Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ecxeOVMNnD5QorgWF1svG0FBgbU.roa
File:                     ecxeOVMNnD5QorgWF1svG0FBgbU.roa (raw, json)
Hash identifier:          7INGV8OF7kQTOkdUj4Cql0lHWPnC+ikJhBghkEw+Jqo=
Subject key identifier:   79:CC:5E:39:53:0D:9C:3E:50:A2:B8:16:17:5B:2F:1B:41:41:81:B5
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ecxeOVMNnD5QorgWF1svG0FBgbU.roa
Signing time:             Thu 15 Sep 2022 02:36:59 +0000
ROA not before:           Thu 15 Sep 2022 02:36:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        123.99.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 15 02:36:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=79CC5E39530D9C3E50A2B816175B2F1B414181B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:48:0c:96:cc:66:32:00:6f:c6:92:fe:90:
                    7e:82:ca:7e:58:0a:f7:08:1c:24:7c:53:ea:ef:63:
                    c6:4e:6c:30:e5:6e:0e:3c:1f:a4:4b:fa:e8:6b:ab:
                    26:22:c2:9a:f1:ca:89:cd:3f:c7:c4:2b:77:a1:aa:
                    53:e8:5c:fa:1f:04:c8:97:c3:cf:1f:4e:90:ef:c9:
                    e0:e2:14:0e:5c:c6:dd:be:57:76:19:6d:4c:81:88:
                    d8:03:b2:16:25:71:a1:45:41:18:1a:9c:a2:3a:a4:
                    9f:b4:11:f4:06:e0:ff:6f:f8:6b:af:06:5b:cb:d3:
                    69:7c:87:72:5a:81:9f:1c:0e:8a:b5:54:c5:b0:f3:
                    00:fc:78:0e:28:de:0d:31:e2:44:d6:d1:44:a0:49:
                    cf:cf:81:f4:35:79:9e:22:6a:78:da:a3:1e:ae:70:
                    06:49:9f:7d:19:29:3f:55:88:86:9a:3a:0c:d7:10:
                    68:97:f9:ed:fb:35:ba:1c:45:48:ab:7a:23:c7:90:
                    61:26:fb:56:e6:99:69:8b:42:ac:cf:01:61:ff:80:
                    77:a8:22:91:a8:5a:ef:e0:3b:6b:9e:76:d1:20:62:
                    34:19:6c:a1:ee:3e:ed:12:be:9c:88:82:45:de:67:
                    89:21:66:61:6f:ea:f3:ea:81:e5:ca:66:35:39:06:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CC:5E:39:53:0D:9C:3E:50:A2:B8:16:17:5B:2F:1B:41:41:81:B5
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ecxeOVMNnD5QorgWF1svG0FBgbU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:33:5c:88:cd:14:da:6d:9d:8c:49:77:7f:c9:b8:32:87:
         63:71:8d:eb:58:50:b4:4f:02:49:32:e9:bf:62:01:e6:69:e3:
         be:cb:ea:53:d2:29:f2:b1:29:4c:90:47:47:42:26:86:e3:33:
         af:3d:0c:3a:be:b0:3a:4b:21:f9:4d:8c:2c:62:ad:a3:61:7f:
         b3:22:9e:27:e5:14:3d:e9:b3:86:f8:f8:b7:6a:72:41:34:e4:
         4b:13:75:8e:38:48:f4:79:29:7c:65:96:8f:7e:d0:e6:25:8a:
         30:6c:72:89:cf:35:0c:36:dd:98:6d:55:ce:2f:e8:d0:ab:25:
         bc:2f:48:9f:7e:cb:ea:c1:1e:79:f6:7a:de:2f:bc:5b:58:10:
         af:58:3b:59:9f:77:5a:09:7b:33:5f:fa:0a:c3:68:cf:da:9f:
         ad:e6:49:82:15:0e:f3:c8:8f:b1:f2:51:fc:9a:26:95:ad:82:
         d3:0a:11:61:d4:af:68:58:f9:3f:73:70:b5:03:0e:79:ed:03:
         e3:b4:d7:eb:93:4e:4f:e6:83:c8:d7:50:b0:78:e6:82:1f:cc:
         60:12:d7:ef:5a:38:76:9b:ee:1f:92:df:ac:75:f2:8f:2f:43:
         f4:7c:53:81:2a:69:dc:b8:27:24:b5:37:38:e8:f6:af:a7:2a:
         97:b1:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:17 2025 by rpki-client