Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Lb6Sm-e-P1RfibI8lk6wot6HP_4.roa
File:                     Lb6Sm-e-P1RfibI8lk6wot6HP_4.roa (raw, json)
Hash identifier:          5fkJS7MvloAFh1V4Kg+tg+xBnl+xchuFPc6dbbfDWd8=
Subject key identifier:   2D:BE:92:9B:E7:BE:3F:54:5F:89:B2:3C:96:4E:B0:A2:DE:87:3F:FE
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       07F5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Lb6Sm-e-P1RfibI8lk6wot6HP_4.roa
Signing time:             Tue 29 Sep 2020 09:57:35 +0000
ROA not before:           Tue 29 Sep 2020 09:57:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.63.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2DBE929BE7BE3F545F89B23C964EB0A2DE873FFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:84:28:d8:dc:fa:1a:c0:4e:7b:d1:d7:e7:
                    c1:40:c9:cb:2d:7c:6a:c3:fd:7a:b1:e4:4e:f7:fd:
                    38:6a:4b:08:56:a1:3c:c0:d0:b7:61:c0:cd:7b:5c:
                    b0:4c:8a:a1:7a:ec:d4:8f:73:ed:fb:e2:19:b7:23:
                    d2:5d:61:24:55:a8:4c:9f:11:56:a0:5f:40:67:e5:
                    23:d3:9b:10:9f:28:ed:c8:54:71:86:cd:3c:91:35:
                    4a:9d:50:0d:9d:0f:06:36:4a:69:fe:69:ad:9d:3b:
                    f5:d9:f8:e8:ee:03:ef:a0:4b:65:3c:26:a7:b5:5b:
                    39:f6:eb:a0:84:26:d1:54:bd:4b:52:06:66:76:f9:
                    8c:9c:c8:d7:94:57:42:73:ed:44:b6:dd:1c:41:ba:
                    0f:bc:1b:17:d7:6c:b3:d6:db:da:fa:08:7f:f3:b7:
                    2a:47:e7:9e:c3:84:87:9c:99:8e:19:d7:8d:72:27:
                    85:03:00:6f:16:50:df:6f:20:6a:8b:b1:fb:56:ad:
                    46:8d:3b:a2:7d:a3:64:fc:ba:fb:2d:62:61:b8:d4:
                    a8:c2:a1:0f:c2:e9:6b:dd:8c:80:c6:64:b4:ae:c8:
                    15:82:8d:45:9c:48:3b:e4:e6:d6:63:68:b5:38:8f:
                    68:47:cf:37:2a:10:5f:08:df:fd:5e:9e:62:74:a4:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:92:9B:E7:BE:3F:54:5F:89:B2:3C:96:4E:B0:A2:DE:87:3F:FE
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Lb6Sm-e-P1RfibI8lk6wot6HP_4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:03:a0:df:4b:3e:6a:0e:7e:bc:41:14:20:12:63:68:64:75:
         87:c3:ef:d9:22:ac:67:c6:18:3b:b7:38:91:66:c4:38:be:ff:
         e7:7a:47:4c:a3:56:ba:e9:37:b6:42:42:94:f1:80:7f:c5:68:
         1c:b5:57:e7:19:cd:95:a3:c2:0f:a3:4a:0a:35:2a:9e:77:a2:
         68:cf:fc:4d:92:14:54:f6:5e:13:61:1f:10:42:f2:b6:f1:b0:
         cd:3d:bc:44:b2:ae:1c:39:f3:a6:ca:ca:56:24:02:5d:08:8c:
         d6:5a:71:a8:46:91:0d:dd:77:6f:5d:e3:7c:84:82:7f:73:8a:
         77:d1:6f:29:fa:c7:ea:b4:09:c4:1c:88:02:03:d7:9c:6d:b0:
         f8:c9:a1:d0:a8:bb:fa:2c:48:e8:3d:e6:0a:d6:62:c2:02:50:
         6a:99:28:0a:5e:2f:aa:0e:91:45:02:b6:ed:04:6c:28:8b:75:
         f4:ba:be:19:5e:94:e9:17:68:7f:2b:68:95:89:f1:44:2f:24:
         fc:b5:eb:ed:0e:2c:0b:a0:82:8b:6e:9d:e9:00:7f:d0:3a:80:
         ed:19:c0:96:c2:ee:db:6e:cc:37:03:4d:73:13:52:5f:04:a4:
         4b:5e:9f:b4:80:6e:03:5f:22:85:ba:36:59:21:76:17:bf:31:
         0f:21:12:9f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3MzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJEQkU5MjlCRTdCRTNG
NTQ1Rjg5QjIzQzk2NEVCMEEyREU4NzNGRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHp4Qo2Nz6GsBOe9HX58FAycstfGrD/Xqx5E73/ThqSwhWoTzA
0LdhwM17XLBMiqF67NSPc+374hm3I9JdYSRVqEyfEVagX0Bn5SPTmxCfKO3IVHGG
zTyRNUqdUA2dDwY2Smn+aa2dO/XZ+OjuA++gS2U8Jqe1Wzn266CEJtFUvUtSBmZ2
+YycyNeUV0Jz7US23RxBug+8GxfXbLPW29r6CH/ztypH557DhIecmY4Z141yJ4UD
AG8WUN9vIGqLsftWrUaNO6J9o2T8uvstYmG41KjCoQ/C6WvdjIDGZLSuyBWCjUWc
SDvk5tZjaLU4j2hHzzcqEF8I3/1enmJ0pK1lAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQULb6Sm+e+P1RfibI8lk6wot6HP/4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTGI2U20tZS1QMVJmaWJJ
OGxrNndvdDZIUF80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdI/oDANBgkqhkiG9w0BAQsFAAOCAQEAmgOg30s+ag5+vEEUIBJjaGR1h8Pv2SKs
Z8YYO7c4kWbEOL7/53pHTKNWuuk3tkJClPGAf8VoHLVX5xnNlaPCD6NKCjUqnnei
aM/8TZIUVPZeE2EfEELytvGwzT28RLKuHDnzpsrKViQCXQiM1lpxqEaRDd13b13j
fISCf3OKd9FvKfrH6rQJxByIAgPXnG2w+Mmh0Ki7+ixI6D3mCtZiwgJQapkoCl4v
qg6RRQK27QRsKIt19Lq+GV6U6RdofytolYnxRC8k/LXr7Q4sC6CCi26d6QB/0DqA
7RnAlsLu227MNwNNcxNSXwSkS16ftIBuA18ihbo2WSF2F78xDyESnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org