Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PH1PLDCIH_bB63PN6yKbL82tqu8.roa
File:                     PH1PLDCIH_bB63PN6yKbL82tqu8.roa (raw, json)
Hash identifier:          O9zC+6xANLRlOGeVMQAmZZDepRMWDjr8aACRsmW+Lo8=
Subject key identifier:   3C:7D:4F:2C:30:88:1F:F6:C1:EB:73:CD:EB:22:9B:2F:CD:AD:AA:EF
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C9C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PH1PLDCIH_bB63PN6yKbL82tqu8.roa
Signing time:             Wed 29 Sep 2021 02:50:03 +0000
ROA not before:           Wed 29 Sep 2021 02:50:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131634
IP address blocks:        124.108.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3228 (0xc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3C7D4F2C30881FF6C1EB73CDEB229B2FCDADAAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:e5:ac:d1:84:26:7a:5c:bf:7c:0a:c8:7a:
                    a9:07:c3:ee:31:7e:f1:e8:9e:dd:1c:79:d8:ed:3b:
                    e2:66:43:06:00:54:5e:e4:a8:b5:57:cb:53:16:52:
                    0c:bf:ad:72:7b:0a:db:05:0e:c0:4a:80:aa:8f:10:
                    f5:eb:08:99:51:f5:f8:33:62:20:9e:68:0b:ac:22:
                    d5:a6:4a:84:64:dc:8b:cf:c3:ec:e5:f8:a9:52:3e:
                    90:ec:ae:ef:a1:7a:cd:a5:0e:ce:a5:a0:e2:34:8a:
                    89:fa:7b:ae:93:04:7e:14:12:6b:02:12:1d:69:6c:
                    3f:f5:0e:2b:84:25:ad:93:0b:20:99:56:2e:c8:ad:
                    1b:0d:12:20:81:70:d5:6a:2b:b4:5e:59:e8:2a:b4:
                    5f:d5:c4:4b:87:98:b3:aa:2f:c7:3c:66:ff:56:55:
                    53:d4:d9:38:f0:8f:29:a0:28:f1:11:c8:47:28:f4:
                    7e:48:9d:42:31:c2:f5:6c:2e:06:5c:c6:8a:c1:c1:
                    1c:9d:47:d3:f4:3e:23:f2:9b:c8:7c:d3:20:e4:fc:
                    b2:e3:4b:2a:59:a3:e5:ae:93:56:87:aa:b8:10:ac:
                    2e:0b:b8:44:7c:b1:68:8f:fc:c4:75:cf:8b:bd:c9:
                    5e:01:83:0f:09:e9:f8:35:c4:79:ff:51:6a:4a:1b:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:4F:2C:30:88:1F:F6:C1:EB:73:CD:EB:22:9B:2F:CD:AD:AA:EF
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PH1PLDCIH_bB63PN6yKbL82tqu8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:46:9b:c9:8d:c7:b8:e2:1a:4c:cb:ce:0e:61:e5:20:3e:c9:
         93:fb:08:23:42:65:41:09:d7:ec:7d:ba:73:f7:1e:49:5f:3b:
         06:65:bb:1d:5d:ae:a4:c1:7b:5c:4e:7a:8e:93:de:0d:d3:12:
         75:ab:97:3e:a9:df:30:3d:43:74:73:e5:bf:fb:02:e4:60:77:
         bd:4e:ff:9c:a8:e4:2c:8b:13:fa:5a:c7:90:02:d8:b6:b4:3b:
         1c:ab:31:6f:d7:50:10:1b:95:b0:0c:cd:ca:9f:12:7b:fe:ee:
         f6:cf:ef:3d:b4:92:2c:5e:da:47:e4:fa:28:83:6f:82:b2:7b:
         09:d8:cc:14:95:5e:85:20:6e:8d:71:d8:2a:93:11:87:6b:d1:
         26:7b:95:7a:e6:06:51:b3:e7:b9:87:d9:7f:45:35:ff:c6:71:
         fa:6f:c7:6b:a4:80:8c:66:71:a4:2c:e2:24:30:60:40:e2:d2:
         9d:68:0a:6e:dc:fa:00:49:51:5c:2a:50:c9:6b:2f:62:d5:13:
         eb:27:b7:ec:06:7a:cc:a2:15:4b:23:e3:5c:11:49:50:0a:b6:
         b0:e8:06:0f:2d:a2:4d:87:fd:e2:2e:f9:bb:e2:ef:80:dd:d5:
         b5:23:53:38:d7:d3:4e:14:f9:2d:09:31:ab:30:7b:75:91:58:
         91:04:7f:4a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjUwMDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNDN0Q0RjJDMzA4ODFG
RjZDMUVCNzNDREVCMjI5QjJGQ0RBREFBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXNuWs0YQmely/fArIeqkHw+4xfvHont0cedjtO+JmQwYAVF7k
qLVXy1MWUgy/rXJ7CtsFDsBKgKqPEPXrCJlR9fgzYiCeaAusItWmSoRk3IvPw+zl
+KlSPpDsru+hes2lDs6loOI0ion6e66TBH4UEmsCEh1pbD/1DiuEJa2TCyCZVi7I
rRsNEiCBcNVqK7ReWegqtF/VxEuHmLOqL8c8Zv9WVVPU2TjwjymgKPERyEco9H5I
nUIxwvVsLgZcxorBwRydR9P0PiPym8h80yDk/LLjSypZo+Wuk1aHqrgQrC4LuER8
sWiP/MR1z4u9yV4Bgw8J6fg1xHn/UWpKG3w1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUPH1PLDCIH/bB63PN6yKbL82tqu8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUEgxUExEQ0lIX2JCNjNQ
TjZ5S2JMODJ0cXU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AnxsiDANBgkqhkiG9w0BAQsFAAOCAQEAZ0abyY3HuOIaTMvODmHlID7Jk/sII0Jl
QQnX7H26c/ceSV87BmW7HV2upMF7XE56jpPeDdMSdauXPqnfMD1DdHPlv/sC5GB3
vU7/nKjkLIsT+lrHkALYtrQ7HKsxb9dQEBuVsAzNyp8Se/7u9s/vPbSSLF7aR+T6
KINvgrJ7CdjMFJVehSBujXHYKpMRh2vRJnuVeuYGUbPnuYfZf0U1/8Zx+m/Ha6SA
jGZxpCziJDBgQOLSnWgKbtz6AElRXCpQyWsvYtUT6ye37AZ6zKIVSyPjXBFJUAq2
sOgGDy2iTYf94i75u+LvgN3VtSNTONfTThT5LQkxqzB7dZFYkQR/Sg==
-----END CERTIFICATE-----