Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/uoxgQ6xrumM9eo1-7N962Zn6ktc.roa
File:                     uoxgQ6xrumM9eo1-7N962Zn6ktc.roa (raw, json)
Hash identifier:          rY/AV2zXzaRU+yfRD1E3av4md8pw3Y+vXz70YKo/nCQ=
Subject key identifier:   BA:8C:60:43:AC:6B:BA:63:3D:7A:8D:7E:EC:DF:7A:D9:99:FA:92:D7
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/uoxgQ6xrumM9eo1-7N962Zn6ktc.roa
Signing time:             Thu 15 Sep 2022 02:36:58 +0000
ROA not before:           Thu 15 Sep 2022 02:36:58 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        103.2.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 15 02:36:58 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BA8C6043AC6BBA633D7A8D7EECDF7AD999FA92D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:de:3e:e2:d3:4b:69:8b:e0:12:d9:23:fa:
                    09:58:53:d2:13:f6:af:17:38:4e:4d:e1:7e:20:cd:
                    e7:b2:b4:10:3f:06:b9:5b:dd:66:60:f3:e7:50:74:
                    7d:8f:59:e6:10:75:15:cc:56:a8:2f:f0:1d:7c:83:
                    ca:67:5a:98:f8:94:85:73:81:30:75:9d:e0:5f:a2:
                    35:34:74:a0:4c:e9:2a:d5:71:8b:7a:80:29:7b:8f:
                    ad:99:27:ab:71:6f:a9:87:d4:5c:e4:21:6b:78:52:
                    2b:d5:e8:cb:eb:5b:d1:bc:c8:8b:1b:27:12:30:91:
                    a4:a3:20:69:81:67:60:6b:dc:a9:4e:9a:d6:12:7b:
                    18:cf:38:2f:8e:9e:c2:e1:22:f7:97:9f:f9:f7:86:
                    09:fd:0c:a6:15:b2:16:89:e5:7c:60:3b:b6:af:51:
                    b7:eb:cf:db:b4:e8:f6:0e:2a:e9:d9:43:11:9f:b1:
                    aa:5d:85:4b:0d:4a:a7:59:fe:f5:96:a5:56:52:51:
                    5a:e5:0c:6e:c7:d4:64:8a:7f:56:2d:38:21:5b:95:
                    9c:91:40:30:7b:e0:eb:5c:1c:74:c6:27:f8:69:cb:
                    ac:60:cf:75:7f:a5:7b:52:18:35:92:62:63:86:ca:
                    fd:fa:02:a9:69:c2:b8:ef:87:ba:b7:95:a7:80:45:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:60:43:AC:6B:BA:63:3D:7A:8D:7E:EC:DF:7A:D9:99:FA:92:D7
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/uoxgQ6xrumM9eo1-7N962Zn6ktc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:df:00:f5:1d:07:11:29:6c:94:ff:ac:cc:08:2e:42:3a:cc:
         c8:bb:48:ff:9f:7d:e3:d5:5c:f6:91:3f:7e:2c:cb:6e:c4:17:
         c2:4b:04:06:03:1e:93:42:bd:74:cc:c1:eb:f6:46:3a:4d:ea:
         96:6c:cb:4f:eb:03:26:a5:39:c2:6f:02:1f:9e:fd:a1:67:73:
         a1:f9:75:17:e2:2d:90:37:18:44:37:c8:e9:e5:d5:53:44:68:
         d1:a7:e9:44:5a:29:90:df:62:b3:6d:94:92:4f:15:e1:e7:ce:
         c9:f2:31:7b:27:b2:84:64:dc:88:fc:d2:42:da:34:bb:17:89:
         30:1c:a9:d1:e1:3f:c0:7c:ae:39:55:fc:78:68:11:64:01:80:
         5f:92:a7:2b:f5:ce:93:05:58:67:c0:08:53:10:43:76:f8:aa:
         cb:26:4e:9e:55:64:a9:5f:f6:e8:95:2a:40:28:88:bb:38:c6:
         4a:f3:78:dd:9e:f2:c8:2c:ef:17:2f:6e:d2:6b:54:89:76:db:
         2f:aa:a0:a3:ca:db:22:65:34:a5:cf:a6:5d:88:bb:74:d0:2a:
         cd:5e:a8:e7:1c:1e:be:d3:f1:9a:a1:fb:50:b9:9a:9a:93:77:
         14:17:b5:b4:fd:1a:02:44:d7:8e:de:79:1f:b2:89:ae:6a:d3:
         e8:75:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org