Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_QZph1eeOORzH2u46Ky13PWsvgY.roa
File:                     _QZph1eeOORzH2u46Ky13PWsvgY.roa (raw, json)
Hash identifier:          zGuzyHgQzALs8+JRByyPUcYq+cxjYGNR1bV+qHKsU6A=
Subject key identifier:   FD:06:69:87:57:9E:38:E4:73:1F:6B:B8:E8:AC:B5:DC:F5:AC:BE:06
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0791
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_QZph1eeOORzH2u46Ky13PWsvgY.roa
Signing time:             Tue 29 Sep 2020 10:06:27 +0000
ROA not before:           Tue 29 Sep 2020 10:06:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        101.8.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FD066987579E38E4731F6BB8E8ACB5DCF5ACBE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:09:d5:96:dc:99:92:97:9f:52:91:9e:31:
                    ad:a4:91:e7:c8:68:6e:42:29:8e:fb:8f:e0:a1:a6:
                    a6:05:da:dc:99:a0:9c:17:d4:88:ad:f1:0c:ff:4c:
                    8c:0d:36:c5:34:95:bb:88:51:80:c6:96:59:01:9c:
                    b2:25:4f:4d:c8:52:52:d7:2a:1f:34:b2:a0:ee:da:
                    5c:0a:07:c3:5e:6a:2c:bb:ff:58:dc:b7:9e:50:80:
                    38:9b:5a:fa:fb:a4:88:0f:d2:7c:d7:2f:16:2b:91:
                    47:d0:b9:6c:4f:d3:0d:9e:c9:41:b3:c8:ea:76:8a:
                    2c:2b:b0:1d:87:45:4f:88:26:1f:c4:69:83:1e:c9:
                    ef:ec:78:95:2b:a1:2c:33:a1:03:d4:f4:2f:72:fd:
                    d7:1e:a9:45:eb:1b:d5:c4:3c:66:bd:e6:45:fe:08:
                    a7:a2:cd:56:89:a6:64:3b:9d:d6:ed:fb:d3:54:6b:
                    e9:bc:66:d8:fc:14:31:7e:7d:95:2f:89:d2:c6:17:
                    dc:b9:59:db:34:3e:e6:58:c0:23:fe:43:b2:f3:0f:
                    54:b3:26:f3:14:91:fb:a8:f2:59:d9:e1:03:4d:3d:
                    28:99:89:6e:82:05:c4:df:0c:57:08:65:1a:3b:5a:
                    d1:48:c1:44:ac:e1:38:4b:c8:c3:cf:72:fc:d4:51:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:06:69:87:57:9E:38:E4:73:1F:6B:B8:E8:AC:B5:DC:F5:AC:BE:06
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/_QZph1eeOORzH2u46Ky13PWsvgY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.8.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         36:a7:29:69:b0:b1:c2:1e:03:61:29:b2:c1:fb:a3:6e:98:51:
         42:d4:aa:48:fd:f6:50:cc:48:f8:d1:f8:f0:aa:35:01:7a:99:
         56:ed:dd:cc:f7:19:f7:73:c1:1f:45:30:26:ee:17:61:5b:23:
         9c:04:c9:e6:19:7f:6a:bf:61:50:a1:37:16:62:fa:10:65:15:
         e4:d7:79:3e:06:c5:6b:7f:0b:3f:32:e3:66:43:e8:f8:07:f8:
         84:35:5c:13:2b:19:da:7d:f0:3c:80:e7:a4:2f:13:b6:c5:e7:
         a4:e5:0a:b7:58:c7:2e:79:b8:11:e2:e0:89:07:30:a0:06:76:
         fb:05:75:99:6f:bf:dd:d9:9e:e3:ef:47:4d:90:f9:48:2e:f9:
         8c:0c:70:ff:d9:e7:f5:95:07:10:84:9c:4c:6a:ad:6e:13:b0:
         42:bd:af:8b:e5:68:08:ca:98:04:5b:6a:f3:af:19:b3:f0:9a:
         d7:b9:2a:e3:14:ff:51:aa:0b:8c:3e:6a:1b:04:c1:7b:79:b3:
         e9:ee:30:3f:68:dd:13:b5:5b:b2:86:1d:f9:c0:7a:68:73:00:
         ce:83:af:92:46:06:29:0d:d9:00:05:f3:5f:94:f0:e9:76:16:
         fa:02:d0:56:eb:26:94:02:a5:03:de:25:4d:45:cc:e3:c2:d0:
         dc:2b:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org