Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fleBuvc9Ry8PoBxObUsKHHdNugA.roa
File:                     fleBuvc9Ry8PoBxObUsKHHdNugA.roa (raw, json)
Hash identifier:          +5EIX9IunYNr5r3UqX7Rh6Ue+VDeWHrPak3CWDCZCgU=
Subject key identifier:   7E:57:81:BA:F7:3D:47:2F:0F:A0:1C:4E:6D:4B:0A:1C:77:4D:BA:00
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       08F6
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fleBuvc9Ry8PoBxObUsKHHdNugA.roa
Signing time:             Sun 07 Feb 2021 11:37:11 +0000
ROA not before:           Sun 07 Feb 2021 11:37:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        124.29.128.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Feb  7 11:37:11 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7E5781BAF73D472F0FA01C4E6D4B0A1C774DBA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:3b:43:6d:9d:f3:d2:96:af:23:62:b2:25:
                    38:11:15:92:b3:61:89:b3:68:cb:e7:a5:b5:92:04:
                    78:ac:9b:1d:02:c3:47:5a:91:0b:78:6a:0f:db:2b:
                    6d:82:95:a5:65:6e:8f:81:41:64:c0:6a:e0:c7:3c:
                    47:67:d8:ac:62:38:bc:d0:ef:3f:35:bf:1d:bc:20:
                    ab:a0:33:5a:9c:1d:46:d9:0a:ff:d6:da:f7:53:94:
                    45:76:fd:5a:7e:7e:2f:39:36:44:13:9f:1d:e8:1f:
                    10:80:7e:50:ab:92:5f:eb:4b:3e:7d:8e:75:4c:54:
                    29:c9:3f:01:9a:a2:f0:7e:a7:56:20:0e:84:7e:40:
                    cc:80:f3:61:6f:41:6c:7a:9b:bf:fb:7c:98:93:ef:
                    e2:dc:a3:b9:46:e5:53:51:10:b8:bb:95:cc:7c:6a:
                    ce:d2:28:d5:08:5d:be:46:14:74:40:40:cc:63:e7:
                    af:c0:74:3d:dd:11:1b:d4:9f:4d:91:8e:17:d7:47:
                    e1:c3:a2:a1:1c:16:c3:fc:dc:35:d9:fc:a3:b1:75:
                    4b:29:94:03:95:e7:6b:f5:83:ee:fd:e9:b8:c0:20:
                    27:f5:aa:1b:1b:a4:b6:72:6e:33:8c:95:72:1e:fa:
                    6a:76:5f:f8:69:ee:ba:ba:71:77:a7:ce:0b:2b:b6:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:81:BA:F7:3D:47:2F:0F:A0:1C:4E:6D:4B:0A:1C:77:4D:BA:00
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fleBuvc9Ry8PoBxObUsKHHdNugA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:be:fc:65:ea:57:80:23:ee:6d:e5:3c:fa:55:b7:cb:f9:ce:
         f5:57:d8:95:54:a6:c8:33:da:2b:30:11:cd:ca:c9:ad:0b:57:
         ae:0f:a7:3c:44:31:43:25:9f:bb:05:a4:e8:ba:9b:0c:02:89:
         40:12:bf:3f:1c:3b:b6:6b:3a:40:4e:fb:ba:f3:44:d3:4a:ac:
         48:cb:41:29:1d:2f:ec:09:e5:20:ee:fb:28:e8:48:dc:7b:1f:
         82:6c:d3:8c:87:a0:e8:61:48:31:53:95:3c:9a:e6:32:86:42:
         8e:1d:14:b3:4c:df:80:a3:c9:43:96:27:7e:70:c6:b2:55:b9:
         fe:5a:87:42:2b:54:e6:6d:13:1a:4e:5c:4f:21:d4:77:2c:c6:
         d2:af:8e:c3:90:d9:7b:af:04:2f:43:82:07:58:ef:eb:29:a8:
         dc:e6:b9:6d:df:50:cb:c2:ed:bb:8f:59:7d:c0:21:12:41:ec:
         95:6a:49:1c:30:1b:e1:f0:51:db:7e:6f:54:65:35:52:6a:47:
         a6:f7:61:a1:e0:cf:d9:42:a7:fe:8d:b1:8d:d9:29:fb:bf:13:
         e5:59:c6:94:66:e8:d1:fd:3b:ed:73:df:e8:fd:01:b4:e0:51:
         32:30:86:39:37:b3:f2:39:ca:67:2e:dd:d1:2c:1b:f9:41:23:
         c9:bc:3d:81
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMTAyMDcx
MTM3MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdFNTc4MUJBRjczRDQ3
MkYwRkEwMUM0RTZENEIwQTFDNzc0REJBMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5vDtDbZ3z0pavI2KyJTgRFZKzYYmzaMvnpbWSBHismx0Cw0da
kQt4ag/bK22ClaVlbo+BQWTAauDHPEdn2KxiOLzQ7z81vx28IKugM1qcHUbZCv/W
2vdTlEV2/Vp+fi85NkQTnx3oHxCAflCrkl/rSz59jnVMVCnJPwGaovB+p1YgDoR+
QMyA82FvQWx6m7/7fJiT7+Lco7lG5VNRELi7lcx8as7SKNUIXb5GFHRAQMxj56/A
dD3dERvUn02RjhfXR+HDoqEcFsP83DXZ/KOxdUsplAOV52v1g+796bjAICf1qhsb
pLZybjOMlXIe+mp2X/hp7rq6cXenzgsrtjmdAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUfleBuvc9Ry8PoBxObUsKHHdNugAwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL2ZsZUJ1
dmM5Unk4UG9CeE9iVXNLSEhkTnVnQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAV8HYAwDQYJKoZIhvcNAQELBQADggEBACO+/GXqV4Aj7m3lPPpV
t8v5zvVX2JVUpsgz2iswEc3Kya0LV64PpzxEMUMln7sFpOi6mwwCiUASvz8cO7Zr
OkBO+7rzRNNKrEjLQSkdL+wJ5SDu+yjoSNx7H4Js04yHoOhhSDFTlTya5jKGQo4d
FLNM34CjyUOWJ35wxrJVuf5ah0IrVOZtExpOXE8h1HcsxtKvjsOQ2XuvBC9DggdY
7+spqNzmuW3fUMvC7buPWX3AIRJB7JVqSRwwG+HwUdt+b1RlNVJqR6b3YaHgz9lC
p/6NsY3ZKfu/E+VZxpRm6NH9O+1z3+j9AbTgUTIwhjk3s/I5ymcu3dEsG/lBI8m8
PYE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:44 2025 by rpki-client