Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lOVBzrl_x04PqsIGL4IYxVaF1ng.roa
File:                     lOVBzrl_x04PqsIGL4IYxVaF1ng.roa (raw, json)
Hash identifier:          I1UzLawATERNLrPs3jsLYvN5uO2CEn6vz43alMMTR4s=
Subject key identifier:   94:E5:41:CE:B9:7F:C7:4E:0F:AA:C2:06:2F:82:18:C5:56:85:D6:78
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B2E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lOVBzrl_x04PqsIGL4IYxVaF1ng.roa
Signing time:             Sun 07 Feb 2021 13:10:41 +0000
ROA not before:           Sun 07 Feb 2021 13:10:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.17.51.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2862 (0xb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:41 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=94E541CEB97FC74E0FAAC2062F8218C55685D678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:1e:1f:cb:53:d7:55:c4:79:1e:b1:18:a7:
                    e0:cb:28:96:36:73:b6:79:c8:2f:90:ae:6e:58:69:
                    1f:e0:72:e5:c9:de:62:82:2e:5f:9b:c8:82:7f:88:
                    09:7b:bb:8a:5e:90:4a:ca:bc:61:c2:1f:86:76:17:
                    dd:fd:8e:4f:b2:5d:61:86:f4:f1:14:54:18:a2:3a:
                    d2:8b:9e:08:d0:8f:e2:b2:d1:00:62:c8:bb:cf:b3:
                    d7:55:35:06:3c:a0:ed:cf:9f:27:84:9a:19:06:69:
                    c7:29:fb:c4:13:5d:aa:32:d6:75:a0:43:d6:01:33:
                    5d:01:54:28:f0:91:4c:62:10:21:3c:e5:03:d7:4b:
                    b4:16:c4:9d:14:db:05:c0:4b:9d:92:1e:60:15:93:
                    55:a6:3c:be:fe:7e:11:09:b4:da:26:38:10:78:9b:
                    68:c4:fc:dc:09:90:2c:c3:2d:23:c2:9f:47:eb:4d:
                    93:6d:e9:af:17:a4:68:43:3f:a8:4b:ff:04:31:81:
                    9f:24:c9:d2:60:6a:1d:01:51:31:31:d0:3a:92:42:
                    3f:7d:32:9e:52:53:ac:99:13:96:14:4e:bb:d1:41:
                    69:98:76:2c:4c:ba:52:4c:78:a9:7b:70:04:95:93:
                    24:c2:32:db:9d:54:42:01:b5:6b:5c:1a:3b:cf:14:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:41:CE:B9:7F:C7:4E:0F:AA:C2:06:2F:82:18:C5:56:85:D6:78
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lOVBzrl_x04PqsIGL4IYxVaF1ng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:78:59:98:21:a2:fd:34:39:81:cb:28:9e:ba:69:e3:da:70:
         73:37:bb:a4:c1:e4:60:b3:c5:e4:b4:da:23:a9:6b:3a:c9:b4:
         f8:6a:cc:10:01:17:60:24:9f:d9:51:fb:eb:0d:0a:5d:42:30:
         bd:b5:b5:b9:24:e3:18:89:6f:94:c3:25:6b:75:87:ad:9e:26:
         71:92:07:8a:35:9c:1d:81:6c:88:ad:d4:b5:a0:99:42:01:4c:
         f2:c4:c2:48:c5:d2:ad:0e:2f:e5:cf:b1:d6:b0:0d:5c:ce:2e:
         8a:12:db:61:ff:a6:bc:ef:ed:ee:be:90:ac:28:57:db:b4:86:
         ca:6f:01:c6:a2:46:1b:fb:96:53:f3:98:a9:3c:ad:35:43:81:
         c6:04:78:a9:51:a2:07:36:20:cb:6f:de:c5:d4:9f:bc:55:77:
         ca:4b:88:a1:4f:c8:2c:82:9d:67:82:69:53:12:87:02:2a:89:
         67:79:f4:f8:2a:e1:81:9c:d2:f3:72:b2:5e:11:7e:cf:76:78:
         47:20:49:2c:7e:fe:90:c9:78:20:a6:fc:e3:55:5b:09:4b:ca:
         ac:12:2b:8e:a3:17:ed:6e:18:d1:57:11:a7:a7:72:ab:ef:68:
         a8:ce:58:97:65:f7:b3:4e:2e:81:66:28:d0:f6:55:19:a7:4f:
         55:aa:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:15 2023 by rpki-client on console-fra.rpki-client.org