Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/d-12xhp8eUd6KqmenaDnkSYBvk4.roa
File:                     d-12xhp8eUd6KqmenaDnkSYBvk4.roa (raw, json)
Hash identifier:          QvLPUM/9tJsn2esxaHcVKnbCF4Ura79NOAt0DJivLlY=
Subject key identifier:   77:ED:76:C6:1A:7C:79:47:7A:2A:A9:9E:9D:A0:E7:91:26:01:BE:4E
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B02
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/d-12xhp8eUd6KqmenaDnkSYBvk4.roa
Signing time:             Sun 07 Feb 2021 13:04:22 +0000
ROA not before:           Sun 07 Feb 2021 13:04:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131628
IP address blocks:        175.99.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2818 (0xb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:04:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=77ED76C61A7C79477A2AA99E9DA0E7912601BE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:72:78:3c:b9:25:13:de:e3:22:e5:d4:01:
                    30:59:8f:c5:3a:93:ee:66:db:7b:d1:be:d5:5d:cf:
                    7a:0c:63:37:a6:19:bb:28:00:66:aa:34:61:e4:c3:
                    fb:6e:35:a0:c5:3d:ab:98:f6:e8:ac:ce:cd:45:49:
                    6b:ba:c4:b4:3f:75:c2:1b:99:6f:14:b2:2c:09:4d:
                    92:66:6d:44:6c:a4:96:5d:1b:e6:c6:af:c3:b8:13:
                    49:ee:b7:89:02:e4:92:e5:f1:9e:e2:4a:a1:22:49:
                    2a:e5:dc:20:a9:2e:81:0c:20:d0:60:7a:f6:c4:38:
                    65:86:7f:35:c6:32:10:3d:f3:3b:10:4e:fb:98:04:
                    46:82:43:7f:04:ae:1b:68:43:09:a8:13:c2:34:99:
                    d2:ca:fc:c1:78:d6:86:27:cc:32:3d:44:a2:08:f0:
                    76:bf:7c:7c:85:27:b4:89:89:32:4c:1e:39:85:f3:
                    fd:d4:09:63:43:ca:3e:04:01:8d:91:80:85:3b:de:
                    98:2a:f6:3e:21:3f:81:4c:1f:f3:aa:6d:7a:cd:29:
                    40:11:a5:13:9c:f0:b3:49:7f:d8:2a:7f:11:0d:87:
                    d4:25:e3:47:17:22:38:0e:6c:42:2b:ef:48:1f:c5:
                    58:ad:13:1f:26:98:b4:93:ca:11:35:4b:54:c8:b9:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:76:C6:1A:7C:79:47:7A:2A:A9:9E:9D:A0:E7:91:26:01:BE:4E
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/d-12xhp8eUd6KqmenaDnkSYBvk4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.99.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:c1:0d:a9:07:a8:2e:ad:cc:ed:29:f3:bc:31:59:3e:b3:
         ac:68:78:95:d7:71:02:89:53:49:a8:92:2d:1c:40:f0:58:29:
         f6:2b:52:26:d5:db:88:51:1d:3f:e7:a4:ce:70:ec:c8:f8:fe:
         14:a2:69:73:20:2d:e1:02:ef:32:3c:1f:e8:3a:e9:12:c8:c7:
         68:8f:3f:3c:b0:5e:16:1c:9c:36:52:03:6c:56:74:72:04:f8:
         ec:79:cd:0c:42:91:ce:aa:e1:fc:2d:e1:b7:f9:10:c4:02:87:
         50:23:28:19:c5:26:5f:3d:7b:e2:ed:ae:4d:9d:cd:e8:66:7f:
         16:36:5e:c7:96:92:68:9c:e5:fb:2b:40:ab:c8:08:10:b8:64:
         2e:28:de:8d:69:34:d4:b2:fb:30:b3:49:5c:80:36:0a:7c:c2:
         c5:95:fb:1f:bb:4d:f2:1d:6e:21:9b:1d:25:83:e6:45:7d:94:
         71:b9:74:5e:08:0a:ed:89:18:90:6b:14:b6:a7:7e:d7:4e:dc:
         e6:af:13:dd:52:5f:b1:18:1b:7b:13:8f:6b:37:03:12:5e:90:
         55:77:e4:25:71:4f:02:48:b6:e7:aa:5f:c9:dd:16:63:13:9f:
         d1:40:57:a6:78:9d:05:17:48:8d:84:ff:71:48:5e:e9:8f:6c:
         67:28:4b:6b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MzA0MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc3RUQ3NkM2MUE3Qzc5
NDc3QTJBQTk5RTlEQTBFNzkxMjYwMUJFNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAcXJ4PLklE97jIuXUATBZj8U6k+5m23vRvtVdz3oMYzemGbso
AGaqNGHkw/tuNaDFPauY9uiszs1FSWu6xLQ/dcIbmW8UsiwJTZJmbURspJZdG+bG
r8O4E0nut4kC5JLl8Z7iSqEiSSrl3CCpLoEMINBgevbEOGWGfzXGMhA98zsQTvuY
BEaCQ38ErhtoQwmoE8I0mdLK/MF41oYnzDI9RKII8Ha/fHyFJ7SJiTJMHjmF8/3U
CWNDyj4EAY2RgIU73pgq9j4hP4FMH/OqbXrNKUARpROc8LNJf9gqfxENh9Ql40cX
IjgObEIr70gfxVitEx8mmLSTyhE1S1TIuXZjAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUd+12xhp8eUd6KqmenaDnkSYBvk4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZC0xMnhocDhlVWQ2S3Ft
ZW5hRG5rU1lCdms0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Ba9jwDANBgkqhkiG9w0BAQsFAAOCAQEAbxzBDakHqC6tzO0p87wxWT6zrGh4lddx
AolTSaiSLRxA8Fgp9itSJtXbiFEdP+ekznDsyPj+FKJpcyAt4QLvMjwf6DrpEsjH
aI8/PLBeFhycNlIDbFZ0cgT47HnNDEKRzqrh/C3ht/kQxAKHUCMoGcUmXz174u2u
TZ3N6GZ/FjZex5aSaJzl+ytAq8gIELhkLijejWk01LL7MLNJXIA2CnzCxZX7H7tN
8h1uIZsdJYPmRX2Ucbl0XggK7YkYkGsUtqd+107c5q8T3VJfsRgbexOPazcDEl6Q
VXfkJXFPAki256pfyd0WYxOf0UBXpnidBRdIjYT/cUhe6Y9sZyhLaw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:15 2023 by rpki-client on console-fra.rpki-client.org