Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M7KcUq2i9tu9us_fN-4HpKN6KV0.roa
File:                     M7KcUq2i9tu9us_fN-4HpKN6KV0.roa (raw, json)
Hash identifier:          FnKKbitzxSEKubwkU+KgXe3RuobMQhJcNadjp3AVU/U=
Subject key identifier:   33:B2:9C:52:AD:A2:F6:DB:BD:BA:CF:DF:37:EE:07:A4:A3:7A:29:5D
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B28
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M7KcUq2i9tu9us_fN-4HpKN6KV0.roa
Signing time:             Sun 07 Feb 2021 13:10:34 +0000
ROA not before:           Sun 07 Feb 2021 13:10:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.17.73.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2856 (0xb28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=33B29C52ADA2F6DBBDBACFDF37EE07A4A37A295D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:c1:d5:f5:c3:4d:bc:0c:61:46:af:14:da:
                    f9:34:03:ec:b2:7e:ee:e9:ca:f4:6b:1c:d7:9b:2b:
                    6f:eb:55:31:a6:5d:6e:95:38:a7:43:00:58:f0:c2:
                    c9:41:1f:0f:51:84:79:44:f5:cd:ca:df:c7:cb:b9:
                    02:b4:c5:2d:de:85:51:23:dd:0b:76:48:34:5c:c9:
                    7f:e5:d4:0c:c6:55:2b:ea:76:a5:3c:3d:8a:3b:29:
                    74:fd:6e:66:48:6b:0f:78:92:2d:96:15:5d:f1:df:
                    84:ea:8f:86:c9:03:2b:a9:b6:54:7e:d5:19:4a:93:
                    e7:06:24:70:74:7c:b2:37:5a:47:bf:1f:75:1b:a4:
                    34:86:d4:4d:da:07:05:74:87:4f:4d:7f:6d:89:c8:
                    02:0a:5a:ba:ce:b8:88:a7:4a:16:ec:0e:8d:8b:d4:
                    d6:25:da:b1:d9:c7:1d:97:2e:16:74:fc:65:af:59:
                    c2:e9:6a:a8:3e:cb:81:42:64:1c:9f:fa:20:5d:1b:
                    54:95:f9:2e:af:7e:50:c6:0d:a8:33:d6:da:de:0f:
                    1b:d3:2e:0a:e9:66:1b:15:f8:bf:85:81:1c:fb:16:
                    01:e9:e3:3f:b8:f0:08:50:b7:c2:96:b1:57:e7:70:
                    bc:81:fa:a5:70:7a:f8:25:e2:59:bc:e0:99:d2:03:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B2:9C:52:AD:A2:F6:DB:BD:BA:CF:DF:37:EE:07:A4:A3:7A:29:5D
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M7KcUq2i9tu9us_fN-4HpKN6KV0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:a8:33:39:ad:2f:8f:67:8b:d5:b4:42:9d:79:f7:85:30:
         bc:c2:4d:fd:ca:a8:46:a1:e8:13:0e:43:62:a7:46:2d:b7:cb:
         65:af:2a:f5:b5:3f:15:6d:15:cd:07:d7:d1:f4:e8:b3:f2:dd:
         40:5e:ef:b5:26:65:b7:9c:4a:e1:5a:5a:d7:6e:79:db:94:80:
         20:a4:54:42:3f:dd:a7:f4:fe:e6:a2:84:1c:4b:0e:00:71:ee:
         22:86:04:d9:91:2d:d7:69:3d:a0:13:ff:f6:f2:82:da:b8:2f:
         21:51:62:62:79:23:c0:bb:1d:6c:71:d4:80:f3:be:7f:26:f2:
         56:7d:58:55:eb:76:c8:24:5b:d5:81:9a:9f:c8:ea:ec:34:71:
         0f:df:4c:60:7f:d6:c2:5c:b6:5e:25:7d:cf:e6:22:cc:0f:d7:
         8b:76:f6:aa:7c:1f:55:c8:24:c0:39:62:46:87:e9:9f:03:38:
         a7:ba:45:95:ac:b6:65:05:1b:97:72:49:f3:2b:2c:51:e0:07:
         ad:61:1e:e3:cc:ea:e1:1d:c9:e3:19:1c:7c:30:d4:84:3d:bc:
         d6:79:f0:85:63:3f:b3:f2:72:4a:49:4d:e4:99:98:bd:4e:f8:
         bd:fc:09:f4:b4:3c:e4:ac:02:60:8e:d7:64:b1:86:c5:b8:e4:
         c9:90:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org