Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/N8QJCp30OoS_e8CjIb4OIcixYXM.roa
File:                     N8QJCp30OoS_e8CjIb4OIcixYXM.roa (raw, json)
Hash identifier:          D6cp8R0rwZHohSKESaC0xPzcAqGmsv1eQsfhJlCcTRQ=
Subject key identifier:   37:C4:09:0A:9D:F4:3A:84:BF:7B:C0:A3:21:BE:0E:21:C8:B1:61:73
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       078F
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/N8QJCp30OoS_e8CjIb4OIcixYXM.roa
Signing time:             Tue 29 Sep 2020 10:06:26 +0000
ROA not before:           Tue 29 Sep 2020 10:06:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        123.99.32.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=37C4090A9DF43A84BF7BC0A321BE0E21C8B16173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:ca:4e:1e:c3:50:1e:f4:2d:eb:4b:66:ee:
                    b4:21:c6:ef:72:06:57:3e:e2:86:e1:4e:d8:8d:59:
                    1e:bf:f1:66:90:8c:a4:0c:12:6d:a2:9d:ad:d2:6e:
                    89:74:90:1b:cc:37:f9:d7:56:6d:7c:96:c2:26:c0:
                    34:2c:9c:bb:6e:e3:61:12:bf:91:ac:66:ad:09:f6:
                    d1:40:4f:e4:df:f2:c4:41:31:a8:be:51:83:24:ef:
                    fb:ce:3b:62:25:1e:8c:92:cc:db:ad:00:ed:13:7a:
                    a5:82:ac:50:35:5e:e2:c3:87:9d:3f:b0:75:eb:e9:
                    51:92:29:05:9b:eb:ff:20:6b:52:a7:01:b8:d9:ba:
                    bc:bb:fb:66:fb:b6:57:1e:8b:c3:70:96:00:95:21:
                    3e:f1:34:67:a9:a9:98:e9:51:89:52:26:5a:e0:8b:
                    ed:c6:f4:e7:4a:9c:6d:ca:4b:2f:7f:35:8f:d0:bf:
                    bf:b0:57:67:9f:d9:45:43:61:8f:33:da:ea:da:df:
                    c5:4d:ff:e8:c5:de:5b:14:c1:8a:11:6f:d6:19:57:
                    9f:f3:c0:3e:30:f2:a1:83:d5:a6:8e:dc:6a:62:28:
                    b5:75:1f:9f:e9:12:77:ea:21:cd:e8:a5:93:3f:3d:
                    2a:be:0a:05:6a:b9:29:be:9a:07:13:8e:6c:c9:63:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:09:0A:9D:F4:3A:84:BF:7B:C0:A3:21:BE:0E:21:C8:B1:61:73
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/N8QJCp30OoS_e8CjIb4OIcixYXM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:d5:21:b7:46:19:1f:df:6d:42:a0:91:7e:64:75:cc:0d:
         c4:d7:40:b2:6d:e3:92:b4:e4:e3:a7:74:e2:23:c2:8c:c7:ff:
         c4:36:e6:34:c7:6e:0d:84:94:dd:44:30:61:67:62:41:2e:f2:
         0d:21:f2:e4:12:2a:91:b7:d0:a6:71:0a:d7:24:87:e7:8f:2e:
         27:32:c2:fb:21:60:bc:9c:43:89:df:4d:db:e1:86:e4:24:8c:
         44:fa:a4:29:81:77:43:97:09:fd:61:da:24:d4:68:d9:53:8e:
         42:99:85:70:cc:82:6d:24:eb:94:ab:58:58:c1:36:b2:d2:28:
         d0:b5:cb:c5:64:d2:c6:be:21:62:9a:c6:a4:b9:83:de:c6:98:
         3e:d5:84:96:bd:14:ad:ea:b9:95:e1:88:79:bd:f1:1e:74:4d:
         94:f3:76:26:02:3d:25:8c:ae:2d:f5:fc:96:01:84:73:d8:e5:
         2c:18:4d:70:7a:12:d8:bc:1f:fa:4e:fe:34:5b:98:b9:1b:09:
         a0:9c:8a:f5:f0:b7:0e:8a:89:15:25:e1:43:d3:33:d6:a3:97:
         48:e8:3c:00:0d:a1:db:5c:5a:68:fd:c0:bb:86:72:32:57:6c:
         ca:08:b9:47:63:bd:64:11:6f:bb:59:61:45:bc:6b:fd:85:d6:
         83:0a:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:20 2025 by rpki-client