Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4JrP8j9tmQJ9-6gm4Ph8FyKtXCE.roa
File:                     4JrP8j9tmQJ9-6gm4Ph8FyKtXCE.roa (raw, json)
Hash identifier:          xTIC9v4lAG/7UAha3dVz/M6R2wYv7M/Jfewns1+2QUQ=
Subject key identifier:   E0:9A:CF:F2:3F:6D:99:02:7D:FB:A8:26:E0:F8:7C:17:22:AD:5C:21
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4JrP8j9tmQJ9-6gm4Ph8FyKtXCE.roa
Signing time:             Thu 15 Sep 2022 02:47:17 +0000
ROA not before:           Thu 15 Sep 2022 02:47:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        210.192.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E09ACFF23F6D99027DFBA826E0F87C1722AD5C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:b7:62:b8:05:d3:d9:18:44:24:44:44:dc:
                    ed:b5:10:25:11:97:1f:b4:ae:39:35:00:9a:ae:79:
                    32:d8:3c:a5:10:3f:32:88:41:7d:b9:f5:b9:b7:67:
                    ef:a9:ce:27:bc:ba:0e:69:71:3e:50:83:b6:b5:d8:
                    b6:c5:b8:7b:27:be:d5:fe:60:ff:52:e3:97:8c:04:
                    af:8c:cf:64:03:8f:55:2e:68:04:ea:59:76:7b:6c:
                    57:a9:89:90:c6:4c:6f:d9:24:1d:c3:ad:50:a2:a0:
                    e6:1e:59:8f:2b:9f:ea:a5:3e:6c:b0:72:10:f0:9f:
                    41:34:07:84:f1:14:45:5d:eb:cd:ab:9b:76:fa:5e:
                    d0:43:0e:bd:e3:cf:bb:28:41:57:5e:d4:e5:a5:a8:
                    84:7f:83:67:12:bb:f4:c7:62:ea:51:a0:9b:b8:10:
                    db:d8:09:00:b5:6e:e2:a3:22:32:e3:51:e8:3f:93:
                    c1:43:46:ac:79:6b:34:b9:b6:a7:88:8c:89:2e:6a:
                    e5:f4:0b:bb:2e:3a:98:bf:d6:63:b6:95:7c:df:a6:
                    81:48:38:23:54:bc:cf:89:fa:7f:e7:b8:78:0e:8f:
                    4e:fa:29:93:10:d4:f5:72:99:14:38:7f:9b:64:12:
                    ce:51:ac:20:1f:ce:40:d7:aa:a0:2d:fb:50:19:11:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9A:CF:F2:3F:6D:99:02:7D:FB:A8:26:E0:F8:7C:17:22:AD:5C:21
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4JrP8j9tmQJ9-6gm4Ph8FyKtXCE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.192.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:39:97:f9:fe:4d:2d:79:ce:64:be:71:c9:13:aa:38:2b:4f:
         7e:9c:36:c1:db:f8:b4:33:77:10:91:74:3a:e4:bc:ba:75:de:
         a8:0d:89:24:37:2e:47:ef:d2:0b:73:23:27:bb:5c:f7:48:b7:
         a5:2e:b7:30:38:09:88:61:c9:66:41:6a:d0:24:e0:c2:87:41:
         d7:06:b7:c0:7c:15:f2:aa:cb:6e:69:50:f7:32:bf:ce:37:44:
         cd:9e:c3:71:be:08:e8:5b:ca:42:e4:c5:31:6b:10:e4:c5:04:
         e9:37:74:37:df:30:c5:f0:c1:7f:12:17:c9:10:38:09:7a:e8:
         3e:0a:14:b4:d3:ce:d8:3b:ab:51:4b:9a:fd:39:60:fd:85:df:
         e9:f8:3a:39:88:db:15:df:d9:00:2b:2d:22:6e:e2:b6:29:9e:
         dd:69:e4:8b:da:85:b3:05:4a:0f:a8:50:98:2e:32:81:f7:38:
         9a:2c:91:2c:c0:36:ca:bc:4f:11:6c:e3:34:fe:23:1f:fa:2b:
         07:1a:3a:6b:1a:f2:95:78:f7:96:18:e0:27:8c:38:30:e6:d5:
         73:ef:cb:8f:03:6f:47:5a:ce:f6:4e:5f:cb:a3:73:12:e3:26:
         8e:49:5a:2c:02:30:d1:ad:b7:5a:94:2d:a5:11:fc:c8:a2:35:
         61:33:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org