Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fQhSrn-e6jd-PpqUyEBSi_4ereI.roa
File:                     fQhSrn-e6jd-PpqUyEBSi_4ereI.roa (raw, json)
Hash identifier:          md/5swL3pePOBlV+1HI+//PqYdUYQ4V1cWop/prcTus=
Subject key identifier:   7D:08:52:AE:7F:9E:EA:37:7E:3E:9A:94:C8:40:52:8B:FE:1E:AD:E2
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       078D
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fQhSrn-e6jd-PpqUyEBSi_4ereI.roa
Signing time:             Tue 29 Sep 2020 10:06:25 +0000
ROA not before:           Tue 29 Sep 2020 10:06:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        103.2.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7D0852AE7F9EEA377E3E9A94C840528BFE1EADE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:72:ad:28:41:3c:ab:b7:37:d8:97:10:fe:
                    f5:c3:e0:3d:96:41:cb:26:f7:a0:78:90:03:94:80:
                    73:62:59:d2:a9:fd:f1:97:1f:68:26:3f:2c:4a:f8:
                    f8:30:b6:47:d5:ca:06:9a:6b:76:8a:2a:5d:77:68:
                    fe:a5:25:81:01:0f:67:38:dd:6f:a1:db:0f:21:42:
                    fe:95:ae:52:43:e8:d2:ff:b8:cf:7a:5a:d1:0a:47:
                    7a:a6:01:b8:46:00:d3:70:1d:d9:7c:82:b6:80:8e:
                    26:6a:57:8e:7d:89:13:ed:e8:25:a7:c9:fc:24:cd:
                    26:e3:bf:7a:fa:78:48:25:4d:d8:d0:e6:1b:18:ba:
                    0d:c3:46:5d:5c:ef:23:a2:fc:41:42:76:e9:51:ba:
                    3e:73:b6:0c:ef:d5:d2:35:1a:8e:dd:5e:6f:28:a7:
                    ab:ef:58:80:99:c7:50:06:ca:b2:cb:60:2f:e4:ae:
                    b4:04:4c:85:de:89:b1:38:7b:6b:a5:3e:84:d8:fc:
                    ad:c6:b0:07:ac:78:b1:ee:35:80:d2:b6:41:a5:27:
                    bc:8d:56:25:7e:6c:5d:ca:e1:54:15:81:13:dd:77:
                    c5:60:14:c8:7a:9c:8b:f5:eb:ad:7c:1d:cc:fd:1d:
                    49:26:84:aa:10:0c:e0:99:15:13:ae:b3:9f:92:8f:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:08:52:AE:7F:9E:EA:37:7E:3E:9A:94:C8:40:52:8B:FE:1E:AD:E2
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fQhSrn-e6jd-PpqUyEBSi_4ereI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:23:f0:80:1c:14:79:ee:b5:c0:77:20:25:fd:2b:e7:76:f7:
         0b:0a:09:7f:e3:db:f3:34:b7:84:3f:d6:e8:68:59:b1:3e:0f:
         c8:a7:b3:7b:51:88:0d:b9:35:5b:45:ce:a6:51:4e:d5:6c:e7:
         78:a1:40:1c:c0:ef:67:2f:a3:cd:fe:1e:c3:7d:9f:96:dd:c6:
         a7:75:24:9c:c8:14:33:69:da:c6:e7:46:c3:38:a6:a1:27:63:
         16:c6:c5:af:8a:4a:90:33:42:ec:c6:30:bf:78:05:ca:8a:d9:
         41:0a:4f:43:5f:be:0c:8c:15:bf:df:bd:50:26:4b:1e:d9:34:
         5f:ed:52:98:c8:04:9c:e0:5d:9a:15:70:ff:71:14:3e:e4:7d:
         0d:3d:5a:9e:a9:45:81:b1:b6:ea:6a:16:0e:2b:bb:ff:60:ce:
         1f:64:69:10:42:50:ec:71:4d:9e:7a:ed:c1:7a:ab:b1:28:70:
         98:7b:3e:84:cb:50:fb:b7:e1:a9:b8:b1:1e:33:05:27:95:49:
         34:b0:1d:9b:2a:09:b0:99:3b:3d:0e:5e:5a:99:b0:b6:39:c5:
         8c:e4:58:e1:1c:1d:11:33:52:e2:74:f5:ff:cd:04:a4:27:95:
         6d:e4:10:59:1d:03:88:42:fb:1b:1d:74:62:8c:02:65:d7:62:
         a1:31:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org