Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/NuLd08Fx_jYkIYnF5W6yccH9GiQ.roa
File:                     NuLd08Fx_jYkIYnF5W6yccH9GiQ.roa (raw, json)
Hash identifier:          8Ak8xqFc//xtNTm/YVqiU+iFQkm2a1oLgL0yQu2/eLI=
Subject key identifier:   36:E2:DD:D3:C1:71:FE:36:24:21:89:C5:E5:6E:B2:71:C1:FD:1A:24
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0794
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/NuLd08Fx_jYkIYnF5W6yccH9GiQ.roa
Signing time:             Tue 29 Sep 2020 10:06:27 +0000
ROA not before:           Tue 29 Sep 2020 10:06:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        2402:7500::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=36E2DDD3C171FE36242189C5E56EB271C1FD1A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:e0:d2:da:b1:bb:4f:91:fe:4c:ab:28:c4:
                    55:b8:2e:b3:21:61:67:be:19:d4:a9:a1:fc:36:31:
                    ba:41:58:af:9f:4e:05:2e:07:f7:cf:a8:54:1c:45:
                    2a:5e:20:08:c7:6f:7f:b7:73:3e:f2:39:2f:7f:cf:
                    55:07:09:e9:23:3d:41:93:7c:0d:0f:a5:16:8d:4f:
                    51:f0:9f:e6:77:95:00:d1:bb:dc:c7:be:10:0e:0b:
                    f3:22:db:d4:3d:63:05:14:0a:51:d3:74:69:21:88:
                    fd:1d:cc:9c:40:b3:5f:9b:a0:09:03:a5:10:35:a7:
                    05:a3:e8:aa:6d:9a:4c:b7:8e:24:83:fe:bd:de:ba:
                    1e:fe:e5:d6:2e:81:43:b5:00:85:f2:df:c6:b4:d3:
                    e1:47:34:7e:1e:6d:f9:ef:ed:ed:c7:75:4e:2f:7d:
                    18:ad:79:9a:15:c3:a6:3e:7b:94:d6:57:24:51:c7:
                    72:0f:be:53:36:e8:00:84:c8:61:5f:b6:85:77:83:
                    63:9e:a3:a1:61:be:64:8f:11:7e:07:57:4e:ae:91:
                    40:1f:7b:f7:f9:81:d7:9f:46:f3:3a:04:47:cf:32:
                    b7:f6:8c:4e:bc:33:4c:48:3b:22:be:f5:47:5c:dd:
                    53:df:fb:8f:0d:9d:ee:61:66:34:79:5b:9c:36:c4:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:DD:D3:C1:71:FE:36:24:21:89:C5:E5:6E:B2:71:C1:FD:1A:24
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/NuLd08Fx_jYkIYnF5W6yccH9GiQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:d0:79:9f:6c:90:10:02:00:6b:01:e9:09:e0:de:6e:f1:
         ee:4c:5f:79:59:1b:76:d7:80:40:42:72:ed:97:1d:29:a6:26:
         c1:f3:99:24:9d:c6:38:d8:51:9a:27:a4:08:99:68:0b:69:87:
         da:74:86:a8:4e:2a:06:30:19:8f:35:db:72:9b:0a:c1:72:02:
         37:6b:4e:6f:ae:7e:67:0b:2a:71:5b:73:33:5e:52:0f:56:e5:
         27:99:04:0e:d3:39:0a:72:f9:65:bb:3e:41:5b:4f:ec:0a:32:
         ec:b3:9e:b2:5a:50:74:4a:52:33:5c:86:7f:12:81:11:1e:f1:
         79:90:72:76:24:00:23:ca:2b:9f:20:2c:92:65:0b:14:74:dd:
         a1:80:e4:fc:e3:a9:5d:ac:38:e5:40:3b:a1:67:12:84:ae:23:
         9a:9b:f8:c9:d3:5a:84:bc:d5:45:db:2e:ee:62:0f:49:65:9e:
         32:d2:e7:19:99:27:67:99:b7:d2:ed:20:e2:aa:f5:2e:97:2a:
         96:31:a9:1f:13:35:38:6b:ee:85:5a:1d:8a:10:c8:ff:44:92:
         59:e6:d1:28:b0:70:f3:4b:a0:8b:82:7b:9f:a1:d4:03:fc:72:
         0f:69:bd:14:90:57:62:7d:a3:aa:40:3b:8a:1c:8c:66:15:3d:
         4c:58:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org