Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jt_3Uv-kD97XT37mTemCEfhW9rc.roa
File:                     jt_3Uv-kD97XT37mTemCEfhW9rc.roa (raw, json)
Hash identifier:          k4OyheOAhV1ZlNIhUzWN5C2o297LigfSatr/xUVO2yc=
Subject key identifier:   8E:DF:F7:52:FF:A4:0F:DE:D7:4F:7E:E6:4D:E9:82:11:F8:56:F6:B7
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0CAB
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jt_3Uv-kD97XT37mTemCEfhW9rc.roa
Signing time:             Wed 29 Sep 2021 02:50:08 +0000
ROA not before:           Wed 29 Sep 2021 02:50:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        2001:c50::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3243 (0xcab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8EDFF752FFA40FDED74F7EE64DE98211F856F6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:8c:fd:a1:7d:74:0b:f0:4e:d3:09:23:73:
                    d6:46:61:45:99:5c:25:3e:d7:d7:59:47:74:48:be:
                    bd:40:62:5f:cf:48:65:9c:ca:64:e3:38:ea:77:5e:
                    e6:de:67:2e:c9:61:6d:1a:84:5d:c0:15:40:c1:14:
                    cc:c4:75:a6:cd:6e:f0:7b:3b:0b:a3:31:87:60:6f:
                    8f:57:8d:ae:08:cd:04:b1:aa:03:be:a5:c7:7a:4d:
                    9c:f3:f5:9f:08:d9:c4:04:83:c9:a2:46:3f:60:3a:
                    e2:6d:53:f5:11:30:7a:5b:0b:02:5f:40:fe:9b:02:
                    88:2a:d9:57:d5:dd:fc:9e:4c:70:3c:52:e5:11:1f:
                    07:8c:cd:d4:39:51:9e:07:73:17:6e:e1:2d:6f:af:
                    8b:0f:22:96:05:51:cd:fd:53:19:73:77:ae:ad:8f:
                    76:8b:d8:67:85:1b:02:a7:5c:65:c2:be:81:3a:57:
                    c5:c4:54:81:03:a2:eb:67:dc:c4:24:2f:a8:63:24:
                    d5:34:ac:4e:20:3c:b2:e7:76:ba:1d:88:80:5c:f4:
                    77:ac:a7:45:e9:7e:73:12:9f:ae:c0:5e:34:6d:b0:
                    64:10:63:84:87:88:4c:c7:b2:2e:dc:88:b7:85:fb:
                    84:9f:e9:b2:4f:1e:fd:26:e9:1e:ac:7f:c4:43:90:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:F7:52:FF:A4:0F:DE:D7:4F:7E:E6:4D:E9:82:11:F8:56:F6:B7
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jt_3Uv-kD97XT37mTemCEfhW9rc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:eb:ac:31:e4:1a:70:14:a6:b1:82:dd:08:4b:ac:68:d7:37:
         c2:aa:c2:75:72:95:cd:6c:56:36:be:cf:38:7b:3a:42:7b:e9:
         b2:8c:8c:fc:06:3b:e1:45:3c:17:52:d7:ce:d9:6c:82:b8:a7:
         9d:50:58:43:01:fc:0e:f7:23:04:a4:be:d2:58:b1:d6:89:01:
         49:01:24:6c:04:70:03:3d:4c:b8:5b:8e:ee:e4:1f:04:c4:4d:
         2d:a1:99:6a:7e:eb:b5:48:0c:6e:78:cf:fa:87:b2:e0:f0:4b:
         e2:a6:36:f8:47:77:65:a9:4f:aa:6a:8d:69:69:7e:a5:81:1b:
         1a:aa:63:12:e4:1c:fb:45:bb:73:00:4f:c7:fc:c7:76:b1:3e:
         6f:b6:42:96:f4:3a:dd:fe:47:5f:ae:93:b8:58:78:5e:f2:9d:
         31:4e:64:59:8d:0a:27:12:8a:82:97:7b:ac:0a:0e:a7:f6:e4:
         6a:c4:f7:67:65:57:83:e5:ac:ac:0d:d3:a9:11:aa:e6:16:3e:
         9a:99:06:06:ef:ee:83:93:9b:71:a2:4c:89:49:14:98:73:47:
         23:b1:ab:01:f0:a1:d4:02:f7:b4:75:57:fe:c2:bc:8e:3e:da:
         76:0c:1b:25:bf:15:57:91:1e:77:54:46:2f:48:7b:10:e9:f4:
         91:cc:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org