Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fpe-6Fze_PiawSJzq4m_KSJ4IFM.roa
File:                     fpe-6Fze_PiawSJzq4m_KSJ4IFM.roa (raw, json)
Hash identifier:          PvRTo22SiIrn80bF4YQgM+PLQ/BsQKzSDezwcIYok14=
Subject key identifier:   7E:97:BE:E8:5C:DE:FC:F8:9A:C1:22:73:AB:89:BF:29:22:78:20:53
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       078E
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fpe-6Fze_PiawSJzq4m_KSJ4IFM.roa
Signing time:             Tue 29 Sep 2020 10:06:26 +0000
ROA not before:           Tue 29 Sep 2020 10:06:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        124.29.128.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7E97BEE85CDEFCF89AC12273AB89BF2922782053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:8e:b2:33:16:b1:be:a1:c2:32:55:5d:c2:
                    97:d1:0d:47:27:da:c2:b2:9c:2e:b5:2c:1b:d3:de:
                    ca:85:6f:e3:ce:d9:5a:ce:cf:4a:df:25:12:66:b8:
                    3d:ca:cd:df:47:6c:b4:45:2b:da:82:c2:44:9d:82:
                    16:7a:2d:f8:c0:a4:69:d6:c7:88:b2:54:8f:44:fb:
                    11:b6:af:d4:d7:1a:6b:dc:d5:97:38:33:96:b5:1b:
                    7e:27:1c:7f:5c:2f:60:b8:e5:25:00:83:7d:3b:24:
                    00:ba:ad:03:eb:4c:d4:0f:21:66:49:da:76:db:b2:
                    6d:57:b0:23:c2:3e:d3:c9:49:e2:02:c5:62:64:14:
                    ca:ab:d8:ba:14:9b:a6:db:d9:43:fe:bd:4b:c2:d1:
                    e5:1a:e0:09:52:e5:c5:f5:89:9b:68:bf:f7:d3:88:
                    90:8e:ed:7e:d4:f1:91:8d:23:33:1f:da:c3:d2:b8:
                    38:91:46:af:2a:b2:08:21:76:f1:f9:c0:ef:b8:bb:
                    d7:40:5e:e9:0c:6e:d3:b7:f8:ed:58:3c:aa:9d:26:
                    ac:05:93:98:4a:8d:62:59:0a:01:83:f4:79:6c:62:
                    3b:7b:57:c4:c1:f5:66:c0:a6:55:1c:ab:2b:0b:aa:
                    d9:3a:11:c0:41:69:68:e0:e7:25:ef:79:c0:24:fd:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:BE:E8:5C:DE:FC:F8:9A:C1:22:73:AB:89:BF:29:22:78:20:53
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/fpe-6Fze_PiawSJzq4m_KSJ4IFM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:ef:7c:0e:ed:7b:58:8a:b9:44:a0:8a:2b:b0:ac:4e:ee:3f:
         59:8a:c4:85:3c:6e:86:e0:20:3f:48:d0:5a:e9:87:82:f0:b5:
         61:8a:18:c5:8a:6c:a0:48:6c:b1:35:3c:7d:73:0d:80:7c:31:
         5c:50:c3:19:38:35:30:56:b9:e2:19:9e:ae:b6:1c:7b:ac:5d:
         6c:0f:92:c5:5b:c5:aa:d2:20:38:92:dd:c8:75:65:5d:f9:f6:
         d7:e6:4b:f8:a2:04:88:30:f9:b2:10:d8:25:3e:0f:ea:8b:50:
         cd:06:07:a7:21:76:18:0a:19:79:4d:57:d3:83:9d:02:b2:8d:
         14:b4:ec:75:0d:c5:91:9a:95:da:2a:2c:40:90:85:fb:ca:d1:
         cf:d5:42:ab:7b:ae:22:1a:9d:ce:c1:97:bd:b4:ea:11:a0:6f:
         e4:17:6e:71:05:ea:2f:4d:7c:b1:28:a7:64:60:78:3e:1f:9e:
         8b:17:ae:9e:b9:df:8d:e8:fd:49:99:9a:64:91:42:fc:b1:d5:
         bd:57:64:63:3d:23:25:5e:cd:c4:ce:72:01:67:85:b8:61:e3:
         3c:1b:81:89:20:88:4f:eb:d5:d2:6a:e3:ad:8d:bd:fd:b0:4b:
         aa:22:04:72:fe:f6:3d:3d:23:4b:5f:04:79:90:cf:87:68:02:
         30:3d:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:29 2025 by rpki-client