Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vu0MfpeuP1zDxfcc_PpTQRiWMKs.roa
File:                     vu0MfpeuP1zDxfcc_PpTQRiWMKs.roa (raw, json)
Hash identifier:          SYo5rmfazbucayGxxREsmPzCZGw/PIqQ5r207OrYbmo=
Subject key identifier:   BE:ED:0C:7E:97:AE:3F:5C:C3:C5:F7:1C:FC:FA:53:41:18:96:30:AB
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C8B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vu0MfpeuP1zDxfcc_PpTQRiWMKs.roa
Signing time:             Wed 29 Sep 2021 02:49:57 +0000
ROA not before:           Wed 29 Sep 2021 02:49:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        203.77.80.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3211 (0xc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BEED0C7E97AE3F5CC3C5F71CFCFA5341189630AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:d6:8c:08:99:5c:6f:97:b2:2e:be:4e:29:
                    16:a1:5b:1b:c4:3d:f7:38:f4:5c:a8:a0:94:1a:62:
                    40:22:36:29:34:0e:6c:44:4d:29:b3:19:a6:35:61:
                    e0:28:50:75:a3:3f:3c:cf:b7:d9:b8:0f:5c:a6:73:
                    a8:ea:90:0e:a6:f3:a6:16:1f:d0:48:2d:62:7f:63:
                    1e:de:6a:c9:f2:11:cc:f3:46:95:a2:71:2d:6e:06:
                    59:88:19:05:68:84:d5:8a:af:4a:79:23:26:fa:34:
                    17:7c:4d:e8:04:d7:35:80:9c:33:25:72:a8:55:3a:
                    0a:32:b0:21:6f:cb:b7:7e:06:c9:7c:af:e3:ae:ea:
                    50:4e:7b:64:03:34:a9:a2:23:84:4b:0d:58:e9:76:
                    ba:4a:f5:20:83:1f:8f:d3:58:85:a9:0e:63:f6:03:
                    d0:9f:bc:55:e8:b8:ac:f5:85:ad:45:5c:7c:4a:d0:
                    6a:9d:ff:0a:04:7b:e4:54:b3:5f:b7:59:2a:14:5b:
                    c2:40:93:3c:25:f7:f6:e2:b4:e0:b2:49:1a:53:12:
                    1c:75:0f:96:0a:5d:c4:74:74:97:e5:99:ec:c2:f9:
                    8c:29:31:4f:7f:9b:65:c7:0b:25:53:7b:38:8f:e4:
                    5e:8e:d5:4a:9e:6c:81:4d:c4:25:65:d6:c3:99:c7:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:ED:0C:7E:97:AE:3F:5C:C3:C5:F7:1C:FC:FA:53:41:18:96:30:AB
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vu0MfpeuP1zDxfcc_PpTQRiWMKs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:ae:8f:26:59:a9:9d:17:47:08:98:6e:fe:b0:36:91:0a:
         ce:08:f7:9b:00:10:50:16:93:62:1a:73:12:bb:9c:ee:d9:bd:
         dd:b9:28:64:ae:cc:eb:59:b5:2d:9f:eb:df:ff:1b:2d:91:41:
         6e:ad:23:c3:b0:d2:56:5d:ac:6d:3e:2d:0e:24:68:d3:8a:25:
         28:29:31:a1:10:4f:72:3f:ca:19:31:86:c9:80:21:ed:ba:73:
         dc:a3:9e:fb:e8:b6:dc:64:a8:3c:c5:80:84:64:d3:9b:b3:8a:
         bd:f2:a4:2f:8c:2c:83:f3:d5:7e:db:38:16:74:5c:59:05:5f:
         47:8d:95:ca:fc:91:25:b3:d9:ec:ef:79:65:8d:2c:94:cf:f6:
         50:61:b8:df:90:9c:1a:b4:9c:90:b9:ab:30:c4:e7:93:81:d7:
         cc:80:5b:4a:f5:76:66:41:6c:7e:6b:e5:20:ac:1d:b3:12:fe:
         29:ba:aa:5e:11:a5:ce:54:91:42:18:03:d5:46:95:a7:5e:bc:
         94:5f:b6:0a:00:a0:ef:5f:72:bc:4d:c6:a7:80:46:66:86:b0:
         c2:4e:9e:ba:13:08:b3:35:f0:28:08:ec:9d:f0:16:37:37:35:
         cf:15:a9:ae:d5:d6:a1:f0:32:2c:ec:73:40:c3:38:7f:0a:74:
         ef:d6:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org