Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VkUhMinRutF3rZEoyzmrr3BPmYg.roa
File:                     VkUhMinRutF3rZEoyzmrr3BPmYg.roa (raw, json)
Hash identifier:          Bdvk8NuzPR66i91r35CB61roD8H68XqSGC+k3Gverfw=
Subject key identifier:   56:45:21:32:29:D1:BA:D1:77:AD:91:28:CB:39:AB:AF:70:4F:99:88
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0AB4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VkUhMinRutF3rZEoyzmrr3BPmYg.roa
Signing time:             Sun 07 Feb 2021 11:37:02 +0000
ROA not before:           Sun 07 Feb 2021 11:37:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        219.86.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740 (0xab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:37:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5645213229D1BAD177AD9128CB39ABAF704F9988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:0f:bd:49:15:71:c2:cb:22:1b:0f:9d:cf:
                    b2:50:69:36:70:91:43:42:04:6e:1c:8e:ce:86:e9:
                    93:7c:59:e6:aa:72:af:d0:46:79:06:2e:7f:a3:27:
                    e2:2b:a1:cb:0f:80:97:35:2a:f4:f5:d1:97:b8:8f:
                    37:71:e5:b7:56:6f:66:d7:34:7f:b2:8c:d9:e7:14:
                    20:a7:63:d4:76:3f:91:b9:36:7b:73:3f:52:1f:70:
                    8a:73:9b:75:17:79:b1:05:77:f6:97:af:db:7d:86:
                    49:db:7e:9f:15:5d:eb:d2:8c:3e:b7:c9:f7:db:5c:
                    92:89:b3:fd:fc:80:94:b3:45:8a:5d:6e:83:ce:d1:
                    ba:a1:00:21:a7:ea:28:a0:8a:4b:80:44:6c:33:35:
                    cf:66:46:1c:a5:0c:1f:5f:b2:76:1f:a0:d8:91:ca:
                    2e:cb:bf:53:ed:d8:3c:a3:d6:e9:d5:7c:0a:79:3f:
                    54:1a:b6:7f:7d:90:09:42:23:33:65:e8:7c:a8:ba:
                    fa:e4:ea:1f:7d:1e:f0:1d:35:c2:ee:65:21:89:7e:
                    bf:9d:8a:c5:48:11:be:3c:b8:7a:44:c5:d5:56:f0:
                    48:16:39:cb:a7:fd:7a:f5:29:3c:df:58:24:64:3a:
                    7f:1c:8d:d1:d4:dc:00:de:c1:d3:51:c3:77:0c:2b:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:21:32:29:D1:BA:D1:77:AD:91:28:CB:39:AB:AF:70:4F:99:88
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VkUhMinRutF3rZEoyzmrr3BPmYg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.86.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:a7:c1:ad:86:c6:01:87:12:e8:f4:a5:d7:59:03:0d:f2:
         27:23:c8:fc:08:8a:b7:5e:d8:ac:1f:c7:41:22:cd:eb:ee:21:
         47:48:e5:e9:35:94:17:e4:a2:ff:b2:1e:fe:d6:01:97:92:99:
         6c:af:4a:52:4c:ef:d2:df:8f:bf:4a:d2:b9:38:b6:66:05:15:
         af:c6:0d:65:9e:67:90:54:f3:eb:f1:6c:33:6d:cc:e0:3e:77:
         97:c1:4f:e4:d5:fa:6a:18:4a:ef:9a:5b:7a:9f:ca:8f:2d:92:
         7e:1d:e6:4a:85:0c:51:f5:bb:47:fe:3e:de:8c:6f:3a:28:b4:
         9d:14:af:48:0b:ab:a8:51:6d:e7:bc:05:36:4e:0d:8f:e7:75:
         5d:cd:b2:b2:1c:60:6b:c2:85:c6:3a:88:8f:af:62:a6:5b:d7:
         d4:41:e8:4a:6b:7f:86:d3:58:46:6f:32:2e:be:24:60:fa:fe:
         94:10:b5:05:e4:fb:02:66:61:bd:a2:86:7f:5f:10:22:92:16:
         b8:33:92:45:7a:ad:18:0e:28:eb:d4:01:e8:24:f5:d5:78:57:
         26:8e:fd:1b:a1:9c:09:80:0b:32:ae:9e:ef:d3:16:d2:01:60:
         8e:9d:0b:12:3e:3f:8d:ba:41:70:fe:9e:83:85:b9:4e:c2:6e:
         83:fe:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org