74:30:19:4F:B3:F5:D8:BB:71:4B:B3:CA:1A:5A
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1VN1--9edDAZT7P12LtxS7PKGlo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:a7:36:84:c6:7a:78:13:45:09:ce:d9:f9:41:61:20:39:
         88:e4:12:47:62:d8:29:fa:e0:87:f0:8e:42:f5:6e:a2:a3:ac:
         06:4e:b5:84:4d:7f:08:b0:0f:2a:72:d7:28:5e:89:f2:f1:0f:
         d3:f2:60:eb:5c:95:3d:e1:b3:06:11:bd:be:ec:ae:52:cf:46:
         2f:b2:b9:79:6a:3f:eb:dd:46:08:8b:e2:7a:10:30:61:b4:60:
         73:bf:eb:7e:9c:05:01:c8:0e:0c:70:1b:6d:d9:ef:61:d3:09:
         47:b8:19:93:12:60:09:04:c8:4d:a2:7b:c2:5d:8e:5b:25:ef:
         49:17:78:76:43:b9:df:c4:25:ed:a3:75:d4:f8:6d:c1:14:8f:
         71:d0:ab:ae:bd:f0:c7:86:d9:d1:3c:82:ad:de:15:f9:ab:63:
         2c:c2:5d:12:e0:18:e2:cb:50:7d:b1:45:b9:1f:1d:45:6d:98:
         c2:cf:5a:17:a3:e1:3f:a6:04:4b:ec:0a:04:89:f2:2f:f5:05:
         5f:1d:83:0d:22:1d:c3:af:44:55:77:74:c1:28:b7:de:e8:bf:
         df:a0:ec:15:7d:0d:fa:12:07:2e:5d:55:b6:fd:68:b4:fe:61:
         1f:82:0b:12:a3:58:2f:90:4c:37:c1:f9:e9:7b:97:b7:24:ab:
         51:51:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org