Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wlQv13Cxa_QQc_D3D-LxspH67RY.roa
File:                     wlQv13Cxa_QQc_D3D-LxspH67RY.roa (raw, json)
Hash identifier:          qzwwTS+wuMuzEXryvfpkJMicMjQh8AncHlzhxakVaQ0=
Subject key identifier:   C2:54:2F:D7:70:B1:6B:F4:10:73:F0:F7:0F:E2:F1:B2:91:FA:ED:16
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wlQv13Cxa_QQc_D3D-LxspH67RY.roa
Signing time:             Thu 15 Sep 2022 02:47:14 +0000
ROA not before:           Thu 15 Sep 2022 02:47:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        61.30.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C2542FD770B16BF41073F0F70FE2F1B291FAED16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:20:d3:15:b2:cb:1a:2a:8b:d7:29:3f:36:
                    05:be:58:6e:9e:12:86:7d:b5:70:66:21:ad:6b:8d:
                    4e:af:fc:40:ed:9b:82:d1:6c:00:ea:12:61:2e:23:
                    7d:a1:73:3f:ae:07:dc:46:77:5b:20:72:da:ff:96:
                    14:82:01:43:e7:c0:6c:e4:b3:c6:20:b2:2b:6f:6e:
                    3e:e4:61:e3:4f:c1:2b:c0:09:84:aa:66:a8:dc:c4:
                    2a:74:69:85:c9:33:84:fa:36:8e:5a:84:41:c4:8d:
                    4f:a2:d2:3b:d9:4a:f6:1e:82:89:e7:02:81:17:08:
                    b6:b4:d2:4e:af:9f:90:f3:b3:c8:db:a4:78:c4:5d:
                    e1:08:8b:ae:35:0b:71:fa:31:b0:9e:1b:6a:66:d3:
                    1d:d5:a0:9c:ee:98:e6:3d:5a:cf:c1:5e:23:18:73:
                    92:6d:4c:03:cd:a9:3d:5e:a5:76:c0:9a:b3:dd:56:
                    2e:f6:8b:aa:39:6a:98:27:2a:8f:28:34:ea:f4:8a:
                    51:b5:e9:44:40:e6:aa:18:8e:3c:0a:75:73:55:7c:
                    d5:23:6c:0e:05:66:c5:1c:2b:65:02:f8:ce:92:6f:
                    63:e1:99:f7:c6:fb:02:24:1d:05:04:6d:e7:33:35:
                    f1:9d:ed:20:83:5e:cd:76:ff:f3:ec:7e:95:6b:6f:
                    fa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:2F:D7:70:B1:6B:F4:10:73:F0:F7:0F:E2:F1:B2:91:FA:ED:16
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/wlQv13Cxa_QQc_D3D-LxspH67RY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.30.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:09:19:1b:aa:55:92:ea:11:97:bb:8a:22:38:51:bf:e5:
         e6:df:97:76:53:78:e7:d2:b3:9e:49:49:cc:a9:55:93:41:f1:
         1d:c9:20:cf:47:0a:56:32:88:57:44:00:3a:ff:b8:37:8c:29:
         4e:69:8c:d0:fe:85:a6:40:01:3e:cd:19:c9:09:2c:a2:59:6c:
         52:30:6b:f1:b0:cf:df:0c:4e:f7:81:4a:59:62:4e:cf:3e:56:
         e0:05:c5:c7:de:c7:19:0d:32:97:8a:d5:66:f5:f8:3a:72:fb:
         f3:5f:90:49:a9:fa:75:a0:83:5c:92:b4:21:e1:1f:4c:18:ee:
         ca:05:24:b2:56:0f:df:b7:26:46:e1:d0:0f:70:2f:05:d6:a7:
         69:e6:8a:f2:67:31:36:f2:f0:8b:2a:8b:23:5d:ea:43:93:f6:
         eb:48:0d:fa:d6:c9:c0:a1:54:96:c9:14:30:57:4d:00:75:2d:
         ec:61:07:c1:8d:63:6d:8d:2e:5c:09:1e:6a:ed:27:fd:68:4c:
         5a:c0:bd:de:a5:14:5d:8f:cc:2d:39:e2:7b:55:dc:36:c4:33:
         3d:6b:9a:90:7e:4f:03:ae:30:ad:e8:71:44:26:2b:d3:38:82:
         62:88:15:b4:ae:fa:8e:95:0a:e0:7a:d0:89:75:c6:16:a3:65:
         71:30:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:43 2024 by rpki-client on console-fra.rpki-client.org