Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/YweDvkqS_Iucq1CQxLB85XL_PUQ.roa
File:                     YweDvkqS_Iucq1CQxLB85XL_PUQ.roa (raw, json)
Hash identifier:          6TRYiNaXs1bcbZ1yHNZfk+SWY+oN89UjK6mdQ6wfLCw=
Subject key identifier:   63:07:83:BE:4A:92:FC:8B:9C:AB:50:90:C4:B0:7C:E5:72:FF:3D:44
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0789
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/YweDvkqS_Iucq1CQxLB85XL_PUQ.roa
Signing time:             Tue 29 Sep 2020 10:06:25 +0000
ROA not before:           Tue 29 Sep 2020 10:06:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        117.19.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=630783BE4A92FC8B9CAB5090C4B07CE572FF3D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:bb:19:f3:cb:a0:30:9e:4e:66:14:46:5c:
                    e7:86:bd:61:a1:13:43:5b:5d:83:85:95:f8:84:3e:
                    90:c5:4b:a4:e0:59:2f:6d:7a:20:4b:18:2f:4a:bd:
                    65:fd:e1:a6:cf:fe:27:d6:64:a3:8a:35:7a:fd:3f:
                    9e:5c:ea:43:1b:00:1a:af:46:cf:70:94:1a:48:01:
                    10:33:32:d7:82:24:e3:a3:9f:d1:9a:f2:b8:ec:66:
                    ec:f1:52:34:11:1b:35:92:78:9a:87:98:33:18:8c:
                    47:55:fc:6f:3d:96:f3:36:5e:d7:d7:37:ca:65:38:
                    e4:fc:a3:0f:19:ad:61:7e:24:1a:e1:2c:16:57:28:
                    13:ab:56:24:6a:ec:7f:95:af:46:2f:75:66:da:e0:
                    ec:72:63:95:ce:ef:9d:8b:ac:a2:4e:9a:02:28:32:
                    e1:98:69:a9:dc:ca:a5:0b:6f:9c:e4:bd:57:3b:54:
                    b4:56:59:2f:56:ed:a4:6f:c5:8c:3b:cf:0f:a6:44:
                    55:47:57:ec:da:9e:0e:a0:17:aa:91:0f:b6:ac:da:
                    51:99:f5:29:35:16:16:32:53:67:48:d8:4f:94:7c:
                    cb:68:8a:d0:fe:44:21:38:49:02:e0:f9:cf:8c:8d:
                    d4:f6:ca:0b:29:18:70:3d:05:b0:78:f4:2d:7d:c1:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:83:BE:4A:92:FC:8B:9C:AB:50:90:C4:B0:7C:E5:72:FF:3D:44
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/YweDvkqS_Iucq1CQxLB85XL_PUQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.19.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:8f:e6:0d:8b:05:97:42:37:07:32:5a:ed:6f:d9:eb:66:e1:
         e8:82:c5:ab:4f:ce:f6:0b:cd:57:1d:e0:a9:5a:10:0e:10:ca:
         c3:8e:ae:4c:70:e9:75:92:5a:f4:b8:b5:97:4c:b2:f4:29:35:
         b8:e5:ba:91:5a:8b:58:33:9f:b6:64:cf:23:23:06:40:44:6f:
         df:3a:22:31:b8:ed:d6:b0:e0:b3:06:85:c9:61:a4:70:3e:51:
         2b:e1:29:34:fb:b6:a9:af:20:07:32:c4:68:cf:b5:93:52:38:
         33:19:31:c1:5d:75:e4:f9:c8:63:23:66:d6:7f:83:a6:41:8a:
         35:27:b4:70:70:37:ad:46:7f:50:72:7a:4b:6a:43:9f:a9:97:
         7b:2b:43:12:4e:3b:81:a3:09:11:79:3d:46:94:19:09:87:ef:
         ae:10:8b:35:e9:e5:1b:f8:56:be:44:7e:19:25:72:06:d8:0e:
         dc:47:c6:ae:94:b9:b4:ce:fd:3a:98:0d:12:cc:41:73:f6:d0:
         cd:82:7e:98:61:ac:bc:3f:57:2e:f1:4b:ac:c8:ef:30:a0:e1:
         91:32:ec:37:ea:05:86:58:43:53:44:15:b7:53:e9:e4:48:12:
         0d:7a:bd:15:17:a9:a7:4e:75:40:8c:41:7e:98:38:74:4b:04:
         26:68:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:54 2025 by rpki-client