Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8hlIuOZewqU5fOqNPigd-doH8eY.roa
File:                     8hlIuOZewqU5fOqNPigd-doH8eY.roa (raw, json)
Hash identifier:          uLUUQzLezokAFDrDREvc7djV92UNPtxYGsx9lWVKwXc=
Subject key identifier:   F2:19:48:B8:E6:5E:C2:A5:39:7C:EA:8D:3E:28:1D:F9:DA:07:F1:E6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0A62
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8hlIuOZewqU5fOqNPigd-doH8eY.roa
Signing time:             Sun 07 Feb 2021 11:36:07 +0000
ROA not before:           Sun 07 Feb 2021 11:36:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        49.214.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:36:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F21948B8E65EC2A5397CEA8D3E281DF9DA07F1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:2a:3e:4a:23:4a:cd:c5:16:e2:c5:a6:22:
                    85:f2:f6:a3:47:61:72:a5:35:5e:a2:72:99:52:74:
                    90:c0:b8:eb:c9:e7:36:67:db:74:86:46:a9:0c:89:
                    9f:ac:98:1f:9b:10:4a:8f:09:20:e8:34:99:2a:2e:
                    47:9b:49:23:71:b2:01:27:21:ea:78:fa:27:25:93:
                    d1:ab:5c:b6:3f:39:2e:a8:03:7e:de:ba:b4:16:d8:
                    fd:9a:d7:e1:71:32:10:a9:2c:40:30:d0:c4:57:2d:
                    43:17:00:18:92:d4:13:c1:ff:01:e4:d4:f3:44:73:
                    50:81:c1:a1:ec:0f:d1:b5:fd:74:24:43:17:ce:e1:
                    58:67:a4:e2:7f:29:14:6c:5f:5c:cc:53:b5:b4:48:
                    45:73:64:6f:3f:85:f1:d7:61:71:72:66:5e:83:40:
                    a8:b4:e8:58:92:1a:fc:ee:cc:1b:b1:c1:8f:29:7f:
                    c9:72:3a:93:f0:36:fc:ca:a2:30:86:4c:2a:49:2e:
                    a5:2e:68:a8:18:f7:1a:66:15:2d:d6:d8:5a:0b:43:
                    f6:24:94:da:5b:16:19:b1:94:65:e5:4b:da:ea:2b:
                    4c:db:50:ce:f7:49:1e:e0:f8:45:49:8b:8c:0a:df:
                    59:29:0c:cb:fb:a7:79:72:0d:9a:9c:d6:1f:ef:2c:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:19:48:B8:E6:5E:C2:A5:39:7C:EA:8D:3E:28:1D:F9:DA:07:F1:E6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8hlIuOZewqU5fOqNPigd-doH8eY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.214.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         48:03:9b:3c:9f:9b:ac:28:d0:81:21:ab:c4:72:1f:66:71:69:
         c6:b1:a4:b7:b5:27:6f:f3:69:a6:10:7f:16:c8:74:1d:95:09:
         08:dd:fa:69:d7:9d:03:93:35:11:67:ad:4d:9c:9f:23:65:03:
         5d:f8:a5:bb:b0:37:07:c0:0d:bf:79:37:b7:57:b9:ce:bd:ce:
         5e:08:5f:bc:03:65:41:45:3a:69:e7:37:e9:c9:97:e1:01:3e:
         7b:a4:da:51:37:f2:86:6f:9a:e6:82:f5:3e:bc:99:c0:17:a0:
         80:54:2b:17:08:c4:14:8e:d4:60:21:68:3c:68:59:56:e1:7b:
         ba:14:20:37:a9:e9:70:67:72:b0:ad:15:9c:e6:16:2b:27:3c:
         7b:65:07:d0:62:36:cc:cd:ab:55:4e:4f:50:0f:03:02:cb:84:
         fb:e8:ca:0a:2a:d4:90:40:68:13:6d:9a:8d:83:ed:68:e1:eb:
         9a:ac:37:0c:d1:97:26:19:e5:13:fc:73:14:9e:e5:58:6b:95:
         a0:44:79:a1:b7:9c:f4:0f:46:34:71:32:b4:68:fc:88:59:c0:
         79:4b:24:64:72:97:d2:98:44:80:88:de:77:0b:23:49:a5:59:
         a7:22:b8:01:a7:b6:b7:08:c8:f8:3f:9e:c5:3f:e6:3f:04:06:
         1f:46:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org