Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/q5Q5777elE4iulfUagolTNwOL2Q.roa
File:                     q5Q5777elE4iulfUagolTNwOL2Q.roa (raw, json)
Hash identifier:          W2W5Oc7D6LBJHQzPJPYKANjyevJfUA0DsZUiDtv4bwo=
Subject key identifier:   AB:94:39:EF:BE:DE:94:4E:22:BA:57:D4:6A:0A:25:4C:DC:0E:2F:64
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       08EC
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/q5Q5777elE4iulfUagolTNwOL2Q.roa
Signing time:             Sun 07 Feb 2021 11:37:05 +0000
ROA not before:           Sun 07 Feb 2021 11:37:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        103.2.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Feb  7 11:37:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AB9439EFBEDE944E22BA57D46A0A254CDC0E2F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:17:3b:b5:86:1c:73:99:1e:12:2d:6d:b3:
                    35:e3:4b:21:8d:a8:94:9e:c2:43:81:78:0a:ba:9b:
                    9b:ec:7c:2a:cc:5c:92:f9:57:a0:86:46:72:f7:be:
                    54:a1:a4:8d:69:97:7a:4e:31:6d:88:d5:97:6d:9c:
                    23:1b:48:0e:8a:43:75:ca:03:3f:d8:0f:ca:0f:78:
                    67:e3:f3:65:f2:b8:0c:88:34:47:bb:a4:fc:a7:13:
                    e9:88:38:7c:74:db:f5:42:3c:e4:a7:c4:3d:6b:15:
                    be:08:ac:47:af:e4:9d:41:40:51:37:a4:6d:65:3a:
                    0c:7d:2f:13:63:0d:e0:2e:1a:66:f7:a4:f1:22:0d:
                    81:dd:05:da:88:a9:fd:52:f2:93:77:e6:fc:19:0f:
                    22:89:b2:63:68:f1:ab:0c:aa:06:59:df:4b:78:e7:
                    20:da:6d:15:78:20:ce:19:30:d3:e9:2d:b1:0c:af:
                    45:7a:f9:92:8b:e2:d2:64:c1:89:d7:14:11:4a:6d:
                    10:c7:9b:45:11:51:6e:10:09:28:3f:a5:6b:59:b5:
                    00:d2:30:9f:6f:ee:66:f7:09:fa:d8:64:0e:62:86:
                    30:c1:82:37:e1:d1:d3:b2:6e:94:bd:bf:3d:c1:51:
                    9f:88:36:51:e2:91:b7:04:75:4f:32:63:cc:9e:ae:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:39:EF:BE:DE:94:4E:22:BA:57:D4:6A:0A:25:4C:DC:0E:2F:64
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/q5Q5777elE4iulfUagolTNwOL2Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:d4:cf:cf:1b:d9:8f:a7:d5:20:ea:b2:7d:50:d0:6a:3a:0c:
         ce:56:0a:97:43:5b:cb:d0:6a:4b:df:9c:1a:13:69:30:4f:a4:
         00:64:e5:8b:3a:bf:9c:d5:c6:2b:7a:8e:91:10:54:00:e1:f3:
         ad:48:1e:f5:59:e6:0e:7b:f7:53:e3:a6:9f:31:75:0a:26:78:
         41:94:41:ab:f1:cd:84:95:d4:ff:af:3c:c9:61:25:d5:36:ee:
         8b:d3:35:e0:d1:40:cf:a1:8f:46:d3:0a:95:5c:b2:2d:17:74:
         d2:4e:cc:37:b8:be:69:b9:a4:d6:79:6f:5d:ac:82:97:83:c0:
         26:15:55:1d:c8:b1:d2:e6:47:b1:03:9a:53:5c:df:02:f8:1b:
         b6:3e:9e:d4:4c:b4:d7:ce:52:3b:5b:c8:5b:74:5a:94:1d:de:
         63:58:c2:c8:aa:93:c1:f9:4a:ca:57:47:4b:1e:68:03:c3:e5:
         e4:8c:b8:c6:53:38:00:71:bb:ee:aa:0d:91:79:9f:a9:09:1a:
         70:ef:45:78:aa:45:81:af:48:29:57:2b:49:73:18:49:da:83:
         2a:d8:74:cc:2c:59:88:65:c8:38:62:05:a5:f5:d8:4c:c7:bc:
         c0:33:d7:3b:d8:2a:32:71:66:1c:bb:e0:67:77:90:5b:9f:07:
         e0:c0:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org