Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/M1Fq5OHvdU2ngV_k5pUzATPD4N4.roa
File:                     M1Fq5OHvdU2ngV_k5pUzATPD4N4.roa (raw, json)
Hash identifier:          lHiyk3LbNklsmQBvD8QdqkE/tSIUigaF2Mwmgb73vRg=
Subject key identifier:   33:51:6A:E4:E1:EF:75:4D:A7:81:5F:E4:E6:95:33:01:33:C3:E0:DE
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09A2
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/M1Fq5OHvdU2ngV_k5pUzATPD4N4.roa
Signing time:             Wed 29 Sep 2021 02:56:01 +0000
ROA not before:           Wed 29 Sep 2021 02:56:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        2402:7500:600::/40 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=33516AE4E1EF754DA7815FE4E695330133C3E0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:ac:fa:54:97:d5:af:70:5a:6d:2f:0d:5d:
                    83:96:22:fa:36:83:27:88:be:f2:6d:af:90:ab:57:
                    e6:81:27:7e:ed:de:ab:c0:53:67:8a:44:15:5d:03:
                    4a:b9:2d:cd:0f:2a:48:0e:7c:ab:25:b7:5c:2d:f5:
                    38:d3:45:77:cc:22:1d:a3:1a:cc:3d:61:90:39:2d:
                    c5:e2:cf:6f:f8:7b:1c:a7:38:87:8e:04:da:4d:66:
                    3b:82:72:9a:68:be:2d:6d:7e:6f:1b:f1:4f:b3:61:
                    bc:e6:56:e9:dd:be:b3:10:d8:5e:a6:78:32:fb:85:
                    3f:66:41:84:17:22:96:0d:47:f1:35:8b:21:62:db:
                    74:0d:a9:9b:7f:ed:6a:88:00:6c:5f:77:bf:bf:53:
                    2a:0f:59:56:06:2e:3b:25:71:c3:34:49:52:0f:ec:
                    8c:47:da:90:cf:43:6c:05:28:9c:03:3f:1f:8a:42:
                    eb:c6:94:1a:9a:e3:56:a2:03:17:33:53:71:13:3f:
                    a9:70:ca:3d:36:a6:49:f0:e4:07:96:c3:04:83:3d:
                    0c:2c:b3:66:ac:fc:da:fd:61:7b:0e:5d:b3:16:a4:
                    e6:36:49:0b:e0:77:30:38:52:55:6f:f9:12:16:e4:
                    44:2d:99:9a:e3:10:c1:f1:66:ce:0c:9a:52:30:44:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:6A:E4:E1:EF:75:4D:A7:81:5F:E4:E6:95:33:01:33:C3:E0:DE
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/M1Fq5OHvdU2ngV_k5pUzATPD4N4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:90:47:b3:c4:25:44:66:48:3d:47:4f:42:8b:a9:7d:5b:1d:
         9e:f3:49:9b:ac:55:bd:a1:a9:96:39:e1:63:c2:44:cc:90:25:
         db:7c:4d:67:41:d4:03:f4:6e:81:85:75:f2:10:57:23:93:db:
         7e:00:fe:cf:a5:e1:c2:07:77:cf:64:b7:cb:3a:1b:79:ff:99:
         8c:1d:50:08:41:b2:04:4b:ca:29:64:ae:58:78:55:9b:66:e5:
         f1:79:2e:7c:2c:b2:44:70:f6:d9:2c:62:5b:b4:4b:2b:66:cf:
         92:43:eb:f9:7e:d5:69:a9:97:23:51:74:9a:3a:32:7d:ff:9c:
         a9:84:30:82:02:e0:2f:4b:06:e4:08:7c:27:2b:59:07:d3:14:
         e5:08:ec:9e:4c:14:09:80:73:1d:51:17:a5:39:c3:5e:0e:ac:
         5c:b1:b6:67:af:3b:e7:31:90:90:59:5b:39:bc:4a:4e:8e:55:
         a6:03:a0:ec:aa:1a:47:3a:64:18:73:42:27:ce:51:60:3b:c0:
         0d:ae:61:8d:86:61:55:6d:50:a6:3f:11:0f:31:d5:20:9d:df:
         40:99:26:80:e0:fc:b6:f5:e7:c5:45:40:68:9d:ff:5b:4f:a9:
         46:a6:5e:d6:b5:be:b8:75:37:e0:32:d0:4f:ff:cf:f6:fe:47:
         46:2b:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:18 2025 by rpki-client