Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WIWeg_YHtpya7GAr81aU84bXGl4.roa
File:                     WIWeg_YHtpya7GAr81aU84bXGl4.roa (raw, json)
Hash identifier:          CAxJ/VUHQynvRD/31G3LZmudFFtNu6ek0wSddjixc8U=
Subject key identifier:   58:85:9E:83:F6:07:B6:9C:9A:EC:60:2B:F3:56:94:F3:86:D7:1A:5E
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WIWeg_YHtpya7GAr81aU84bXGl4.roa
Signing time:             Thu 15 Sep 2022 02:46:51 +0000
ROA not before:           Thu 15 Sep 2022 02:46:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        60.199.171.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:46:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=58859E83F607B69C9AEC602BF35694F386D71A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:58:a8:c7:93:0e:50:e7:d9:45:c1:ca:2f:
                    b8:15:c0:96:14:38:a9:c3:4a:37:e9:42:b7:2a:c2:
                    62:0f:5f:07:db:f5:db:82:1b:3e:f8:32:ba:eb:7f:
                    a9:30:ee:26:b7:69:7d:90:0c:8d:f9:ae:ae:5a:94:
                    80:bf:15:2e:c7:78:61:37:b1:76:4c:f1:c4:44:d3:
                    1a:10:0e:bc:82:03:28:7c:4f:6d:a5:51:85:a9:6b:
                    aa:06:40:9c:48:80:98:e8:24:61:3f:29:61:21:84:
                    b5:1f:28:46:a1:78:db:6b:c9:38:0e:bc:91:47:6d:
                    0a:94:8b:6e:b4:06:2a:e9:6e:90:b8:5f:92:ea:22:
                    85:c2:02:a7:6a:35:6f:11:31:8a:4b:b0:9d:2f:7b:
                    0b:e8:3f:29:65:1e:5f:04:89:ca:df:3d:27:8a:6f:
                    78:7b:a2:04:a8:eb:d7:da:94:47:22:18:32:16:ed:
                    68:39:d3:4a:a8:02:21:22:17:23:53:4d:86:d7:28:
                    9b:1c:3f:78:40:1f:b4:0a:74:8e:6f:84:fe:cf:9c:
                    ef:ec:5e:99:2e:3f:05:7c:c3:53:10:d0:9e:ee:15:
                    77:09:cd:91:02:dd:cb:e4:f3:5e:07:3f:19:5d:f0:
                    2a:83:29:d7:c8:51:b1:0d:f0:9c:16:38:2a:a5:55:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:9E:83:F6:07:B6:9C:9A:EC:60:2B:F3:56:94:F3:86:D7:1A:5E
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WIWeg_YHtpya7GAr81aU84bXGl4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:dc:69:bb:2a:20:07:10:b4:73:51:35:c6:4b:77:5c:e5:43:
         ee:f6:f9:9e:a4:7c:4d:69:7a:6c:85:2c:bc:4a:40:26:ea:4f:
         df:75:0f:3f:4c:be:01:ee:47:8a:d1:c3:7c:9d:71:80:28:d1:
         fd:48:39:d8:f0:05:3d:1c:b4:14:f6:6e:cc:8e:98:a8:74:84:
         81:0b:90:8a:71:9e:e0:f3:fa:85:ed:4a:07:d9:06:52:13:71:
         7d:d3:d3:88:b4:50:b0:fd:f4:7a:cb:c8:71:fa:68:ba:38:df:
         39:e9:b8:f8:ba:34:c4:51:d6:51:6e:d1:91:2a:ab:cc:af:17:
         57:68:26:84:54:88:b4:1b:22:5f:2c:00:d5:0a:f5:8c:39:0a:
         a6:5e:67:25:26:b9:a1:d2:be:60:46:70:1c:4c:ed:d5:74:db:
         44:b0:7f:8c:00:1e:fd:f3:e7:b7:fb:4a:fd:7f:5b:bc:cf:05:
         43:86:c0:c3:71:ce:f6:4c:5d:0a:b2:57:5b:cb:27:1b:f8:36:
         58:4c:b8:6e:a8:30:3b:d2:87:4a:40:0c:00:c6:a0:4a:0f:32:
         34:d6:d8:19:c4:f6:30:84:65:a8:b3:d6:01:7d:80:bf:88:50:
         45:ab:64:97:1e:a5:92:17:b8:91:f3:5a:1d:64:28:df:0c:04:
         c5:fd:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org