Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YvW8NO8-05Uft9G0E78m9QOZPPA.roa
File:                     YvW8NO8-05Uft9G0E78m9QOZPPA.roa (raw, json)
Hash identifier:          xtNZzzTir+1nZgXnwuuafAKOev4Fw3wLK4jVSYHRAzI=
Subject key identifier:   62:F5:BC:34:EF:3E:D3:95:1F:B7:D1:B4:13:BF:26:F5:03:99:3C:F0
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       081A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YvW8NO8-05Uft9G0E78m9QOZPPA.roa
Signing time:             Tue 29 Sep 2020 09:57:46 +0000
ROA not before:           Tue 29 Sep 2020 09:57:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17213
IP address blocks:        60.198.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=62F5BC34EF3ED3951FB7D1B413BF26F503993CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:d3:84:7e:dd:2e:de:31:51:da:9b:53:6b:
                    cb:0b:c1:bf:df:45:26:d5:9c:e9:d9:ba:0d:9f:6b:
                    fa:6b:b3:23:2c:cd:ca:c6:af:53:a7:50:71:62:23:
                    a3:83:40:40:21:21:75:6c:a6:7c:5b:28:88:c6:50:
                    66:39:fb:50:81:67:d5:eb:31:91:45:ec:ab:e9:d9:
                    4f:61:4d:7e:37:cb:94:02:88:c1:cb:e8:e9:4e:2f:
                    42:2d:da:a8:97:e1:b8:37:2c:e5:5c:15:fc:a2:5d:
                    44:27:c4:b0:2f:84:43:a5:f9:e6:c4:01:cb:80:0a:
                    a1:55:e2:43:74:5a:41:21:02:cf:ae:67:b0:cd:6f:
                    c2:2e:5f:1f:2f:7f:12:f3:6d:52:d8:eb:2c:70:53:
                    e2:06:31:29:db:2d:d8:e2:b6:cd:fd:37:8e:8f:a0:
                    50:f1:d1:d7:78:aa:65:a3:70:76:92:fc:00:18:b2:
                    50:3f:40:55:69:e7:bc:77:b7:27:e5:ff:3d:0b:24:
                    db:24:52:4f:ff:69:0f:ce:3f:7a:74:f4:bf:d5:60:
                    db:db:fd:c9:fb:28:bc:20:cf:9a:1b:08:b8:69:73:
                    95:a3:83:95:49:70:30:a9:70:d2:52:57:91:12:ca:
                    48:bd:1f:6d:c8:50:a5:dd:d7:7f:07:9e:69:b8:90:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F5:BC:34:EF:3E:D3:95:1F:B7:D1:B4:13:BF:26:F5:03:99:3C:F0
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YvW8NO8-05Uft9G0E78m9QOZPPA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:5e:a5:5a:85:ec:29:6b:b3:da:72:a9:48:82:24:07:c2:
         b6:8d:d3:8f:c5:25:06:5a:25:dc:84:60:ad:60:c8:4e:28:9e:
         07:1e:e4:46:34:78:fa:e8:b5:4b:14:48:e5:2d:6b:fc:e0:2c:
         c7:5f:8c:11:44:7b:a7:37:1f:0b:f1:c4:50:24:b2:20:fb:5e:
         95:75:c8:2b:7b:7c:d8:90:5d:40:1f:5d:ad:18:59:eb:11:6d:
         c2:81:9e:b2:fb:c2:46:0a:4f:06:cf:7a:59:12:f7:77:86:cb:
         19:10:38:19:c2:ac:97:b7:7d:d0:af:66:66:8e:b0:d0:48:8b:
         a9:1f:cc:17:e3:cd:fb:22:ff:f3:33:6c:dc:e6:a4:48:17:a4:
         b2:29:71:af:87:6c:38:11:0b:22:bd:6a:ae:f5:bd:a9:07:0f:
         8c:c5:0f:77:b7:9b:af:85:20:ad:10:3f:f8:ad:8b:fc:b7:da:
         4f:06:c9:37:bb:2c:56:c9:56:26:db:09:0e:68:16:e1:a3:34:
         90:79:a6:76:69:57:df:cf:4d:e0:3b:24:81:de:d0:b1:a8:f9:
         b6:82:ba:0a:49:09:85:85:50:ca:15:79:d2:88:fe:4f:ce:5c:
         fb:0a:69:81:60:27:9b:9a:00:52:ed:82:3b:10:49:c0:86:de:
         04:3a:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org