Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jhbxQwzTOY5CTBZHxzvz2HGcVPE.roa
File:                     jhbxQwzTOY5CTBZHxzvz2HGcVPE.roa (raw, json)
Hash identifier:          hxTsvR9OZsu7nb1O/1+pNPCXZ0Dzrxs5RAqYSRNzTwY=
Subject key identifier:   8E:16:F1:43:0C:D3:39:8E:42:4C:16:47:C7:3B:F3:D8:71:9C:54:F1
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jhbxQwzTOY5CTBZHxzvz2HGcVPE.roa
Signing time:             Thu 15 Sep 2022 02:46:53 +0000
ROA not before:           Thu 15 Sep 2022 02:46:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131628
IP address blocks:        175.99.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:46:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8E16F1430CD3398E424C1647C73BF3D8719C54F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:d0:04:0a:83:13:b8:c3:21:6e:bd:a0:7a:
                    d5:a8:3d:e2:73:1e:26:e8:d0:d0:44:e8:05:d9:66:
                    7e:38:14:98:78:9d:3c:11:50:fb:41:c4:7c:44:ab:
                    4a:86:b6:12:30:a8:1f:d8:b1:08:e3:b7:a3:11:c8:
                    ee:83:dd:bb:58:9b:09:bd:52:f2:c0:58:83:8e:ce:
                    92:ef:bf:f7:96:12:bd:e8:37:04:87:f5:fb:2b:d6:
                    33:e5:1c:8f:60:dd:5d:c7:06:cf:87:1e:f8:53:4b:
                    4e:ef:19:b0:83:c9:e3:19:fa:7c:df:9f:54:79:be:
                    0c:bd:bb:7b:17:47:90:5c:0b:ad:ae:58:e6:b7:a7:
                    31:e3:31:6a:c8:55:01:60:15:17:32:08:80:e7:30:
                    7a:a5:11:ab:8d:8e:4a:b1:5a:f9:ca:d7:eb:59:c3:
                    c1:85:02:41:1c:dc:a0:38:c9:8a:1d:a7:91:cb:e0:
                    25:76:b0:69:1c:d4:07:af:7b:9b:4f:8e:74:d9:52:
                    fb:34:c8:7f:6e:d9:b3:54:a7:21:72:7f:50:ea:37:
                    a2:e0:86:e3:f1:82:dd:80:fa:35:eb:d1:6c:b3:39:
                    0d:9d:73:b2:2e:9d:56:70:f7:59:60:a8:8b:75:e5:
                    3c:a7:a3:db:19:8c:ce:9d:4e:13:24:4c:87:90:36:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:F1:43:0C:D3:39:8E:42:4C:16:47:C7:3B:F3:D8:71:9C:54:F1
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jhbxQwzTOY5CTBZHxzvz2HGcVPE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.99.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f7:4e:5f:8b:5f:bc:5f:a9:81:5f:55:60:e8:3c:fd:cd:67:
         f4:ff:6f:63:5b:ec:2a:71:4c:76:a4:8e:c7:dc:fd:70:34:a3:
         0a:ab:51:3a:bc:68:bc:ad:6a:f0:8a:5c:44:38:d3:e1:03:5a:
         b9:52:7f:ed:4e:e6:9f:5c:bd:84:c1:a7:9f:f7:c9:ed:15:08:
         91:d6:0c:88:2a:3e:0c:7f:68:b2:3a:24:49:57:0b:83:94:77:
         2c:62:23:0e:dd:a4:6d:39:ad:a1:c9:9a:86:ec:53:4a:ab:9d:
         d4:46:19:2d:59:a8:55:62:27:eb:09:fe:a4:d6:6e:2b:01:3f:
         e5:2a:63:8e:3e:4d:fb:b1:a3:c9:71:9a:9e:0f:6f:af:fc:4f:
         d4:50:13:42:28:d3:48:f8:e0:f5:e4:92:e3:db:3c:90:3f:27:
         83:e2:3b:ca:dd:60:cf:5e:b2:77:0c:21:27:9a:89:56:cb:dc:
         88:0e:bc:3a:9f:81:77:1b:da:0e:ff:1d:c3:ef:db:77:9d:6f:
         0f:e6:95:5c:47:78:e2:23:03:78:f1:90:c3:2e:bf:51:b1:a5:
         69:1e:34:8b:c5:42:49:05:88:f4:86:ab:de:04:4f:06:7d:81:
         21:e9:97:28:b2:ae:9b:36:6d:46:a9:8b:7f:d9:21:f6:ba:8f:
         99:9d:d8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org