Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/W2P_pA7acYok7xuDFTM7kd74Pd8.roa
File:                     W2P_pA7acYok7xuDFTM7kd74Pd8.roa (raw, json)
Hash identifier:          vmOhwWXlwxKkQa7M6+xI1PGGHR2KLAN4BAZb159gLTI=
Subject key identifier:   5B:63:FF:A4:0E:DA:71:8A:24:EF:1B:83:15:33:3B:91:DE:F8:3D:DF
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0ACC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/W2P_pA7acYok7xuDFTM7kd74Pd8.roa
Signing time:             Sun 07 Feb 2021 11:40:28 +0000
ROA not before:           Sun 07 Feb 2021 11:40:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        203.65.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:40:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5B63FFA40EDA718A24EF1B8315333B91DEF83DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:e3:2f:9a:cd:54:a5:a3:a4:5a:a1:d6:59:
                    91:93:ea:ae:fc:d9:b9:d0:b1:1a:ec:18:cb:72:e0:
                    20:81:2b:1c:84:91:3b:79:63:b2:18:b8:75:6b:8e:
                    0a:a6:39:21:b1:56:19:81:4a:cb:1a:0c:bd:c3:16:
                    85:d9:ac:24:ff:41:bb:15:3a:12:fc:aa:5d:e2:c6:
                    e1:93:50:8a:1a:44:2b:e4:e1:ec:3e:5e:f8:13:d1:
                    ea:b0:4e:51:26:b3:78:2f:bb:90:9a:fe:b4:83:42:
                    c1:33:72:98:32:a9:f5:a2:5c:2f:6f:a0:6d:a0:ff:
                    da:9e:50:b9:fb:b5:db:94:0e:e6:00:b7:25:6a:fc:
                    50:2e:8a:64:32:de:72:24:a0:0c:dd:b9:9b:90:c4:
                    69:9d:10:3c:53:27:59:7d:78:a6:04:1b:58:2b:3d:
                    95:5a:eb:3c:d7:2d:7c:b7:25:26:39:98:8b:b1:7e:
                    81:7c:a9:9d:7f:28:52:68:90:77:ab:dc:36:c5:b9:
                    40:a4:3e:3e:60:82:75:0c:82:23:96:eb:8c:ec:26:
                    5f:4e:a7:13:af:1c:0c:8d:05:87:75:38:bc:4b:89:
                    73:44:17:c4:ea:a9:23:a6:c7:4f:53:cc:54:71:35:
                    72:e4:a1:47:d7:5c:3f:fb:46:89:ae:0d:06:fb:c0:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:FF:A4:0E:DA:71:8A:24:EF:1B:83:15:33:3B:91:DE:F8:3D:DF
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/W2P_pA7acYok7xuDFTM7kd74Pd8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:1d:8c:e8:a2:3c:f1:da:54:c8:fa:4b:f8:54:09:1a:a4:
         5d:fa:a7:63:c5:95:4c:9d:13:15:9d:2d:70:52:21:eb:39:ad:
         da:fd:ec:e2:3b:e2:9e:aa:e1:5e:d9:66:9d:2a:3d:2e:56:95:
         a8:97:c9:53:84:2b:bd:79:5b:e0:6b:08:da:c0:08:e7:2d:ac:
         c8:88:45:eb:64:ed:32:04:52:88:70:f3:09:4e:d7:b9:81:ed:
         73:85:20:c5:38:27:32:f2:b6:cc:24:45:e7:75:fb:9e:e9:bd:
         9d:93:40:37:44:44:30:32:3e:bd:78:f3:99:b5:53:c0:90:64:
         4d:4a:44:4a:00:56:c1:ed:59:72:97:1e:d5:06:f1:d0:0d:65:
         0b:b1:51:05:26:75:33:96:c2:67:4a:85:dc:c8:da:a7:be:ec:
         9c:aa:39:39:b9:42:fa:c4:5e:28:9b:34:ca:de:d5:85:ad:46:
         8c:25:7f:83:64:01:8e:ca:45:9c:db:50:05:ee:73:3e:0d:76:
         6d:ed:d4:3c:20:39:a2:6f:d7:d3:92:2f:36:7a:ca:48:1f:cd:
         4d:3c:80:04:95:4c:e2:1f:c5:27:83:ef:ad:e0:d6:44:69:d1:
         59:aa:6b:10:07:2a:13:e7:15:20:28:0f:8a:c3:42:20:10:12:
         e2:ef:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org