Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/nu8akH68T0hI_4EcHHtgPae6U-Y.roa
File:                     nu8akH68T0hI_4EcHHtgPae6U-Y.roa (raw, json)
Hash identifier:          FNRdNMkUVo8pWReE7y+izlOZIbVTxnK7FCHhWK2k2Ck=
Subject key identifier:   9E:EF:1A:90:7E:BC:4F:48:48:FF:81:1C:1C:7B:60:3D:A7:BA:53:E6
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09A9
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/nu8akH68T0hI_4EcHHtgPae6U-Y.roa
Signing time:             Wed 29 Sep 2021 02:56:02 +0000
ROA not before:           Wed 29 Sep 2021 02:56:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        123.99.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9EEF1A907EBC4F4848FF811C1C7B603DA7BA53E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:37:4c:dd:b9:55:ff:cc:f6:5b:74:ee:33:
                    5f:2f:b5:d2:66:7c:26:3c:60:72:90:34:d2:7b:de:
                    b3:f6:1a:3c:91:17:66:d2:60:f6:8c:2c:a7:ee:8c:
                    27:a4:e6:01:1d:c9:71:85:3b:7a:01:94:a4:9d:28:
                    35:8e:b5:ab:68:64:5b:d8:1c:d4:f2:9e:93:ab:26:
                    63:10:a4:65:71:8b:e5:cb:e9:c1:28:1b:23:28:44:
                    14:f1:5d:a2:de:d5:f2:eb:50:5b:d1:85:cd:f7:f1:
                    95:ac:66:05:0f:1c:c2:fe:31:46:df:a4:a6:a0:b5:
                    e9:95:79:ef:28:3b:8d:e9:af:30:05:e1:7e:67:c7:
                    a3:01:cb:a8:37:78:e3:50:21:c2:ba:b3:da:5d:31:
                    51:ff:04:43:30:db:c2:25:fc:36:79:79:ee:00:77:
                    21:1b:c9:8b:db:fe:f7:2b:72:52:82:a4:7f:f8:b5:
                    30:b3:8e:eb:3b:2e:e2:d6:00:42:54:23:8d:0c:98:
                    19:a6:b0:ec:bf:87:c1:af:d0:6f:b7:2a:5d:18:f6:
                    e4:5f:78:6b:cb:8f:9d:8a:07:ed:40:cd:2a:eb:c8:
                    2e:c8:88:da:1e:5d:03:4f:df:2a:e0:2d:94:53:12:
                    02:21:15:7d:96:55:39:86:61:45:3b:2b:9b:69:3e:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EF:1A:90:7E:BC:4F:48:48:FF:81:1C:1C:7B:60:3D:A7:BA:53:E6
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/nu8akH68T0hI_4EcHHtgPae6U-Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:2a:b4:ec:00:49:c1:47:be:9f:72:05:ee:21:34:1b:74:
         23:4c:79:ac:5a:5b:58:1a:5c:a3:67:d4:9b:d8:70:67:0f:06:
         b8:89:06:e1:2f:b9:40:a2:1f:43:4e:21:d9:ed:f0:66:17:98:
         5e:ae:9d:6e:ea:84:17:c8:75:c5:14:4d:45:a3:ee:45:d0:5f:
         ad:15:3f:0c:54:7b:4f:6a:6c:7d:29:7b:f1:5f:0b:01:9a:96:
         ea:3b:36:cb:5e:2b:56:4b:e8:82:9e:d2:11:5d:71:a7:08:ee:
         d3:c1:21:39:c1:9e:a6:f1:68:47:8c:a8:42:7b:03:b6:f0:2f:
         c7:11:fc:6d:fd:82:85:dc:6c:b5:a9:fd:eb:bd:19:3f:69:49:
         df:5e:18:7d:65:2a:03:b0:8e:7b:dc:fc:ee:7b:9f:ed:00:f0:
         04:74:9e:aa:fe:6a:e1:d9:7a:5f:3a:a9:54:9a:45:69:d3:44:
         d9:3b:3d:77:5c:37:72:17:c2:cb:fe:0b:4e:eb:07:b1:37:6c:
         e1:3d:a3:4c:77:eb:48:2f:35:76:1c:19:9d:23:b3:b7:d6:b8:
         43:37:66:bf:4e:89:60:89:cc:43:f1:26:0e:1a:da:b0:79:92:
         75:88:30:a2:b3:5c:4d:9c:57:c3:84:01:e1:8e:b7:d6:b6:c3:
         53:cc:a1:55
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICCakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMTA5Mjkw
MjU2MDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlFRUYxQTkwN0VCQzRG
NDg0OEZGODExQzFDN0I2MDNEQTdCQTUzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGrTdM3blV/8z2W3TuM18vtdJmfCY8YHKQNNJ73rP2GjyRF2bS
YPaMLKfujCek5gEdyXGFO3oBlKSdKDWOtatoZFvYHNTynpOrJmMQpGVxi+XL6cEo
GyMoRBTxXaLe1fLrUFvRhc338ZWsZgUPHML+MUbfpKagtemVee8oO43przAF4X5n
x6MBy6g3eONQIcK6s9pdMVH/BEMw28Il/DZ5ee4AdyEbyYvb/vcrclKCpH/4tTCz
jus7LuLWAEJUI40MmBmmsOy/h8Gv0G+3Kl0Y9uRfeGvLj52KB+1AzSrryC7IiNoe
XQNP3yrgLZRTEgIhFX2WVTmGYUU7K5tpPu+rAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUnu8akH68T0hI/4EcHHtgPae6U+YwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL251OGFr
SDY4VDBoSV80RWNISHRnUGFlNlUtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAV7YyAwDQYJKoZIhvcNAQELBQADggEBAFwPKrTsAEnBR76fcgXu
ITQbdCNMeaxaW1gaXKNn1JvYcGcPBriJBuEvuUCiH0NOIdnt8GYXmF6unW7qhBfI
dcUUTUWj7kXQX60VPwxUe09qbH0pe/FfCwGaluo7NsteK1ZL6IKe0hFdcacI7tPB
ITnBnqbxaEeMqEJ7A7bwL8cR/G39goXcbLWp/eu9GT9pSd9eGH1lKgOwjnvc/O57
n+0A8AR0nqr+auHZel86qVSaRWnTRNk7PXdcN3IXwsv+C07rB7E3bOE9o0x360gv
NXYcGZ0js7fWuEM3Zr9OiWCJzEPxJg4a2rB5knWIMKKzXE2cV8OEAeGOt9a2w1PM
oVU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org