Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FeX_EGYhSdVPT91zY6GiyHQmujY.roa
File:                     FeX_EGYhSdVPT91zY6GiyHQmujY.roa (raw, json)
Hash identifier:          0og1E3ZnlSTOUSbwxj4bVlVeBAREg3LTeZC/2GtYWls=
Subject key identifier:   15:E5:FF:10:66:21:49:D5:4F:4F:DD:73:63:A1:A2:C8:74:26:BA:36
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       08D5
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FeX_EGYhSdVPT91zY6GiyHQmujY.roa
Signing time:             Wed 27 Jan 2021 07:40:19 +0000
ROA not before:           Wed 27 Jan 2021 07:40:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131650
IP address blocks:        2402:7500:faff::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Jan 27 07:40:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=15E5FF10662149D54F4FDD7363A1A2C87426BA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:2d:49:f1:15:9f:c9:48:3d:70:da:b6:4b:
                    7e:2d:f8:25:b7:76:c3:f1:10:6f:db:19:3d:62:61:
                    af:0e:ac:8d:77:f8:68:4e:d3:62:35:72:fe:f0:09:
                    77:e1:e0:df:04:86:f0:55:52:28:db:18:d2:c5:9e:
                    c8:13:45:c7:b9:88:cb:a5:54:f2:a7:c6:57:bf:fa:
                    af:4a:f3:d2:5d:bc:49:7d:ea:f2:07:00:40:40:f8:
                    3c:32:b6:a8:0c:aa:09:4b:b9:36:91:16:c5:ef:68:
                    be:a2:d9:53:89:7a:c4:d3:2d:4e:57:93:17:8d:41:
                    5b:c7:df:19:8c:fc:e6:85:de:d2:d3:78:f1:2a:c9:
                    af:62:71:42:ae:bc:4a:e8:c7:29:b8:66:39:1c:03:
                    5b:a7:07:3a:15:97:96:f3:0c:78:af:dc:81:bc:70:
                    78:e1:bf:f4:1f:31:8f:98:66:b9:98:8a:ab:91:6e:
                    ff:71:ff:0d:b8:6e:c3:2d:95:0b:23:4a:4f:e8:d3:
                    b5:f0:97:19:55:a5:a7:74:49:c6:af:3c:be:43:59:
                    9d:f6:51:ff:88:d5:55:cb:04:a8:e2:b3:5a:49:ed:
                    41:a5:97:0d:2a:d5:34:a8:5c:b7:02:1a:57:1a:73:
                    09:ad:08:7b:29:ec:9f:61:40:6e:35:bd:14:c4:11:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:FF:10:66:21:49:D5:4F:4F:DD:73:63:A1:A2:C8:74:26:BA:36
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/FeX_EGYhSdVPT91zY6GiyHQmujY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:faff::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:45:bc:25:3c:f8:84:8e:98:26:67:03:ce:02:05:87:70:6f:
         ed:ed:01:da:47:5b:1a:20:72:5f:3d:90:67:80:5e:d0:36:02:
         bf:ab:65:2b:0b:77:07:07:3e:11:4a:3e:52:44:38:89:e8:e8:
         55:f6:ea:49:2d:5a:e2:71:76:0c:f5:26:6b:0e:54:c6:9c:90:
         03:94:e1:a4:5c:ee:9f:f4:ce:af:30:a5:8b:ad:52:bb:3b:7e:
         b8:ac:80:3a:ce:12:b6:10:a6:46:4d:7e:df:98:83:26:82:78:
         22:ff:42:57:85:e7:c0:fa:45:c4:a3:24:b5:16:03:a7:ed:7e:
         43:2f:a4:b2:85:da:35:32:39:c3:29:69:67:ab:86:26:46:91:
         46:9e:29:91:63:55:45:74:f7:12:37:bc:c8:80:c8:bb:19:ce:
         0d:19:e5:76:ca:13:ad:1b:b6:a6:19:5d:fc:94:1c:14:ef:57:
         15:af:0f:2f:1f:89:9d:0e:67:31:99:ba:58:57:51:23:4f:75:
         7d:49:fe:9d:b4:5b:21:90:db:aa:d9:5e:ff:7a:00:28:3d:b3:
         27:a7:d0:08:e8:4e:1a:b5:14:76:c4:12:60:3e:59:d1:d2:33:
         eb:63:19:22:74:f9:65:07:3a:bc:23:0e:14:95:c0:d5:39:97:
         b6:bd:7f:64
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMTAxMjcw
NzQwMTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE1RTVGRjEwNjYyMTQ5
RDU0RjRGREQ3MzYzQTFBMkM4NzQyNkJBMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbQy1J8RWfyUg9cNq2S34t+CW3dsPxEG/bGT1iYa8OrI13+GhO
02I1cv7wCXfh4N8EhvBVUijbGNLFnsgTRce5iMulVPKnxle/+q9K89JdvEl96vIH
AEBA+DwytqgMqglLuTaRFsXvaL6i2VOJesTTLU5XkxeNQVvH3xmM/OaF3tLTePEq
ya9icUKuvEroxym4ZjkcA1unBzoVl5bzDHiv3IG8cHjhv/QfMY+YZrmYiquRbv9x
/w24bsMtlQsjSk/o07XwlxlVpad0ScavPL5DWZ32Uf+I1VXLBKjis1pJ7UGllw0q
1TSoXLcCGlcacwmtCHsp7J9hQG41vRTEETOhAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUFeX/EGYhSdVPT91zY6GiyHQmujYwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0ZlWF9F
R1loU2RWUFQ5MXpZNkdpeUhRbXVqWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAkAnUA+v8wDQYJKoZIhvcNAQELBQADggEBANZFvCU8+ISOmCZn
A84CBYdwb+3tAdpHWxogcl89kGeAXtA2Ar+rZSsLdwcHPhFKPlJEOIno6FX26kkt
WuJxdgz1JmsOVMackAOU4aRc7p/0zq8wpYutUrs7frisgDrOErYQpkZNft+YgyaC
eCL/QleF58D6RcSjJLUWA6ftfkMvpLKF2jUyOcMpaWerhiZGkUaeKZFjVUV09xI3
vMiAyLsZzg0Z5XbKE60btqYZXfyUHBTvVxWvDy8fiZ0OZzGZulhXUSNPdX1J/p20
WyGQ26rZXv96ACg9syen0AjoThq1FHbEEmA+WdHSM+tjGSJ0+WUHOrwjDhSVwNU5
l7a9f2Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org