Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/eotcs9fzYaUKuWo92CTDAkPT_Cc.roa
File:                     eotcs9fzYaUKuWo92CTDAkPT_Cc.roa (raw, json)
Hash identifier:          eFM6dZrsEn7Fh1deUCvm6JaqwmBQgrR7WM2KIN43/Ck=
Subject key identifier:   7A:8B:5C:B3:D7:F3:61:A5:0A:B9:6A:3D:D8:24:C3:02:43:D3:FC:27
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09AC
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/eotcs9fzYaUKuWo92CTDAkPT_Cc.roa
Signing time:             Wed 29 Sep 2021 02:56:03 +0000
ROA not before:           Wed 29 Sep 2021 02:56:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        115.80.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476 (0x9ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7A8B5CB3D7F361A50AB96A3DD824C30243D3FC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:b4:fd:0d:1d:8e:f8:5d:8b:bd:18:77:79:
                    7b:1c:46:89:f1:57:1b:85:e0:c6:f5:dc:a3:93:25:
                    51:44:25:47:03:c8:99:cb:c5:99:67:fc:3f:bd:f6:
                    74:4c:b0:c4:62:35:6c:5c:e8:42:7d:ed:4f:95:e9:
                    2f:c9:d4:09:c2:06:8e:c4:99:6d:89:a7:6f:94:90:
                    26:0e:2a:55:a5:fe:8f:8c:86:a4:33:ec:95:e8:7a:
                    e7:eb:ba:1b:ea:cb:c2:fc:7b:81:18:fb:86:a3:8b:
                    24:01:43:44:e9:1f:eb:a0:7c:de:07:1f:9e:4a:84:
                    82:3f:ae:00:3d:eb:e1:1a:31:44:9c:32:74:f8:e7:
                    6c:1c:d3:9a:cb:0b:d5:e6:6a:27:64:1c:1d:a5:1e:
                    3b:52:03:bd:5b:6b:c7:68:25:2e:d6:ae:8d:cf:17:
                    23:16:51:07:ff:d9:e8:73:d1:b1:b9:c8:54:39:de:
                    1c:3d:36:e8:5e:55:e0:8c:bc:c9:56:d1:31:9f:ad:
                    94:7a:cc:29:95:82:29:73:2b:14:b9:1a:a0:9d:60:
                    b1:fc:7e:4b:c3:99:ab:fc:77:77:ad:be:d6:16:90:
                    b4:8c:1a:0a:cc:d9:58:3f:db:71:39:68:a7:96:d1:
                    5c:33:ba:b6:2a:e1:53:8c:cd:8c:24:5b:c3:ee:04:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:5C:B3:D7:F3:61:A5:0A:B9:6A:3D:D8:24:C3:02:43:D3:FC:27
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/eotcs9fzYaUKuWo92CTDAkPT_Cc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c0:60:41:d5:18:72:d6:20:3a:c1:0e:b0:e2:e2:f7:4b:d3:58:
         0b:a4:64:d6:5d:99:5b:c1:05:ea:3a:32:93:64:be:85:9e:d1:
         9e:2a:2b:10:cf:e2:33:c1:84:e1:cd:d9:16:53:e4:c6:8e:fd:
         f6:8e:dc:c2:a8:23:5c:66:5b:cf:8d:de:57:c9:e2:65:9c:c0:
         b1:2e:10:31:33:1d:3a:c1:d9:f9:6b:48:5f:24:dc:a6:b8:6f:
         6f:1d:2b:d5:77:32:0b:2f:9e:99:c0:93:29:f3:36:3f:6f:b7:
         ba:36:8d:01:70:d4:9b:17:93:a4:8b:1f:ab:b6:71:00:06:37:
         1b:34:97:d5:85:ee:1f:e2:c6:52:27:6a:19:2e:4f:62:ba:2f:
         dc:3c:87:b4:09:1d:b0:1a:7f:cd:83:d0:04:46:61:e3:51:e2:
         20:20:95:d0:a9:10:08:9c:9b:ea:54:47:33:57:9a:ed:7c:76:
         cb:5a:c2:c9:8e:64:41:b6:bf:90:b2:ef:bc:50:d6:6e:ce:bc:
         8d:e9:b6:76:7b:3a:14:78:78:7b:58:5e:02:79:e6:da:a5:11:
         df:15:94:62:f7:e2:10:2c:f6:d3:aa:1f:3b:f6:db:ff:79:df:
         a1:fc:f1:5c:a3:24:e0:37:50:aa:37:04:63:88:6d:57:a8:5b:
         63:5c:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org