Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J5bpn8mhvfBeFB4Z0h8NJd0wBnI.roa
File:                     J5bpn8mhvfBeFB4Z0h8NJd0wBnI.roa (raw, json)
Hash identifier:          +wvkCrLvWnJ9/I4Bf4IU8mVInq+ps0DWYb0M39mOJbg=
Subject key identifier:   27:96:E9:9F:C9:A1:BD:F0:5E:14:1E:19:D2:1F:0D:25:DD:30:06:72
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J5bpn8mhvfBeFB4Z0h8NJd0wBnI.roa
Signing time:             Thu 15 Sep 2022 02:46:55 +0000
ROA not before:           Thu 15 Sep 2022 02:46:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4662
IP address blocks:        203.77.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:46:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2796E99FC9A1BDF05E141E19D21F0D25DD300672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:af:09:be:e5:27:5b:42:7e:a1:17:b9:9a:
                    3a:a1:52:53:3f:24:ff:6c:e3:9a:74:a5:fc:c4:56:
                    3b:b7:2b:ed:e6:9a:46:09:a0:21:f3:a1:c0:63:f8:
                    00:ee:ac:d7:58:73:5b:5e:de:a2:81:5a:e1:44:d6:
                    ec:11:c7:ae:c9:ac:dd:04:5f:f6:ed:7e:69:50:fd:
                    06:b2:65:5f:ba:48:95:d6:ed:33:71:8f:bc:43:57:
                    4f:eb:3f:9e:f9:9b:28:73:64:5c:7d:ef:98:ee:c2:
                    32:65:05:55:79:72:10:a1:23:93:c2:9d:cd:e3:60:
                    a8:24:b7:6a:5c:dd:a9:94:eb:00:cc:ec:f3:85:dc:
                    e4:8f:1b:be:7b:39:f5:e4:7c:49:9c:42:b8:64:33:
                    b9:e1:87:a5:cf:19:f6:27:92:d5:f6:e8:45:01:c7:
                    f0:2a:bd:da:b7:66:f8:88:48:c1:03:e0:b3:ad:51:
                    6b:53:77:95:cb:66:e5:19:15:2b:ff:8e:9c:ff:73:
                    cc:eb:e2:a7:a8:45:7b:84:f8:e1:5f:f2:68:0d:50:
                    0d:67:7c:2d:2a:a6:9c:8e:9c:65:17:14:a8:c9:18:
                    df:a6:09:e7:80:29:af:cb:ae:d9:fb:72:25:26:d2:
                    26:fa:f2:6a:35:b6:3f:55:f6:03:bd:24:56:94:06:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:E9:9F:C9:A1:BD:F0:5E:14:1E:19:D2:1F:0D:25:DD:30:06:72
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/J5bpn8mhvfBeFB4Z0h8NJd0wBnI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:41:d9:24:1e:26:fd:bb:f9:dc:3d:d8:ab:92:d2:49:75:84:
         8f:90:e2:f4:b1:d5:f9:f1:55:a8:e4:4e:f8:d1:fe:7e:4d:e2:
         0d:58:e7:38:47:b6:c0:70:71:e6:e9:c0:e2:a5:81:8d:dc:be:
         d0:67:37:2c:ac:c5:5a:4f:e6:1a:23:e7:d3:45:98:e8:b9:98:
         8a:cf:cd:2f:30:b5:18:93:66:0a:60:91:d2:d1:48:db:12:b2:
         9b:65:19:0b:18:99:03:4a:2c:5f:6c:fc:ac:a2:2f:c0:f4:01:
         60:11:e0:89:d9:b0:83:6e:aa:47:2a:d1:f1:d2:36:c5:18:65:
         f6:40:ac:b9:d0:8b:c5:e0:cc:78:b5:7b:0a:cc:a3:70:9f:27:
         a8:27:42:8a:8b:6d:75:41:9b:3d:fd:7e:ed:bc:4d:ec:7e:b2:
         e6:59:b5:46:79:fa:7b:7e:59:a3:52:df:94:35:f4:21:91:17:
         bd:1f:c2:bb:81:e7:65:0a:e6:b5:6c:e7:7a:f6:da:c2:51:9d:
         7c:e4:01:f5:0f:f0:54:2a:ed:92:de:6d:ba:3e:32:3d:26:9d:
         fe:14:87:59:97:68:75:15:0b:25:92:78:ac:b9:61:28:01:e9:
         ae:33:44:89:96:de:e2:5c:68:6c:87:ed:5c:be:fd:3d:52:86:
         1d:5b:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org