Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GqqBGRwTRiH35mkor8g7rJqBHrs.roa
File:                     GqqBGRwTRiH35mkor8g7rJqBHrs.roa (raw, json)
Hash identifier:          Nw6nuf7mLRiElBwaagOQuhJaA/7S7lb26JEcBRqqRc4=
Subject key identifier:   1A:AA:81:19:1C:13:46:21:F7:E6:69:28:AF:C8:3B:AC:9A:81:1E:BB
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C59
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GqqBGRwTRiH35mkor8g7rJqBHrs.roa
Signing time:             Wed 29 Sep 2021 02:49:42 +0000
ROA not before:           Wed 29 Sep 2021 02:49:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        203.105.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3161 (0xc59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1AAA81191C134621F7E66928AFC83BAC9A811EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:20:41:b2:92:a6:bd:24:39:51:83:b6:53:
                    7f:0b:cd:74:91:21:e7:24:d3:0a:64:0d:45:4c:02:
                    4f:20:fb:b0:03:93:af:3c:92:f8:c6:3e:1a:ec:8c:
                    41:97:39:3f:27:f4:cc:14:f3:0f:b6:18:2d:ee:04:
                    11:2f:64:91:a3:18:a1:da:a0:53:df:f5:e3:e7:bb:
                    b7:cc:1f:ee:93:74:47:2b:a3:81:2e:c0:6f:bd:43:
                    e9:b7:c8:45:d4:4a:83:c6:87:2d:f2:1d:08:13:11:
                    66:4f:a5:8c:b7:1f:ca:56:63:ab:75:e8:9b:ee:aa:
                    64:0e:f6:18:b1:79:8a:7c:71:83:52:45:d9:ac:da:
                    70:06:06:99:94:76:9e:b8:fa:35:6a:80:8e:18:1a:
                    8f:89:98:d8:59:5d:9b:47:7d:14:b5:ef:2b:7d:12:
                    43:a6:0c:ae:ac:4b:c2:10:b8:99:82:13:9c:c9:66:
                    bc:f9:7a:17:73:d0:93:00:28:59:3b:21:78:0d:81:
                    bd:0b:0a:ba:51:91:12:1a:29:ff:b7:a3:ad:1d:21:
                    81:0d:5a:10:43:4e:18:20:7b:9f:9b:a3:02:8d:59:
                    7c:a8:1e:5f:6d:f9:25:2d:19:ed:f4:27:0f:04:25:
                    80:4c:8b:ec:ef:36:b3:b1:69:1f:d0:ac:be:78:1d:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:81:19:1C:13:46:21:F7:E6:69:28:AF:C8:3B:AC:9A:81:1E:BB
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GqqBGRwTRiH35mkor8g7rJqBHrs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:a1:34:99:ae:a5:72:3a:75:e5:8e:6f:a1:cf:f5:36:b8:
         f6:03:65:48:70:bf:eb:e8:27:cd:30:14:fd:c2:3c:18:0c:79:
         e4:36:1f:39:7d:95:de:fd:b5:99:88:1d:70:3e:56:13:69:20:
         dd:c9:e6:d9:f4:dd:09:7b:84:d2:8e:53:16:71:4b:b5:21:29:
         36:33:c5:48:f0:92:6b:f0:af:3b:d3:49:18:27:8f:23:77:5e:
         19:d3:ba:93:5f:8b:d9:fc:85:42:b8:4e:7c:3d:b5:e8:f9:30:
         25:44:11:98:de:37:f0:69:2f:f8:5e:10:b5:95:43:4e:2d:c6:
         19:48:f0:97:af:a0:75:d3:12:c7:de:90:9a:5a:a0:7d:97:be:
         12:1a:6f:b2:cb:6a:8a:be:71:d9:70:3d:69:33:c9:76:73:14:
         e8:22:c1:c6:88:e7:c2:7c:fb:b9:52:3b:af:48:24:46:99:00:
         e1:05:35:e4:3a:e6:04:d6:3c:e3:32:61:d8:17:54:50:d8:ff:
         04:10:0f:78:44:4a:80:64:1a:78:12:7d:ec:f4:ac:76:83:13:
         38:6a:a2:ac:90:76:b6:ce:78:60:c1:da:48:08:df:6c:ae:24:
         e1:3f:76:2b:03:78:91:9e:6d:8c:c0:e8:61:db:c0:b8:81:c6:
         fc:a0:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org