Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/SkNW6sq1FewaeEB8Pe1OwbCEjLg.roa
File:                     SkNW6sq1FewaeEB8Pe1OwbCEjLg.roa (raw, json)
Hash identifier:          Uex5CeiI0CzGL263CTZPpqgwD6A+OFAGt984Yi4okNc=
Subject key identifier:   4A:43:56:EA:CA:B5:15:EC:1A:78:40:7C:3D:ED:4E:C1:B0:84:8C:B8
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0B99
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/SkNW6sq1FewaeEB8Pe1OwbCEjLg.roa
Signing time:             Fri 01 Sep 2023 09:58:57 +0000
ROA not before:           Fri 01 Sep 2023 09:58:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        2402:7500:faff::/48 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2969 (0xb99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:58:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4A4356EACAB515EC1A78407C3DED4EC1B0848CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:f0:85:44:16:e0:5c:4b:96:8d:48:39:68:
                    68:ab:3d:7f:48:7c:6e:bf:24:33:e8:1c:75:a8:97:
                    00:88:84:29:09:d3:66:d0:6f:82:5c:26:4a:33:e6:
                    d3:12:b5:96:26:89:97:83:c3:18:49:01:3d:1a:66:
                    a6:6c:28:04:52:0a:80:f1:26:2d:88:95:72:c5:da:
                    94:e7:a0:90:2a:6e:25:91:a9:2b:bd:1b:69:29:40:
                    e8:03:b7:f2:07:fd:04:7c:80:36:16:17:3a:50:2b:
                    a3:fa:80:49:f6:83:18:20:df:76:20:34:79:d7:3d:
                    a3:96:f6:3c:4b:8c:fd:29:70:20:7c:fd:8d:5d:eb:
                    d1:e6:95:0b:06:ff:a1:26:0d:ab:5a:b7:66:10:1a:
                    71:24:60:cf:bf:07:f0:7d:b1:4f:36:55:16:af:cd:
                    75:a3:fc:f7:33:b8:ce:8b:f9:f4:f7:90:da:d3:05:
                    16:b4:5b:81:90:0a:a2:e8:b6:ca:6f:07:1e:8f:07:
                    5a:97:5d:a0:b6:de:fe:56:e7:6c:3c:58:00:fb:0e:
                    2c:78:4a:bd:00:dc:7b:f5:97:65:e8:75:a7:ba:7c:
                    bb:46:e2:91:b6:b7:5d:9d:fe:b0:0d:20:1d:69:4c:
                    04:03:7c:71:89:33:43:4f:40:ee:a6:f5:3b:5c:07:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:56:EA:CA:B5:15:EC:1A:78:40:7C:3D:ED:4E:C1:B0:84:8C:B8
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/SkNW6sq1FewaeEB8Pe1OwbCEjLg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:faff::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:6a:c1:7a:59:1a:b9:5a:22:0d:99:cd:28:53:d4:48:8e:a8:
         b1:52:20:28:28:7f:2c:52:17:c3:1c:fa:bf:9f:00:36:42:02:
         1d:1f:db:5d:32:1e:5d:3f:7c:0a:5f:6a:2c:59:4d:19:d5:b2:
         dc:d4:92:89:5c:e4:61:bf:9f:ac:b2:8d:60:47:9e:e0:cb:79:
         63:07:dc:de:64:b9:b8:12:18:c1:0b:e0:de:21:0b:3f:53:e6:
         17:fe:04:7a:24:59:2c:0b:f9:fc:98:0b:4a:cd:c9:b1:9a:df:
         05:1f:4f:21:12:7e:49:69:32:bd:60:fc:9f:cb:22:05:1e:57:
         49:45:53:9b:b2:95:dd:6f:ae:ef:07:ca:14:10:45:67:89:90:
         00:84:38:33:0b:d9:46:8f:59:80:30:51:cf:a2:87:a6:6d:f4:
         d6:d9:e2:c2:c4:87:a4:51:de:0b:c7:dd:9a:60:93:fa:75:8d:
         57:e0:ea:2b:b3:f8:b1:0d:ae:79:4f:66:e6:85:7e:17:2b:88:
         e8:bf:a8:5a:10:2f:80:82:36:d1:88:2c:0e:73:c8:9d:3f:d4:
         55:42:66:2b:d7:d3:57:6a:86:dc:bc:eb:c0:f6:f3:3a:8b:7d:
         fc:c2:9d:2f:97:4d:a3:d3:10:8e:4c:75:8d:9e:46:77:ed:7f:
         5d:d5:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:53 2025 by rpki-client