Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VQt-DLmbnlFh780B1h14e6jlf-Q.roa
File:                     VQt-DLmbnlFh780B1h14e6jlf-Q.roa (raw, json)
Hash identifier:          I696Y5SHynzfB/WhK8KBMjpCCZTrlXRd4uNl3mInJoI=
Subject key identifier:   55:0B:7E:0C:B9:9B:9E:51:61:EF:CD:01:D6:1D:78:7B:A8:E5:7F:E4
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0A94
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VQt-DLmbnlFh780B1h14e6jlf-Q.roa
Signing time:             Sun 07 Feb 2021 11:36:39 +0000
ROA not before:           Sun 07 Feb 2021 11:36:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.62.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:36:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=550B7E0CB99B9E5161EFCD01D61D787BA8E57FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:1b:9b:59:d3:f1:2b:99:74:f1:70:e5:92:
                    44:fd:51:48:b2:07:7d:72:37:86:b5:03:6a:22:12:
                    8f:53:cb:bc:ce:c0:0e:31:76:51:db:5e:15:27:02:
                    3a:74:cd:fb:e8:e1:cb:19:87:ea:2f:19:7b:1b:67:
                    ab:83:ba:83:44:e9:d6:1f:b3:7f:09:e0:90:d0:02:
                    a6:f9:40:22:09:77:33:35:4f:98:dc:88:63:0f:66:
                    46:1f:68:79:37:7c:df:06:8a:bd:d8:4a:a1:68:ab:
                    1b:38:15:47:81:df:e5:b2:21:dc:05:4d:53:0e:4e:
                    ad:a9:fa:1f:db:c0:93:c0:a5:ef:78:8d:b9:89:a3:
                    cb:c6:ba:cb:cf:d9:9f:20:8f:89:00:58:8b:1d:09:
                    61:a7:33:a9:26:95:06:7e:92:2a:a9:18:fa:46:8f:
                    64:8a:30:bc:a7:94:d2:58:ed:7f:22:0f:67:98:0e:
                    98:e9:88:22:50:cc:3e:d9:10:71:0c:f4:0e:2d:31:
                    2e:f2:f1:1e:c1:7f:1f:da:62:99:a5:0e:12:b3:39:
                    c0:f4:17:18:06:21:7a:27:7b:5c:a0:1a:7c:dd:9b:
                    9f:d4:60:32:ed:72:2a:4c:55:f8:cd:f1:8a:11:fe:
                    d1:ad:2d:cf:dc:fd:5f:c7:b9:cf:8c:cd:b0:24:f8:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:7E:0C:B9:9B:9E:51:61:EF:CD:01:D6:1D:78:7B:A8:E5:7F:E4
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VQt-DLmbnlFh780B1h14e6jlf-Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:35:47:d6:ae:49:ec:ce:85:93:07:26:70:37:05:af:f3:84:
         14:3e:72:21:ec:e9:2d:42:48:a1:fc:cf:f6:02:8b:66:ef:16:
         7d:39:3f:00:99:f4:57:9c:73:9a:09:5d:b0:88:51:f5:97:fc:
         b9:30:07:fe:ca:27:91:10:5e:35:87:d4:e8:a4:62:01:76:9a:
         02:c2:fa:71:8b:f4:9c:ba:7e:1a:b3:75:5b:76:ca:df:b7:71:
         05:77:8c:9a:41:3c:f4:06:a7:5b:26:c9:ba:da:90:b2:95:52:
         a0:53:28:4e:5f:62:74:0e:66:08:62:91:be:dc:82:c7:c1:c9:
         cc:01:9b:ab:6b:f2:c1:b2:16:e3:db:dd:9d:da:1c:fd:e1:7f:
         ff:2f:20:f7:18:4c:0e:cd:fa:90:a6:29:56:1f:ec:e7:76:c6:
         cb:dc:d8:e4:d6:f3:9a:dc:ce:33:4c:07:f0:41:06:84:aa:02:
         bd:15:74:0a:9e:a4:13:ac:05:45:5e:de:87:7e:93:12:13:09:
         ba:5b:27:30:09:05:58:f3:1e:bf:4e:6b:ea:20:bd:3b:66:43:
         ca:3e:36:3d:b6:d5:9a:34:86:3e:2c:14:4a:00:09:64:57:04:
         c7:c0:c6:bc:60:a2:d0:e6:f8:c1:74:b2:93:ed:71:ed:3b:22:
         e8:6a:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org