Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Pg7_gsR7UNWSlTkBYFBv4AjEqog.roa
File:                     Pg7_gsR7UNWSlTkBYFBv4AjEqog.roa (raw, json)
Hash identifier:          XQZ1yGESHTio5uuxD/+Zo0Ko9520W35h9if8oJX9Y10=
Subject key identifier:   3E:0E:FF:82:C4:7B:50:D5:92:95:39:01:60:50:6F:E0:08:C4:AA:88
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Pg7_gsR7UNWSlTkBYFBv4AjEqog.roa
Signing time:             Thu 15 Sep 2022 02:36:58 +0000
ROA not before:           Thu 15 Sep 2022 02:36:58 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        123.99.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 15 02:36:58 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3E0EFF82C47B50D59295390160506FE008C4AA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:de:1c:67:a6:65:65:19:67:2b:2d:e5:a0:
                    3d:25:c2:cb:e7:5b:9a:de:92:52:63:83:51:36:03:
                    de:40:41:54:0c:45:70:5d:be:b9:b5:3e:47:f5:56:
                    70:59:62:b8:47:da:f5:5a:1a:05:a8:da:14:d4:3e:
                    ad:32:c9:52:08:94:c7:4e:f1:05:58:3f:e6:cd:d9:
                    45:51:44:08:6a:38:97:fc:c5:21:ae:96:91:e5:0e:
                    61:0b:48:ea:3b:ec:fa:ca:99:a4:37:f1:92:8c:f6:
                    d2:3d:3c:c7:61:2b:a6:f2:d1:4f:5f:d6:e3:fd:14:
                    14:ac:b3:17:05:8f:ad:65:0f:fa:45:28:98:8a:10:
                    2d:e2:8d:79:bb:ad:bd:41:41:7c:a2:92:5b:c2:30:
                    53:31:db:0f:e3:c1:66:72:76:0a:51:17:56:0e:45:
                    71:c1:39:c2:3e:8e:af:60:f7:66:04:e0:a4:f4:72:
                    9f:a8:da:5f:4e:e7:3c:dc:cc:33:b7:31:a1:7b:8f:
                    6c:d8:30:2d:8b:a6:c7:55:73:4b:5e:d0:c5:3d:b0:
                    65:08:ba:99:82:44:74:22:5b:26:ec:39:80:2a:96:
                    96:79:77:55:90:ed:8e:03:a5:8f:a0:87:07:b4:ea:
                    98:a4:bc:e6:3d:95:68:f3:aa:40:6d:a4:fb:e9:91:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0E:FF:82:C4:7B:50:D5:92:95:39:01:60:50:6F:E0:08:C4:AA:88
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Pg7_gsR7UNWSlTkBYFBv4AjEqog.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:16:3e:1b:76:e4:2d:bb:07:2a:b7:9b:ef:68:e4:c9:b7:
         73:a8:b9:ea:8a:b6:20:4f:f3:44:41:a9:88:a6:87:61:70:45:
         95:88:7e:cf:eb:d3:24:44:ba:30:a1:c1:47:02:da:b6:76:58:
         72:88:53:04:87:19:35:43:04:28:de:f3:64:e2:ca:84:e8:e8:
         88:ef:2e:c5:8d:b9:22:6f:ba:1c:46:c5:ed:df:ef:4d:77:62:
         f0:b4:3f:f3:46:b6:2a:5f:6d:ed:ad:bc:22:42:eb:2f:c2:4b:
         f4:9c:ca:84:6e:80:22:17:db:cf:39:41:99:cd:cb:1d:fe:96:
         5e:6a:f1:79:19:da:43:6a:b8:42:8d:94:b7:2d:0a:45:b6:3b:
         05:a4:47:9d:7b:04:91:9b:79:49:43:87:e2:a7:3f:5a:46:dd:
         b0:2d:d8:0a:50:54:b2:99:ec:aa:d3:9e:86:78:9f:6a:00:52:
         ab:ea:66:fd:f4:bc:ca:3c:26:0a:09:2c:33:31:68:3c:21:7f:
         df:86:a4:01:bb:9d:62:4d:ea:00:d5:b2:3b:6d:a0:56:ce:64:
         50:e3:ce:45:61:ff:37:5f:2e:35:7e:a7:3e:d2:44:36:e7:b8:
         e4:e6:e0:88:62:78:de:ae:96:73:d8:f5:1a:5d:85:27:ac:84:
         02:90:2d:df
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMjA5MTUw
MjM2NThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNFMEVGRjgyQzQ3QjUw
RDU5Mjk1MzkwMTYwNTA2RkUwMDhDNEFBODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjPN4cZ6ZlZRlnKy3loD0lwsvnW5reklJjg1E2A95AQVQMRXBd
vrm1Pkf1VnBZYrhH2vVaGgWo2hTUPq0yyVIIlMdO8QVYP+bN2UVRRAhqOJf8xSGu
lpHlDmELSOo77PrKmaQ38ZKM9tI9PMdhK6by0U9f1uP9FBSssxcFj61lD/pFKJiK
EC3ijXm7rb1BQXyiklvCMFMx2w/jwWZydgpRF1YORXHBOcI+jq9g92YE4KT0cp+o
2l9O5zzczDO3MaF7j2zYMC2LpsdVc0te0MU9sGUIupmCRHQiWybsOYAqlpZ5d1WQ
7Y4DpY+ghwe06pikvOY9lWjzqkBtpPvpkaPZAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUPg7/gsR7UNWSlTkBYFBv4AjEqogwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL1BnN19n
c1I3VU5XU2xUa0JZRkJ2NEFqRXFvZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAV7YyAwDQYJKoZIhvcNAQELBQADggEBAIZ6Fj4bduQtuwcqt5vv
aOTJt3OoueqKtiBP80RBqYimh2FwRZWIfs/r0yREujChwUcC2rZ2WHKIUwSHGTVD
BCje82TiyoTo6IjvLsWNuSJvuhxGxe3f7013YvC0P/NGtipfbe2tvCJC6y/CS/Sc
yoRugCIX2885QZnNyx3+ll5q8XkZ2kNquEKNlLctCkW2OwWkR517BJGbeUlDh+Kn
P1pG3bAt2ApQVLKZ7KrTnoZ4n2oAUqvqZv30vMo8JgoJLDMxaDwhf9+GpAG7nWJN
6gDVsjttoFbOZFDjzkVh/zdfLjV+pz7SRDbnuOTm4IhieN6ulnPY9RpdhSeshAKQ
Ld8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org