Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ThFs54Q6IczMEnsDLFNXNTp_IVs.roa
File:                     ThFs54Q6IczMEnsDLFNXNTp_IVs.roa (raw, json)
Hash identifier:          +XDYcCZ9avZOYLG4Y+w5cd6xMxQ5FyhL5PW+Y9WjfII=
Subject key identifier:   4E:11:6C:E7:84:3A:21:CC:CC:12:7B:03:2C:53:57:35:3A:7F:21:5B
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09AA
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ThFs54Q6IczMEnsDLFNXNTp_IVs.roa
Signing time:             Wed 29 Sep 2021 02:56:02 +0000
ROA not before:           Wed 29 Sep 2021 02:56:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        123.99.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4E116CE7843A21CCCC127B032C5357353A7F215B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:0a:91:16:a4:42:d0:f8:78:18:9e:20:5d:
                    c0:0b:5c:86:56:6e:2d:a6:85:4b:09:b5:1a:4a:a0:
                    49:a2:3d:0d:37:43:57:3b:ea:70:98:1a:4d:fb:ed:
                    e8:20:2f:a0:dc:c2:6a:d7:75:ee:a6:06:52:a3:d7:
                    43:47:60:a8:e3:6b:93:32:06:6b:24:89:e0:67:df:
                    ae:f2:d1:e0:4c:d4:70:c6:a5:e5:5c:90:8e:76:4f:
                    b2:e5:70:64:88:0b:c1:6b:37:e6:1d:e0:f5:3c:8f:
                    f5:34:67:5f:8a:e3:9a:5f:dd:c6:ad:57:26:3e:56:
                    2f:fa:8c:e8:76:1b:8b:5e:25:5d:34:d8:51:e1:e6:
                    56:53:d8:e9:b9:d3:7f:84:0c:b2:75:16:c3:c4:75:
                    fb:c2:e4:86:5a:6d:3b:c7:d1:91:19:52:de:81:6e:
                    85:bb:34:0b:ff:9c:eb:ae:f8:e9:fd:05:8e:a3:0a:
                    36:2b:85:fe:85:59:1b:06:df:b8:fc:7d:44:c1:62:
                    88:95:00:ca:dd:06:62:45:64:91:38:50:cb:a4:af:
                    33:05:5a:46:da:20:5c:ab:56:19:cd:6c:99:3b:2a:
                    40:92:3a:cb:f7:61:5f:f3:37:70:da:56:b2:df:1a:
                    70:de:97:25:ef:ad:ca:b1:98:c0:f8:d5:34:63:3e:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:11:6C:E7:84:3A:21:CC:CC:12:7B:03:2C:53:57:35:3A:7F:21:5B
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ThFs54Q6IczMEnsDLFNXNTp_IVs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:c0:5a:37:b8:41:45:4e:a6:58:c8:28:5a:7c:fa:b3:b1:
         1e:34:f5:71:19:f1:21:3e:ed:87:cc:eb:7c:52:66:4e:9a:23:
         7f:b2:f4:7e:6c:19:7f:d0:a0:78:6c:25:9e:b2:46:b1:62:3c:
         6a:00:9f:aa:f7:f3:6b:16:23:93:02:58:2f:b4:15:18:58:97:
         f1:53:43:8c:0c:17:c7:c6:00:a5:ce:cc:be:e2:ba:4c:74:55:
         a5:3c:af:8c:bf:80:ce:3e:54:4e:4e:f4:30:20:a4:27:19:df:
         f2:1c:88:27:49:56:e5:47:08:f3:dc:8e:77:17:ac:e6:10:60:
         ec:2b:7d:ee:be:74:94:05:de:36:b4:da:65:27:0f:c2:21:ad:
         ca:0d:57:df:0f:f1:7c:f2:26:d5:8d:d4:87:2a:ed:96:09:00:
         be:22:af:6d:3e:7e:fb:b9:90:b8:f5:ad:64:19:67:96:0b:36:
         63:90:a1:c8:01:e1:16:d8:b1:69:69:c5:78:18:de:e0:7a:4d:
         10:98:35:1e:7f:9f:71:ba:8c:c6:cf:9a:95:d1:52:0c:a3:d5:
         07:e5:47:fa:1e:db:85:1a:cc:05:19:fe:88:7c:38:2d:fa:ab:
         cd:6f:6c:59:ff:e0:a3:30:29:92:56:0f:6a:91:05:9f:73:57:
         d0:f5:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org