Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/V-h5ymh0jE7Btx4ODtr9id0yldU.roa
File:                     V-h5ymh0jE7Btx4ODtr9id0yldU.roa (raw, json)
Hash identifier:          uQcUEUPx/6uxaTaeqy4L08wsoOb+7Si9eNXoj+oPfA8=
Subject key identifier:   57:E8:79:CA:68:74:8C:4E:C1:B7:1E:0E:0E:DA:FD:89:DD:32:95:D5
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C5B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/V-h5ymh0jE7Btx4ODtr9id0yldU.roa
Signing time:             Wed 29 Sep 2021 02:49:44 +0000
ROA not before:           Wed 29 Sep 2021 02:49:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        210.17.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3163 (0xc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=57E879CA68748C4EC1B71E0E0EDAFD89DD3295D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:85:3a:40:cd:57:d2:d9:75:f1:b4:9c:16:
                    9e:01:ca:41:57:db:a2:a6:4b:f0:8e:29:e8:93:fb:
                    0b:58:4e:aa:03:b7:84:82:c7:8a:74:13:93:6f:08:
                    12:04:fb:a5:07:25:49:79:3f:54:5e:aa:c4:a5:74:
                    44:43:3f:18:55:3f:19:66:00:7b:78:7f:aa:b4:75:
                    ef:bd:99:6b:8c:42:b4:bb:42:c0:59:6b:e9:eb:5c:
                    db:1e:c0:5d:c0:38:4f:02:8b:2d:2b:81:73:ea:4d:
                    93:c8:aa:b7:59:93:df:a1:b7:c9:3d:0f:8e:ea:25:
                    cd:d2:83:a5:e6:28:5d:6b:be:8a:f1:77:bd:94:c8:
                    d4:09:c9:d4:79:6b:43:6b:ba:a2:1e:f3:87:94:27:
                    bb:11:32:91:38:a4:f7:48:96:3a:3e:6e:5a:c7:96:
                    3b:5a:3e:16:2a:ca:22:2c:e8:76:d3:5c:df:6b:b2:
                    20:15:37:16:fc:ed:fe:cb:76:64:3e:d0:61:eb:f5:
                    d4:c6:f3:dd:17:c1:50:ad:5a:7a:d5:6b:79:5f:68:
                    c3:79:c5:f4:93:48:7b:99:10:42:27:80:1c:61:70:
                    f1:83:25:a4:43:be:fc:9d:7d:f2:1b:11:77:38:f7:
                    30:b9:17:26:01:a6:66:88:b5:36:87:0c:3d:16:37:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:79:CA:68:74:8C:4E:C1:B7:1E:0E:0E:DA:FD:89:DD:32:95:D5
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/V-h5ymh0jE7Btx4ODtr9id0yldU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         20:ac:97:fc:29:cb:4e:d4:28:7d:91:c7:5d:14:a3:d3:f5:92:
         6d:f6:1e:b2:3f:b8:c5:01:c8:bb:c4:ec:a1:21:73:aa:bd:4c:
         1e:83:c9:41:f1:92:1a:27:a6:a2:47:62:5f:ec:64:60:02:90:
         e1:b3:c1:ba:40:31:e3:e7:62:4e:17:9a:3c:54:1e:97:a3:23:
         1e:20:02:3a:b1:80:77:11:db:33:06:25:17:7c:4d:9e:55:29:
         ab:fa:e9:c3:94:f4:4c:1d:26:30:3a:37:2f:3f:19:07:49:9c:
         a1:75:f2:f8:4f:6d:73:6f:f0:f5:cb:47:dd:da:fd:64:90:c2:
         1b:49:2f:48:74:f7:0e:2e:53:f7:17:b5:9b:fb:70:05:7c:00:
         91:7c:b2:a4:6b:d1:7d:4c:fb:1d:6f:1c:05:d7:d9:26:ed:fa:
         7c:5d:d7:dd:b1:4b:39:ba:13:bf:73:b6:65:f7:f8:d9:90:7f:
         0b:00:4e:b1:69:20:ac:f3:0b:7b:06:49:71:ba:4f:43:3a:ae:
         19:50:cb:1c:78:f9:fb:71:30:20:37:6b:02:19:9b:1f:8f:75:
         9d:b2:96:f8:4f:94:ab:6f:d1:5a:f9:89:02:4f:46:14:5d:17:
         66:7f:2c:77:19:5f:ac:0f:0c:d0:37:75:26:93:be:f8:9a:b6:
         9a:7c:48:52
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjQ5NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDU3RTg3OUNBNjg3NDhD
NEVDMUI3MUUwRTBFREFGRDg5REQzMjk1RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz1YU6QM1X0tl18bScFp4BykFX26KmS/COKeiT+wtYTqoDt4SC
x4p0E5NvCBIE+6UHJUl5P1ReqsSldERDPxhVPxlmAHt4f6q0de+9mWuMQrS7QsBZ
a+nrXNsewF3AOE8Ciy0rgXPqTZPIqrdZk9+ht8k9D47qJc3Sg6XmKF1rvorxd72U
yNQJydR5a0NruqIe84eUJ7sRMpE4pPdIljo+blrHljtaPhYqyiIs6HbTXN9rsiAV
Nxb87f7LdmQ+0GHr9dTG890XwVCtWnrVa3lfaMN5xfSTSHuZEEIngBxhcPGDJaRD
vvydffIbEXc49zC5FyYBpmaItTaHDD0WN28rAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUV+h5ymh0jE7Btx4ODtr9id0yldUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVi1oNXltaDBqRTdCdHg0
T0R0cjlpZDB5bGRVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
B9IRADANBgkqhkiG9w0BAQsFAAOCAQEAIKyX/CnLTtQofZHHXRSj0/WSbfYesj+4
xQHIu8TsoSFzqr1MHoPJQfGSGiemokdiX+xkYAKQ4bPBukAx4+diTheaPFQel6Mj
HiACOrGAdxHbMwYlF3xNnlUpq/rpw5T0TB0mMDo3Lz8ZB0mcoXXy+E9tc2/w9ctH
3dr9ZJDCG0kvSHT3Di5T9xe1m/twBXwAkXyypGvRfUz7HW8cBdfZJu36fF3X3bFL
OboTv3O2Zff42ZB/CwBOsWkgrPMLewZJcbpPQzquGVDLHHj5+3EwIDdrAhmbH491
nbKW+E+Uq2/RWvmJAk9GFF0XZn8sdxlfrA8M0Dd1JpO++Jq2mnxIUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org