Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ppUNxZnoqSrUUsW7Rr4R0HWS-QM.roa
File:                     ppUNxZnoqSrUUsW7Rr4R0HWS-QM.roa (raw, json)
Hash identifier:          AOmXFeR5Z0MwVzBU1YGGO2qY7QBf6eQhhGlGtR1VNY0=
Subject key identifier:   A6:95:0D:C5:99:E8:A9:2A:D4:52:C5:BB:46:BE:11:D0:75:92:F9:03
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       082C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ppUNxZnoqSrUUsW7Rr4R0HWS-QM.roa
Signing time:             Tue 29 Sep 2020 09:57:51 +0000
ROA not before:           Tue 29 Sep 2020 09:57:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        203.77.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A6950DC599E8A92AD452C5BB46BE11D07592F903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:1d:a9:58:ae:cf:ec:db:1f:dd:d2:ea:39:
                    0a:52:d2:70:43:dc:58:22:70:3d:ec:5a:bd:fe:02:
                    34:2b:39:e3:1d:af:83:9e:61:4b:f8:30:53:dd:76:
                    9d:f8:67:50:61:4b:5d:5b:79:e4:cd:7b:13:36:52:
                    31:91:14:b1:e6:14:1a:d2:83:89:89:cf:b1:07:72:
                    ef:c4:ad:40:5c:ad:b0:35:b2:52:0e:c0:bb:38:f5:
                    b1:82:23:33:23:c1:52:6d:21:f2:77:30:44:33:18:
                    72:b1:a0:10:68:48:82:2a:25:da:e4:2b:c1:4f:51:
                    b6:73:e6:ad:3c:44:c1:12:c5:f5:56:53:a5:f9:fa:
                    da:9c:56:7c:c3:5c:94:2f:87:a2:7c:fa:aa:2c:c5:
                    0c:f2:7c:92:69:ac:03:12:93:c6:7e:6e:a0:59:b6:
                    12:e1:ea:8b:7d:07:b9:8b:53:29:72:f4:e0:22:5b:
                    33:5a:84:32:7e:37:0a:56:07:ea:f2:ec:0e:52:0c:
                    30:79:30:95:84:1e:44:ea:e3:08:2d:e0:df:e4:6f:
                    3f:26:e1:87:0f:bb:63:42:ef:50:b9:47:ff:6e:9b:
                    86:56:50:eb:3d:6c:f9:2e:8a:4c:b4:3a:7e:39:e7:
                    6e:26:ab:07:85:7f:1d:54:db:d2:e8:70:67:25:5f:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:95:0D:C5:99:E8:A9:2A:D4:52:C5:BB:46:BE:11:D0:75:92:F9:03
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ppUNxZnoqSrUUsW7Rr4R0HWS-QM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4a:5a:f8:1c:b8:b3:1a:ab:a8:60:18:9c:26:76:8a:20:e0:
         a9:fc:2d:c0:17:3f:49:b7:ad:23:95:c5:0b:a2:d6:15:9d:49:
         ef:ba:a3:28:dc:8a:77:11:83:28:a7:67:ae:01:69:8a:20:4b:
         97:48:76:07:3f:d5:74:12:d6:85:03:b6:0f:da:b5:a4:ad:67:
         02:04:c2:45:e8:41:8e:79:9b:1b:86:c1:a1:bf:70:a1:4c:87:
         24:4d:6b:ff:cf:30:80:21:b8:7f:96:b0:55:0c:76:a2:0e:f9:
         91:f8:3b:82:7d:d0:a0:29:97:d1:68:3d:c0:08:f1:8e:f7:17:
         7b:43:58:67:f3:fe:9b:54:9e:ef:dc:5f:88:72:27:fc:6b:7e:
         51:a0:fc:87:85:30:51:0e:0a:bf:a6:7f:32:a3:cf:d0:de:46:
         40:da:7a:48:5f:db:e0:d7:47:03:43:88:3d:64:41:e2:8d:ce:
         61:ae:8e:e2:71:5d:93:4d:77:22:1e:ae:3a:c3:92:bc:b5:86:
         31:f5:f3:0b:98:1f:dc:98:9c:3b:ae:3f:3c:be:c2:ed:d0:f8:
         92:bd:3b:c8:44:30:87:a6:55:31:eb:13:bc:24:00:0e:44:67:
         da:7f:59:87:ad:b4:53:c7:c9:41:4d:73:60:a5:4b:86:5c:4e:
         f1:d9:0e:24
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3NTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE2OTUwREM1OTlFOEE5
MkFENDUyQzVCQjQ2QkUxMUQwNzU5MkY5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk5B2pWK7P7Nsf3dLqOQpS0nBD3FgicD3sWr3+AjQrOeMdr4Oe
YUv4MFPddp34Z1BhS11beeTNexM2UjGRFLHmFBrSg4mJz7EHcu/ErUBcrbA1slIO
wLs49bGCIzMjwVJtIfJ3MEQzGHKxoBBoSIIqJdrkK8FPUbZz5q08RMESxfVWU6X5
+tqcVnzDXJQvh6J8+qosxQzyfJJprAMSk8Z+bqBZthLh6ot9B7mLUyly9OAiWzNa
hDJ+NwpWB+ry7A5SDDB5MJWEHkTq4wgt4N/kbz8m4YcPu2NC71C5R/9um4ZWUOs9
bPkuiky0On45524mqweFfx1U29LocGclX1TfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUppUNxZnoqSrUUsW7Rr4R0HWS+QMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvcHBVTnhabm9xU3JVVXNX
N1JyNFIwSFdTLVFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMtNMjANBgkqhkiG9w0BAQsFAAOCAQEAD0pa+By4sxqrqGAYnCZ2iiDgqfwtwBc/
SbetI5XFC6LWFZ1J77qjKNyKdxGDKKdnrgFpiiBLl0h2Bz/VdBLWhQO2D9q1pK1n
AgTCRehBjnmbG4bBob9woUyHJE1r/88wgCG4f5awVQx2og75kfg7gn3QoCmX0Wg9
wAjxjvcXe0NYZ/P+m1Se79xfiHIn/Gt+UaD8h4UwUQ4Kv6Z/MqPP0N5GQNp6SF/b
4NdHA0OIPWRB4o3OYa6O4nFdk013Ih6uOsOSvLWGMfXzC5gf3JicO64/PL7C7dD4
kr07yEQwh6ZVMesTvCQADkRn2n9Zh620U8fJQU1zYKVLhlxO8dkOJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org