Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/QQjdXUEdrIXV_xGT-1EXwMNniPk.roa
File:                     QQjdXUEdrIXV_xGT-1EXwMNniPk.roa (raw, json)
Hash identifier:          mQXF2Q/mJ/0UUIfsvb2W8Uxc8SFQQXWCZzbthGyh+J8=
Subject key identifier:   41:08:DD:5D:41:1D:AC:85:D5:FF:11:93:FB:51:17:C0:C3:67:88:F9
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/QQjdXUEdrIXV_xGT-1EXwMNniPk.roa
Signing time:             Thu 15 Sep 2022 02:37:00 +0000
ROA not before:           Thu 15 Sep 2022 02:37:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        180.204.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 15 02:37:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4108DD5D411DAC85D5FF1193FB5117C0C36788F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:30:be:17:8c:7a:95:62:d6:7f:16:d9:cd:
                    6f:bb:ce:51:81:23:4b:b3:75:b1:5b:9f:55:14:da:
                    4a:0b:ca:78:13:bd:a6:90:e1:32:b1:b1:d5:c1:15:
                    2c:12:ec:89:92:1b:3e:0a:8c:53:b0:6c:f2:13:80:
                    13:eb:9c:af:41:9b:ea:fd:e6:38:b6:34:cc:4d:eb:
                    a2:0f:4a:66:bc:3a:ce:e8:e8:64:14:95:31:7d:e9:
                    13:bb:8c:ff:e2:20:b0:44:9c:b9:22:5c:56:51:08:
                    ea:fc:47:0f:04:f1:3f:71:32:61:1a:70:40:c5:41:
                    33:12:e7:b4:a6:0b:cc:26:9e:69:fb:7e:4c:f2:f5:
                    53:e4:33:8c:5d:dc:55:11:99:d0:05:d6:6c:5c:13:
                    ef:75:60:14:40:54:ae:ed:f2:c7:8f:6e:93:14:3d:
                    0d:aa:85:eb:0b:47:c1:9a:61:85:9f:92:2d:bf:d2:
                    c1:0c:a5:e4:30:21:29:ba:c6:d8:ca:1f:c4:4e:b5:
                    24:36:44:d9:b3:b2:55:11:80:dd:70:c5:8a:0e:e6:
                    48:c2:e3:07:8d:25:0a:10:ee:48:89:bd:ac:3a:41:
                    21:15:77:35:6b:7b:40:b7:0c:7f:3e:ef:72:ba:0a:
                    5a:58:5a:24:e4:46:a5:69:c0:e0:cc:b0:24:a9:ee:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:08:DD:5D:41:1D:AC:85:D5:FF:11:93:FB:51:17:C0:C3:67:88:F9
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/QQjdXUEdrIXV_xGT-1EXwMNniPk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         63:74:15:38:33:ca:68:2d:72:19:f9:0e:ad:8c:6c:9e:eb:cf:
         7f:21:ee:7b:fc:47:a9:f6:b6:f8:f0:81:ad:e1:96:46:06:01:
         d3:48:d4:24:0f:b9:18:60:27:9f:55:91:8b:d4:7c:93:7f:93:
         ae:d8:bb:89:2f:51:2f:c8:07:9c:e3:e1:bc:2f:f8:28:9c:fe:
         56:61:5d:5f:88:57:59:6c:e5:c9:08:98:5b:4b:de:61:75:d4:
         86:3c:b6:b8:18:ec:04:1c:6f:91:c3:47:46:d7:2d:64:68:8f:
         f1:45:18:3e:37:17:41:47:70:53:1e:af:a6:3e:2e:7f:e9:53:
         87:ac:b0:92:fe:bc:e4:7f:cb:98:b7:63:da:ff:ca:dc:2c:12:
         95:05:fe:a6:74:29:cd:cf:31:45:63:d4:45:5a:b1:75:6e:9f:
         9b:b8:1b:5c:a1:f7:08:c9:12:50:c4:44:86:aa:ea:f3:54:46:
         c9:3b:2e:a2:42:6a:61:ae:22:02:b1:fb:35:0c:01:5d:e8:f9:
         08:7d:ff:42:cd:13:70:32:8e:3e:10:b5:0d:a8:1a:bf:c0:63:
         01:08:e9:9d:e3:83:12:7f:84:37:ce:5b:6a:58:92:e3:05:1d:
         0c:d4:85:87:a1:93:df:a1:0f:a4:2e:e6:a9:ab:c1:42:47:fa:
         41:50:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:53 2025 by rpki-client