Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Ocv37KKNqWxAID1gD21rSxjoZs.roa
File:                     8Ocv37KKNqWxAID1gD21rSxjoZs.roa (raw, json)
Hash identifier:          +Apyr+n0z5S7GZUifryl3x4fuLXVHQLiON/bSmd3kjM=
Subject key identifier:   F0:E7:2F:DF:B2:8A:36:A5:B1:00:80:F5:80:3D:B5:AD:2C:63:A1:9B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Ocv37KKNqWxAID1gD21rSxjoZs.roa
Signing time:             Thu 15 Sep 2022 02:47:34 +0000
ROA not before:           Thu 15 Sep 2022 02:47:34 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        210.63.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:34 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F0E72FDFB28A36A5B10080F5803DB5AD2C63A19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:59:57:57:2d:84:f1:2c:31:65:92:b0:67:
                    5c:3b:7a:b7:9d:1f:b4:c0:70:f3:61:3c:19:15:43:
                    7d:d8:42:94:27:80:07:d9:0f:06:df:80:c6:99:15:
                    31:5a:a8:2c:3b:ae:0e:20:f2:ad:fc:33:e6:51:42:
                    72:6f:86:a6:70:c0:c9:2f:ae:46:84:9b:ca:4d:4d:
                    ed:42:77:4c:8a:24:36:df:fe:61:d1:2f:3c:50:d4:
                    2f:7c:cf:06:4c:50:f7:52:33:07:d1:72:57:8e:b9:
                    fc:25:2e:cc:ce:c8:f6:fb:61:4c:a0:58:2c:e1:b0:
                    15:de:0a:a6:6b:f0:48:2f:24:d9:3d:9a:01:b7:8f:
                    e7:aa:b5:4d:04:00:93:c5:53:0f:04:09:97:13:8e:
                    f7:6f:0a:f9:67:49:8a:58:d5:a2:47:c7:62:49:95:
                    94:d0:ce:57:94:85:7c:be:1c:70:12:8d:cd:0f:d9:
                    80:25:ba:6b:62:69:1a:f4:cf:b4:2f:6a:2d:56:b0:
                    44:14:ec:11:90:40:61:9f:12:ae:70:c3:18:65:5c:
                    3a:ef:32:53:2e:82:95:f5:ce:a1:36:b5:fd:e4:a4:
                    3d:2b:14:14:cb:03:40:30:b5:37:19:1b:fd:50:94:
                    ca:81:00:ca:f3:f4:26:35:4b:ad:9d:d9:e6:82:b4:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E7:2F:DF:B2:8A:36:A5:B1:00:80:F5:80:3D:B5:AD:2C:63:A1:9B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Ocv37KKNqWxAID1gD21rSxjoZs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:72:66:fe:01:63:e5:bb:d5:84:3a:8f:34:47:43:32:29:8e:
         28:df:00:58:09:79:e6:8c:7b:62:b7:00:09:e0:e1:0d:65:ff:
         7f:54:07:56:43:c4:e9:9f:91:9f:31:66:e8:5c:c6:52:9e:70:
         3e:df:cd:ea:b4:77:bb:99:34:4f:c5:4c:75:f5:60:2b:8e:2d:
         bd:b6:bd:55:50:0d:48:2c:4c:5b:08:ee:33:63:ad:38:ac:ed:
         b4:7c:79:c1:62:e5:1f:16:8e:c7:8c:80:4e:b1:57:28:46:3e:
         9e:3c:bc:a2:b5:ae:69:d2:c3:d6:75:44:85:ec:0c:31:30:44:
         22:b7:f3:f5:e8:0f:f8:f4:a1:64:6d:4f:83:92:97:39:6c:05:
         b8:ee:ca:6d:ea:e3:24:7c:a9:a8:00:42:76:a8:77:64:e0:9f:
         38:db:a9:5a:30:6a:60:11:d9:e0:55:ea:3c:57:e8:c1:dc:d4:
         e2:58:54:c1:f0:c1:45:f6:e5:fc:97:c4:45:6a:ab:ad:92:f8:
         34:f4:7a:23:76:25:df:65:b7:36:89:f5:4d:f2:08:7f:7e:40:
         bf:9f:f9:62:83:a5:49:38:a4:cb:0d:6f:c5:76:b1:99:0f:61:
         57:f8:a1:ce:2d:52:81:66:ca:db:f9:6b:ee:65:b2:35:2f:25:
         fa:07:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org