Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lgtV7szeeSOLPQSNVMNJEmSsh5E.roa
File:                     lgtV7szeeSOLPQSNVMNJEmSsh5E.roa (raw, json)
Hash identifier:          LkcZjZP1c7OzmkLgb8kDldo9ZTQyB7bm4RVVQplWILU=
Subject key identifier:   96:0B:55:EE:CC:DE:79:23:8B:3D:04:8D:54:C3:49:12:64:AC:87:91
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lgtV7szeeSOLPQSNVMNJEmSsh5E.roa
Signing time:             Thu 15 Sep 2022 02:47:09 +0000
ROA not before:           Thu 15 Sep 2022 02:47:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        203.77.40.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=960B55EECCDE79238B3D048D54C3491264AC8791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:79:1a:ec:c2:ee:8d:ce:51:b2:b9:2d:3a:
                    33:8d:34:ea:4c:aa:22:75:86:df:3e:17:5f:36:bb:
                    c3:6c:b1:c9:dd:ab:09:f3:b0:2d:91:16:4d:51:c6:
                    03:1b:70:66:8c:70:e4:40:88:5e:e4:c5:88:fb:d4:
                    df:a6:cf:cb:b4:09:18:1b:14:9a:7c:23:90:11:ce:
                    69:ba:b5:18:40:b2:5d:8d:22:13:f3:32:5a:0b:9f:
                    a2:7e:5e:9f:75:52:5c:9b:ea:fc:91:6e:96:a5:d5:
                    74:46:6d:b3:15:5d:f7:df:ea:fe:97:44:fb:42:3a:
                    c6:2a:70:67:a6:52:3f:ee:fb:f7:5c:dd:e7:2f:c3:
                    26:30:47:6e:95:4c:d6:4d:89:9b:05:3f:6b:cb:0e:
                    68:d4:e7:45:25:fc:a5:d3:a7:89:7a:16:27:78:d9:
                    2e:7f:60:e7:c7:21:e2:06:b9:6f:09:a9:f4:a0:cb:
                    2c:b1:45:40:11:58:e3:36:de:b2:df:13:b7:a2:fb:
                    d2:b6:ea:0f:1e:d2:7c:9e:d7:94:ff:ae:f9:2a:11:
                    a0:19:2b:64:82:43:1a:b6:1f:23:99:42:26:2c:9d:
                    60:82:1a:77:48:b7:fd:59:65:4b:e5:5b:56:96:7b:
                    1c:d0:d8:1d:3c:00:6f:67:a0:ea:dd:f5:29:b9:a1:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0B:55:EE:CC:DE:79:23:8B:3D:04:8D:54:C3:49:12:64:AC:87:91
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lgtV7szeeSOLPQSNVMNJEmSsh5E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:10:f7:9a:a3:6a:d0:97:df:04:d6:44:d8:32:22:e1:51:
         bf:07:ad:ff:5e:3b:b1:21:ed:2f:46:ac:66:1b:92:c7:ad:10:
         ea:97:2f:0b:65:aa:97:ae:dc:29:e4:12:b1:b1:a4:4d:b6:d1:
         5e:03:71:a7:b9:55:2f:03:6c:53:3c:18:4b:84:a4:d7:4d:5f:
         37:90:c8:40:ea:1d:a8:04:71:a9:bd:18:d2:f5:7f:39:19:fb:
         e6:48:c1:fe:b8:01:48:b6:8e:b1:fb:e0:3f:f9:c5:1c:8c:71:
         94:fe:4b:ce:16:2b:cf:62:99:c3:79:2e:b0:91:fd:b1:83:ad:
         5d:b0:e8:17:8a:82:79:6b:3b:1b:ed:2d:9e:6b:19:39:fa:76:
         c8:c1:bb:48:37:6f:0a:c6:ec:82:49:19:a3:ad:ba:61:0f:65:
         35:78:bc:d8:bd:a0:ca:89:96:16:96:0c:64:13:8c:09:41:f7:
         30:71:1e:b0:0d:98:54:ab:17:2e:9c:3e:a0:03:dd:3a:cb:c7:
         37:a7:f2:97:99:9d:a2:0a:c6:46:2c:ba:07:d0:cc:3b:52:59:
         42:3d:29:dc:2e:0d:16:cf:18:30:39:30:00:c9:f5:eb:bb:6a:
         8c:1f:1d:de:11:ce:80:52:fc:59:26:d6:56:20:61:6c:10:25:
         9d:38:e7:db
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk2MEI1NUVFQ0NERTc5
MjM4QjNEMDQ4RDU0QzM0OTEyNjRBQzg3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjw3ka7MLujc5RsrktOjONNOpMqiJ1ht8+F182u8Nsscndqwnz
sC2RFk1RxgMbcGaMcORAiF7kxYj71N+mz8u0CRgbFJp8I5ARzmm6tRhAsl2NIhPz
MloLn6J+Xp91Ulyb6vyRbpal1XRGbbMVXfff6v6XRPtCOsYqcGemUj/u+/dc3ecv
wyYwR26VTNZNiZsFP2vLDmjU50Ul/KXTp4l6Fid42S5/YOfHIeIGuW8JqfSgyyyx
RUARWOM23rLfE7ei+9K26g8e0nye15T/rvkqEaAZK2SCQxq2HyOZQiYsnWCCGndI
t/1ZZUvlW1aWexzQ2B08AG9noOrd9Sm5oYCRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUlgtV7szeeSOLPQSNVMNJEmSsh5EwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbGd0VjdzemVlU09MUFFT
TlZNTkpFbVNzaDVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A8tNKDANBgkqhkiG9w0BAQsFAAOCAQEALAAQ95qjatCX3wTWRNgyIuFRvwet/147
sSHtL0asZhuSx60Q6pcvC2Wql67cKeQSsbGkTbbRXgNxp7lVLwNsUzwYS4Sk101f
N5DIQOodqARxqb0Y0vV/ORn75kjB/rgBSLaOsfvgP/nFHIxxlP5LzhYrz2KZw3ku
sJH9sYOtXbDoF4qCeWs7G+0tnmsZOfp2yMG7SDdvCsbsgkkZo626YQ9lNXi82L2g
yomWFpYMZBOMCUH3MHEesA2YVKsXLpw+oAPdOsvHN6fyl5mdogrGRiy6B9DMO1JZ
Qj0p3C4NFs8YMDkwAMn167tqjB8d3hHOgFL8WSbWViBhbBAlnTjn2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org