Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_txYtE-B2d_-S3J4_AijJuGT2AQ.roa
File:                     _txYtE-B2d_-S3J4_AijJuGT2AQ.roa (raw, json)
Hash identifier:          9WaIKXy4c2MB83RGYWmS5GGX0SrLaS5dmXX9NFG87VI=
Subject key identifier:   FE:DC:58:B4:4F:81:D9:DF:FE:4B:72:78:FC:08:A3:26:E1:93:D8:04
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_txYtE-B2d_-S3J4_AijJuGT2AQ.roa
Signing time:             Thu 15 Sep 2022 02:47:21 +0000
ROA not before:           Thu 15 Sep 2022 02:47:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4662
IP address blocks:        210.62.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FEDC58B44F81D9DFFE4B7278FC08A326E193D804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:20:e3:10:63:b5:5e:d7:5a:68:4d:4d:f5:
                    4c:d0:02:05:83:dc:8b:28:4a:5c:8c:28:ab:ad:29:
                    6f:c1:79:d7:54:19:22:e5:83:93:98:5f:9a:a6:2e:
                    e8:83:29:fe:fb:37:50:40:39:03:3f:6f:70:8f:82:
                    9f:c9:82:79:3c:e7:b7:d4:cb:64:a9:fb:7a:59:79:
                    26:42:ee:d9:f3:03:bd:3e:69:99:86:28:18:b3:6d:
                    33:4d:23:34:aa:ea:66:89:28:65:5a:ea:46:ee:90:
                    c7:ec:42:a7:5d:30:ca:4f:f8:f5:ad:76:a9:5b:aa:
                    41:68:cb:c8:9b:48:0d:c7:e7:c1:76:93:28:cc:4f:
                    b6:16:33:2b:1c:66:ef:e4:ef:4a:6a:3d:93:d0:4b:
                    51:5f:63:f8:09:2b:c8:7f:f5:1c:7a:ef:f4:74:58:
                    9f:c4:f0:65:e9:5c:33:81:5f:7b:dd:66:7f:79:88:
                    4c:92:e1:d9:bb:bc:f3:14:40:4a:a5:64:c0:bf:fe:
                    3c:81:05:87:35:7b:18:7a:59:23:d0:dc:e4:8c:ca:
                    63:43:93:31:9b:97:23:a3:9b:23:aa:5f:5f:47:78:
                    79:1d:02:9e:43:6d:04:6f:1c:c3:84:66:1f:5a:03:
                    9c:81:5b:8d:f5:4f:55:ec:bc:f2:9a:1b:39:ed:13:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:58:B4:4F:81:D9:DF:FE:4B:72:78:FC:08:A3:26:E1:93:D8:04
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_txYtE-B2d_-S3J4_AijJuGT2AQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:88:cf:b9:00:51:28:8c:a7:56:14:8d:ba:fa:56:fe:cb:
         7b:8c:b8:32:0c:c5:66:f5:79:47:1a:80:26:77:6a:19:22:e3:
         ba:73:1a:5d:1a:75:81:ab:86:41:a7:0c:3d:4e:e5:ed:1b:2b:
         6c:a8:a0:be:16:22:e5:cf:a4:b4:4a:44:f7:44:d6:49:a4:a2:
         f6:41:dd:f1:0a:48:1c:ec:18:4d:5f:73:39:e1:77:38:4a:c7:
         e7:48:5f:9b:bd:57:da:da:af:f0:f4:5f:93:ec:47:9f:fb:72:
         84:a0:23:f7:de:35:52:73:32:63:b8:b2:c1:ff:2f:d2:25:d1:
         12:67:ab:7d:65:98:7f:e5:e3:44:4d:9e:27:36:a6:55:e1:1e:
         b4:01:c9:41:8c:f9:fb:6b:59:e1:ce:1c:41:0a:34:e8:c0:6d:
         b6:22:5e:2d:a9:d1:b5:24:a9:7d:c7:a6:85:54:fb:83:fd:2f:
         2d:dd:0c:63:81:67:d3:dc:bd:8b:84:18:ec:b0:5a:e1:f0:d8:
         ad:f1:11:95:b3:67:5c:b4:5c:63:0e:4c:00:77:7f:4a:3c:af:
         a2:d5:b4:6f:b8:8d:43:b9:5f:ad:f8:bf:1d:39:27:89:fb:f4:
         f0:a4:41:27:5b:d1:61:8a:16:c5:15:ec:4c:89:25:8c:24:f5:
         56:89:7b:48
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZFREM1OEI0NEY4MUQ5
REZGRTRCNzI3OEZDMDhBMzI2RTE5M0Q4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1WSDjEGO1XtdaaE1N9UzQAgWD3IsoSlyMKKutKW/BeddUGSLl
g5OYX5qmLuiDKf77N1BAOQM/b3CPgp/Jgnk857fUy2Sp+3pZeSZC7tnzA70+aZmG
KBizbTNNIzSq6maJKGVa6kbukMfsQqddMMpP+PWtdqlbqkFoy8ibSA3H58F2kyjM
T7YWMyscZu/k70pqPZPQS1FfY/gJK8h/9Rx67/R0WJ/E8GXpXDOBX3vdZn95iEyS
4dm7vPMUQEqlZMC//jyBBYc1exh6WSPQ3OSMymNDkzGblyOjmyOqX19HeHkdAp5D
bQRvHMOEZh9aA5yBW431T1XsvPKaGzntE6LnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/txYtE+B2d/+S3J4/AijJuGT2AQwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvX3R4WXRFLUIyZF8tUzNK
NF9BaWpKdUdUMkFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdI+wDANBgkqhkiG9w0BAQsFAAOCAQEAIKKIz7kAUSiMp1YUjbr6Vv7Le4y4MgzF
ZvV5RxqAJndqGSLjunMaXRp1gauGQacMPU7l7RsrbKigvhYi5c+ktEpE90TWSaSi
9kHd8QpIHOwYTV9zOeF3OErH50hfm71X2tqv8PRfk+xHn/tyhKAj9941UnMyY7iy
wf8v0iXREmerfWWYf+XjRE2eJzamVeEetAHJQYz5+2tZ4c4cQQo06MBttiJeLanR
tSSpfcemhVT7g/0vLd0MY4Fn09y9i4QY7LBa4fDYrfERlbNnXLRcYw5MAHd/Sjyv
otW0b7iNQ7lfrfi/HTknifv08KRBJ1vRYYoWxRXsTIkljCT1Vol7SA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org