Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EY9IjtaPPht8BrcHBmeaykir838.roa
File:                     EY9IjtaPPht8BrcHBmeaykir838.roa (raw, json)
Hash identifier:          RcaQm5QwcA/9pkPlxydnGv1+mwKYj+pz2IL7Q8FQ0/I=
Subject key identifier:   11:8F:48:8E:D6:8F:3E:1B:7C:06:B7:07:06:67:9A:CA:48:AB:F3:7F
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EY9IjtaPPht8BrcHBmeaykir838.roa
Signing time:             Thu 15 Sep 2022 02:47:15 +0000
ROA not before:           Thu 15 Sep 2022 02:47:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     20940
IP address blocks:        2001:4546:1003::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=118F488ED68F3E1B7C06B70706679ACA48ABF37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:b8:a4:83:55:f1:81:a8:7b:54:25:36:ff:
                    4a:58:a7:bf:2a:43:b1:71:c1:75:43:c1:76:3c:3f:
                    7c:ea:86:c0:b2:10:32:9f:7b:52:0d:99:d0:62:46:
                    78:44:b4:e9:58:e7:a0:a9:51:e2:19:29:04:c5:cf:
                    53:0d:bf:32:6b:2b:94:ef:1f:52:5e:26:68:6d:fa:
                    2b:83:ca:d6:9b:84:73:33:25:a3:14:0f:31:72:e5:
                    08:40:43:67:62:dd:90:22:0c:d6:15:24:c3:81:70:
                    08:2e:22:c4:15:a3:2c:78:8e:e6:45:8b:5f:a6:73:
                    d5:06:b6:f9:e9:6f:a6:0f:76:41:df:24:16:49:af:
                    08:66:5d:2b:46:56:8c:4d:3a:fc:ed:d9:14:bd:59:
                    a3:c3:fe:a1:e6:88:95:f5:2d:84:95:0a:8b:58:6f:
                    bc:63:9c:22:b8:7b:27:51:93:dd:6f:d5:57:2a:12:
                    fd:53:b7:fc:3c:03:54:b6:eb:35:13:43:a8:46:b9:
                    c3:bb:98:8e:81:b4:f7:33:73:d3:8c:8b:e0:29:66:
                    bb:96:de:e8:dd:45:8c:c6:d1:40:4c:ef:c1:b0:18:
                    af:ee:ff:0a:dd:8c:5e:27:89:b5:c4:10:e0:ef:ea:
                    9c:2f:80:da:87:25:58:17:c9:26:72:db:45:cb:f9:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8F:48:8E:D6:8F:3E:1B:7C:06:B7:07:06:67:9A:CA:48:AB:F3:7F
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EY9IjtaPPht8BrcHBmeaykir838.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4546:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:8e:08:f9:c7:36:b8:32:2e:33:41:a7:06:8b:33:f4:9b:
         0b:40:0f:f7:2d:47:35:3e:0e:5d:65:36:5a:80:de:a2:42:d7:
         70:cc:4c:5c:b9:96:01:1b:81:d3:e4:56:8e:53:bf:ae:e3:2f:
         67:9a:18:04:d2:46:4f:d9:df:cc:74:df:41:05:5c:7c:a4:e1:
         63:72:f6:eb:bb:44:cf:9d:7f:23:77:5e:c7:eb:bb:7f:e9:4a:
         45:4d:c6:4b:89:d4:3b:ad:a7:9c:82:f0:7b:cc:11:1b:1e:15:
         a4:e9:42:f6:7e:60:7f:9c:a2:b6:2d:5a:58:58:e5:60:eb:aa:
         5d:db:f7:fb:b2:74:3a:1c:f5:a6:a1:ca:47:e6:2c:af:ee:31:
         1c:67:18:07:51:1a:78:35:72:e0:98:bd:79:a4:cd:74:0f:18:
         41:64:e0:cb:14:f5:ae:7d:7d:88:2d:0e:12:13:a5:d6:7b:cc:
         86:89:43:a9:94:bf:80:be:69:5f:cc:c1:a3:a2:72:da:e9:50:
         4f:a9:03:c9:40:27:4b:c8:59:f1:b7:e3:af:cc:fa:7c:fb:60:
         6f:0b:3b:61:66:1e:bb:bd:c4:2b:05:26:94:e2:8a:32:01:7f:
         32:a5:a7:b1:91:27:0e:f8:9c:85:c7:46:14:1b:a8:d6:f9:a3:
         b2:58:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org