Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZwvrSvDBgYisy2JMSsS0gu05MNo.roa
File:                     ZwvrSvDBgYisy2JMSsS0gu05MNo.roa (raw, json)
Hash identifier:          jSKowj5NDHM4ZdPzcSalqp3B0MYBzbfkUxrYQ5ggM8I=
Subject key identifier:   67:0B:EB:4A:F0:C1:81:88:AC:CB:62:4C:4A:C4:B4:82:ED:39:30:DA
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C8A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZwvrSvDBgYisy2JMSsS0gu05MNo.roa
Signing time:             Wed 29 Sep 2021 02:49:57 +0000
ROA not before:           Wed 29 Sep 2021 02:49:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        203.77.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3210 (0xc8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=670BEB4AF0C18188ACCB624C4AC4B482ED3930DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:fa:0c:18:07:f8:62:36:23:94:0c:74:c5:
                    f9:fe:0d:dc:a2:01:83:d1:be:a5:51:c3:80:37:ef:
                    ff:c5:31:6b:2e:63:6c:8b:94:a5:64:92:5a:44:e1:
                    be:42:f7:05:14:27:67:26:94:78:64:a0:dd:c7:48:
                    29:43:88:32:90:67:34:e9:21:1a:05:12:1e:ad:32:
                    ee:53:f1:c6:f8:2c:d3:84:6e:ea:7f:90:eb:44:36:
                    93:2b:43:2d:f6:37:66:bc:51:34:27:1d:ed:1a:28:
                    3c:fa:4f:ee:fa:26:2c:56:ec:9f:a0:97:38:06:b7:
                    c5:b3:a6:94:38:5b:94:39:c2:0b:42:8b:b2:c9:03:
                    d1:68:98:4c:4b:9f:4c:7c:62:fa:f8:2f:e2:af:4f:
                    e6:4d:d8:cf:70:0f:87:d5:70:60:b1:80:f6:ed:a4:
                    de:49:31:27:b2:a8:5f:e3:9b:c8:bc:ae:02:b6:00:
                    37:97:10:3a:e9:02:07:f7:87:e4:c6:26:e9:ed:17:
                    e5:df:b0:58:3d:40:3f:db:43:d2:4f:94:07:4d:03:
                    b3:4e:1f:6e:1e:77:71:d6:3c:4c:c1:f9:67:ca:61:
                    0b:7a:18:f1:8f:48:1f:12:dc:81:a1:cc:8b:ad:06:
                    ed:91:f6:42:89:f9:ae:50:02:0c:65:7f:85:36:4e:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0B:EB:4A:F0:C1:81:88:AC:CB:62:4C:4A:C4:B4:82:ED:39:30:DA
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZwvrSvDBgYisy2JMSsS0gu05MNo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:55:33:e1:5d:c7:52:0f:cb:18:f4:16:87:bc:c9:da:19:
         de:f2:ef:08:2d:33:43:a7:a8:09:a9:ab:64:6a:b3:71:9f:2a:
         dd:b0:4d:46:03:1b:0b:cf:04:b2:bd:e3:b7:3a:b4:37:6d:e5:
         c4:2d:7b:be:f6:d5:e1:80:1b:dd:ef:e5:c4:fd:7f:7c:53:a6:
         9a:72:62:5f:fb:6d:23:8e:bd:c0:a3:af:0c:27:12:00:02:dc:
         b9:c9:9a:69:b6:7e:2c:f3:1d:ec:c4:ed:ed:c5:13:53:8a:a5:
         ee:f2:74:1e:7d:82:c3:98:64:89:9d:93:d2:5d:16:e2:f5:a4:
         a6:94:fe:9c:0f:15:8d:9f:81:7f:ca:bd:33:d2:da:66:7f:49:
         89:8d:a5:ba:f7:b8:4d:e2:42:62:c3:b8:a2:3e:0b:6c:a2:c6:
         bd:98:f2:ef:5a:47:03:16:d6:eb:c6:00:be:d7:83:96:80:d6:
         76:c4:be:98:9e:e7:54:2e:a9:0d:fa:05:55:e8:4a:16:72:00:
         0c:9c:27:22:aa:2d:4d:9b:69:23:7b:b9:96:29:eb:00:b3:b3:
         b3:dc:e6:64:4e:0f:93:55:c5:2e:c1:90:f4:ee:e8:82:aa:60:
         68:a9:8e:55:e2:60:8c:b4:55:f7:78:5c:6c:0a:5b:98:92:6a:
         61:e9:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org