Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hCq-XM9NUV2wT2j6LwyzxAWmTBs.roa
File:                     hCq-XM9NUV2wT2j6LwyzxAWmTBs.roa (raw, json)
Hash identifier:          Wwf3cx2LSLmo0D/T7qphk/Y08nXUm54Z6TWyzSNp9DY=
Subject key identifier:   84:2A:BE:5C:CF:4D:51:5D:B0:4F:68:FA:2F:0C:B3:C4:05:A6:4C:1B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C53
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hCq-XM9NUV2wT2j6LwyzxAWmTBs.roa
Signing time:             Wed 29 Sep 2021 02:49:41 +0000
ROA not before:           Wed 29 Sep 2021 02:49:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        202.145.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3155 (0xc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=842ABE5CCF4D515DB04F68FA2F0CB3C405A64C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:3d:a3:89:8c:26:04:aa:4b:09:fb:e9:24:
                    86:58:7c:bc:1f:56:da:a2:eb:ce:52:7b:74:45:7b:
                    d7:fa:32:a9:5c:cf:2c:32:95:bc:45:90:dd:12:15:
                    8f:54:a0:28:25:3d:2e:0b:40:71:70:b8:f6:08:46:
                    bd:de:f0:e9:09:35:0a:8a:de:a0:2f:33:c0:e2:c5:
                    29:33:b8:bd:76:48:d2:4d:fd:7a:43:a4:ef:9a:e6:
                    be:da:9f:7e:a2:ed:21:76:1e:cf:6a:8c:c5:86:8e:
                    6b:19:a6:55:00:00:98:ab:63:5d:59:07:67:b0:b7:
                    e8:ba:0a:4c:81:63:40:5b:16:d2:0f:f9:99:d9:88:
                    4c:37:b0:07:5c:17:bd:0c:2d:52:21:1a:e8:85:0b:
                    84:25:e4:aa:70:f2:70:f1:da:51:f7:46:db:aa:bc:
                    8a:7f:2f:2e:2a:8c:c2:f1:35:4e:3d:21:5b:6d:ee:
                    be:db:39:a3:25:31:43:b2:e6:ff:59:7c:64:50:7d:
                    e7:bd:89:c1:92:d1:71:32:3d:2f:14:6d:c5:c6:73:
                    ac:85:46:f3:46:d3:5c:98:3c:32:4c:57:37:db:a2:
                    64:c6:5b:93:26:41:94:62:0d:57:4c:f5:ce:9b:57:
                    57:e5:4b:09:89:b0:38:c3:23:5b:ec:a5:7e:4e:a5:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2A:BE:5C:CF:4D:51:5D:B0:4F:68:FA:2F:0C:B3:C4:05:A6:4C:1B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hCq-XM9NUV2wT2j6LwyzxAWmTBs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:cd:09:d1:85:d3:9a:48:69:76:3d:07:77:ed:4c:d6:3a:
         a3:88:9f:da:17:92:b9:c1:82:f0:b6:f5:f1:96:50:66:2b:f0:
         ee:45:ff:ea:a7:bf:d0:9f:cf:c5:3f:b9:6e:57:46:d7:f8:2f:
         ef:cf:40:21:83:57:4d:06:20:dc:e7:a3:38:ee:07:81:53:2c:
         6b:f2:e0:b4:1c:e7:f0:27:11:59:fa:5f:22:2b:92:26:5a:ac:
         1b:75:e7:fb:8b:6d:b9:b0:3c:81:4c:29:d5:70:57:8b:3b:dc:
         a2:a4:b3:ee:ba:aa:02:7e:b9:9a:03:26:7d:d7:6b:1a:a8:2a:
         78:d2:47:e5:10:d4:42:aa:83:f9:62:c8:a9:ff:e2:d2:ea:61:
         4b:a0:09:a0:ed:2c:c4:17:a5:b0:4c:82:95:b5:ed:0f:d1:95:
         ec:aa:cc:a7:4d:cf:88:47:f7:84:84:6f:50:c1:75:ca:6e:be:
         6a:ae:83:24:a6:88:3a:00:0a:4a:46:1e:bd:60:ca:2e:35:eb:
         cb:06:f3:00:a4:41:44:1e:76:d9:01:28:6c:3c:0d:9d:fd:e5:
         6a:81:c1:4a:50:5c:bd:bd:ec:c9:25:b7:4d:a5:b8:52:bc:09:
         7a:35:e6:14:1c:bd:d9:db:af:60:08:87:8b:15:7b:c9:40:b0:
         e4:25:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org