Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ji4ficpdAmiKzt0fdvURRU08YyU.roa
File:                     Ji4ficpdAmiKzt0fdvURRU08YyU.roa (raw, json)
Hash identifier:          4RT6HaHS2OknZ1XKTHie0pB64AxpEYlC6+GehFY0SDE=
Subject key identifier:   26:2E:1F:89:CA:5D:02:68:8A:CE:DD:1F:76:F5:11:45:4D:3C:63:25
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0ABA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ji4ficpdAmiKzt0fdvURRU08YyU.roa
Signing time:             Sun 07 Feb 2021 11:40:14 +0000
ROA not before:           Sun 07 Feb 2021 11:40:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        49.216.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:40:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=262E1F89CA5D02688ACEDD1F76F511454D3C6325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:eb:17:d4:eb:d7:b9:7f:da:6b:9f:fc:5f:
                    dc:5a:fc:6e:9c:58:c7:92:dd:f1:90:dd:f9:88:0c:
                    db:cb:64:9a:10:96:31:02:a2:31:67:8d:6d:0a:c4:
                    81:f1:1d:11:e8:4c:27:20:44:51:dd:58:1c:fd:fb:
                    f2:55:72:69:14:ef:6a:dc:12:d2:8a:56:70:5f:51:
                    34:45:43:4e:7a:b8:dc:4b:d9:52:cd:99:eb:41:95:
                    c1:6a:1e:10:89:74:e7:f3:46:39:6e:ae:1b:71:05:
                    4c:96:14:fb:a3:2f:f7:fd:09:a8:95:77:e4:51:f4:
                    38:50:8f:a2:ec:b9:b5:f9:00:47:91:05:fb:4d:0a:
                    be:10:56:7d:5d:f2:b5:db:1d:e1:e9:80:b2:24:57:
                    9d:bf:57:13:f4:fe:da:33:ce:40:0f:21:55:d9:93:
                    ac:2e:ef:c9:82:d6:fb:6a:65:b7:91:19:51:98:ea:
                    fe:2d:ff:46:7d:28:24:7d:0a:5f:a1:99:4d:41:ee:
                    e6:01:40:d8:8b:1c:34:39:63:7f:4a:d6:e2:02:67:
                    45:4d:59:12:51:34:08:f4:98:b1:ef:a7:19:41:cf:
                    46:bb:f3:1d:45:c4:ec:8e:9a:5e:45:64:01:7a:0d:
                    29:63:c9:3f:99:56:b3:b8:ca:05:1c:0b:53:14:e9:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:1F:89:CA:5D:02:68:8A:CE:DD:1F:76:F5:11:45:4D:3C:63:25
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ji4ficpdAmiKzt0fdvURRU08YyU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         31:70:36:af:33:f5:5d:fc:75:d2:f0:30:7e:88:76:c2:b4:5d:
         09:76:0c:13:b6:51:de:26:57:1d:82:32:0d:5f:57:9f:8a:60:
         8b:b6:59:05:80:3a:22:ca:4e:b5:29:46:f4:40:03:33:82:82:
         2f:03:46:34:04:91:4b:3a:be:a9:6b:b1:83:bc:f4:a0:10:06:
         04:92:7d:4a:3a:93:96:c1:41:a3:5e:6d:06:ec:06:4e:9f:f4:
         fe:68:db:67:c1:01:e1:e7:a9:8c:88:36:eb:a0:ee:b3:ed:d0:
         ab:9e:b0:5b:dd:c0:db:a6:53:1a:02:0f:9a:c5:d2:e3:b8:73:
         23:d3:aa:c4:b5:5a:bf:dd:37:8c:51:fb:76:2b:9c:c7:c7:41:
         92:24:ac:ce:a1:37:57:94:45:6e:04:9e:05:f6:d9:03:d6:ab:
         04:f2:61:29:03:7d:c6:c5:8a:9d:11:cc:53:6b:20:4a:5b:6e:
         ad:d4:4e:a2:71:0e:96:fe:5d:1b:02:4c:11:42:80:65:e9:b8:
         ef:a0:12:d6:b6:57:6f:87:a4:85:6c:7f:f4:14:2a:47:d5:85:
         0e:08:00:bb:f6:21:67:0e:88:9e:ee:d9:ad:e4:de:9c:4d:e1:
         d9:84:5a:5e:b2:ef:69:65:f8:34:96:3c:5d:b0:27:af:1a:a4:
         cd:0e:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org