Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/q2TwuHq59r3yh0Dk2IAHB28GgP8.roa
File:                     q2TwuHq59r3yh0Dk2IAHB28GgP8.roa (raw, json)
Hash identifier:          l5uD8TwhTTIM+sia0wGJJdy3RZfKCtJe9glVSoDqW+E=
Subject key identifier:   AB:64:F0:B8:7A:B9:F6:BD:F2:87:40:E4:D8:80:07:07:6F:06:80:FF
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/q2TwuHq59r3yh0Dk2IAHB28GgP8.roa
Signing time:             Thu 15 Sep 2022 02:36:57 +0000
ROA not before:           Thu 15 Sep 2022 02:36:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        2402:7500:faff::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 15 02:36:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AB64F0B87AB9F6BDF28740E4D88007076F0680FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:b2:db:ec:64:ce:9b:04:5d:bf:fa:55:d4:
                    a1:0d:f4:4b:a4:d5:b9:03:75:d3:fe:7c:03:be:0e:
                    6d:f3:b2:e8:92:54:9c:5c:be:eb:9d:e6:96:62:c7:
                    29:fb:8c:9e:df:b2:62:ed:56:08:f1:d3:50:68:ee:
                    d7:0d:e6:1a:bd:1c:ea:69:8c:42:91:9b:b9:b0:e5:
                    78:5e:7b:0a:89:5c:fb:b1:65:c5:86:f9:28:dd:a3:
                    48:7e:cb:d7:e3:ba:fb:75:b3:6d:a1:24:b8:88:77:
                    ad:03:1e:c1:a5:5d:3d:0f:5a:eb:53:c2:25:45:8e:
                    a3:6f:cc:60:5c:de:72:10:51:dd:b4:ee:2b:c0:7f:
                    9c:6d:8e:8c:a1:97:c4:ec:4a:aa:f1:1d:d3:10:78:
                    4b:56:90:fb:ea:fc:fa:f0:63:b8:84:3b:bb:e2:f3:
                    50:ba:99:3c:42:d8:54:94:c7:25:d0:50:f1:99:74:
                    0d:a9:ea:d4:5a:4e:85:83:ab:66:54:f3:ba:f1:1a:
                    41:2b:32:1b:5f:e3:6f:01:e8:30:61:44:cf:07:0b:
                    5d:b9:38:cb:0f:9a:a0:7c:12:cb:e5:97:1a:1c:0e:
                    80:98:5a:1b:6e:37:87:8a:d6:de:2d:f4:51:df:ce:
                    bf:de:df:d3:6a:41:c8:dd:a2:98:8d:2c:97:f6:6e:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:64:F0:B8:7A:B9:F6:BD:F2:87:40:E4:D8:80:07:07:6F:06:80:FF
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/q2TwuHq59r3yh0Dk2IAHB28GgP8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:faff::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:25:09:96:5a:1f:b0:9d:6f:5d:3d:65:86:7d:70:f1:10:
         23:1e:1b:db:9f:ac:3d:5c:87:43:71:2c:6f:0d:c7:b6:bc:9a:
         51:27:d1:5e:73:0e:6d:7e:ed:fa:db:30:6e:ed:0f:20:14:7a:
         7d:88:a5:05:cf:22:ea:d6:fd:dc:e8:60:7d:bf:21:f6:88:33:
         97:1b:56:95:83:fc:e4:24:76:12:77:44:e1:0d:d1:7c:4d:02:
         4b:96:be:37:51:23:1a:96:8e:fe:24:ea:28:6a:7e:0b:1f:48:
         b7:1f:24:c6:9b:87:22:f3:d8:68:d5:df:9e:f4:7e:72:2f:6d:
         82:e2:2c:11:59:99:39:4c:6c:1e:a9:c1:16:cb:37:a6:2b:44:
         d8:9c:3f:72:87:1c:5d:95:ac:e6:5b:eb:da:fa:03:96:20:6e:
         eb:94:3d:f6:26:5c:80:a4:72:78:64:62:19:2a:fa:02:88:1a:
         ea:3e:3f:d4:c3:24:01:11:f1:f3:75:46:68:fa:6a:ba:42:8a:
         2d:5d:aa:ed:2b:21:17:3e:4b:13:8b:a4:b1:4a:8a:31:b8:3a:
         3d:f5:da:8d:97:97:9a:8e:b2:8f:40:af:c7:ae:dc:b4:70:75:
         3b:e8:c4:4e:5e:19:17:5a:35:2e:b0:26:43:69:d9:f6:f4:58:
         f3:45:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org