Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7bleoFzuFQ8ENr34Gr4khEcgAMM.roa
File:                     7bleoFzuFQ8ENr34Gr4khEcgAMM.roa (raw, json)
Hash identifier:          Q6eWL9bDEDavy1FbRlRr7/GYnQmYlmMO/knz/jiWROo=
Subject key identifier:   ED:B9:5E:A0:5C:EE:15:0F:04:36:BD:F8:1A:BE:24:84:47:20:00:C3
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C7B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7bleoFzuFQ8ENr34Gr4khEcgAMM.roa
Signing time:             Wed 29 Sep 2021 02:49:54 +0000
ROA not before:           Wed 29 Sep 2021 02:49:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        175.97.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3195 (0xc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EDB95EA05CEE150F0436BDF81ABE2484472000C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:f6:66:03:eb:9e:90:7f:71:e1:d9:84:a0:
                    31:b8:1a:c0:31:24:90:87:88:6d:49:76:8b:08:f4:
                    d2:7b:6a:0c:6c:95:fd:7b:27:2e:a2:a7:37:b6:86:
                    c3:64:72:6b:9e:aa:ed:08:ca:f4:42:66:66:c2:65:
                    16:2d:60:63:ed:b6:06:28:80:04:6e:f5:c9:a9:56:
                    ca:d8:c2:56:9a:af:bd:ba:b2:be:db:5e:b2:70:bb:
                    1c:db:9a:2e:a8:46:13:15:32:48:ed:d8:4c:bf:3f:
                    f3:c9:72:3f:61:e5:fb:92:77:93:c6:62:02:de:3d:
                    c6:22:54:18:71:7b:6a:7e:15:a0:c6:28:52:46:c8:
                    3b:5a:68:f7:45:c4:b5:80:33:ad:8b:22:1c:21:0f:
                    1b:cd:f4:79:8b:6a:24:e7:38:af:7e:0a:d2:ec:13:
                    94:23:cc:51:98:64:76:e5:52:13:59:1f:de:50:5a:
                    ba:ea:e2:78:9e:89:03:3a:45:5e:25:26:08:d9:13:
                    d0:01:18:f5:c2:4e:30:4b:cb:92:95:30:2e:99:c6:
                    bd:34:45:b5:a7:46:f1:68:d2:6b:e9:b1:53:cc:3c:
                    eb:ff:a7:80:47:53:86:68:37:41:a8:f7:1e:42:0c:
                    66:8b:5d:b1:cb:71:03:28:5a:88:b9:3b:0b:f1:06:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B9:5E:A0:5C:EE:15:0F:04:36:BD:F8:1A:BE:24:84:47:20:00:C3
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7bleoFzuFQ8ENr34Gr4khEcgAMM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:a9:f4:42:57:38:43:e4:ff:49:87:25:64:28:d4:a0:8c:
         8a:05:63:76:dc:bf:a0:94:b2:cd:81:f8:c2:26:09:24:70:ef:
         1a:26:eb:ad:18:ef:35:28:4c:47:54:7a:53:b6:25:16:6b:29:
         24:5d:e0:e1:0c:f7:4a:49:71:6c:b6:98:aa:65:fd:20:09:60:
         73:85:a2:a3:4a:7a:94:ae:d8:05:62:44:ce:55:1d:c0:f2:04:
         0f:a9:8e:f2:68:f6:d6:87:63:75:3c:08:f5:9a:01:2a:2c:3e:
         4c:d2:b4:47:4a:0a:40:3f:6e:bd:f6:ce:9a:df:c6:1f:e6:1f:
         b9:c1:3c:bf:c1:82:c9:82:80:b4:c9:46:d5:f4:32:10:a2:eb:
         f3:0c:c0:f9:12:e7:8b:d9:40:8b:40:a3:72:fd:6a:78:e6:2b:
         54:06:ea:dc:e4:7e:18:c6:fb:c2:86:ed:ae:26:32:17:08:ff:
         1d:a7:ef:47:f6:20:48:76:24:d3:5f:47:f2:73:1c:88:8e:f7:
         34:1b:de:27:c8:7d:de:3a:a8:92:bd:09:19:d8:3b:6f:6c:6a:
         9e:6e:ab:cf:47:0b:61:9a:b5:60:09:e8:b7:91:df:95:f1:13:
         32:a1:ae:fb:61:03:2d:ab:4d:89:4a:3e:b3:47:51:ac:7d:93:
         a1:15:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org