Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/2XUxYghza71RjBBsNT1VZ9Kw5js.roa
File:                     2XUxYghza71RjBBsNT1VZ9Kw5js.roa (raw, json)
Hash identifier:          t6+acSk1UlMnXr/Ch3ff3i4MfWmStZNM8qDLcifdL4A=
Subject key identifier:   D9:75:31:62:08:73:6B:BD:51:8C:10:6C:35:3D:55:67:D2:B0:E6:3B
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0A5B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/2XUxYghza71RjBBsNT1VZ9Kw5js.roa
Signing time:             Thu 15 Sep 2022 02:44:14 +0000
ROA not before:           Thu 15 Sep 2022 02:44:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131593
IP address blocks:        103.42.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 15 02:44:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D975316208736BBD518C106C353D5567D2B0E63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:f1:24:d2:39:92:02:d4:d4:63:ff:32:50:
                    2b:40:ed:ba:28:c7:24:e9:be:6a:3a:ab:ce:3a:13:
                    9d:5f:aa:84:79:11:1a:5f:61:9a:14:44:c5:6a:96:
                    52:23:aa:73:79:a2:5b:6c:aa:a2:5c:3e:c7:e2:8c:
                    12:b4:a4:3d:fd:9e:95:04:bf:10:43:77:93:09:ec:
                    9c:d8:53:6f:b6:a1:24:b2:4d:f5:75:3c:e1:42:b7:
                    2c:f0:09:ed:c6:e4:72:c5:aa:eb:23:9d:be:97:f8:
                    0d:16:98:a9:34:54:5b:0a:df:28:5d:c8:8c:6c:8b:
                    0b:88:46:12:4e:90:ab:d4:8c:3e:32:ff:6f:f8:0f:
                    f2:bf:7b:ba:87:ea:a7:9f:46:d7:0e:a3:66:ee:f3:
                    76:5f:6b:73:8a:2b:dc:6a:fe:a4:d8:aa:04:4c:90:
                    95:4b:00:d8:79:5a:0f:ad:29:c4:53:25:17:e4:00:
                    0b:81:ac:4c:8f:e5:62:db:59:02:51:2d:40:75:e0:
                    fa:85:e1:9a:d5:b2:5a:53:38:e5:ae:c4:78:2a:48:
                    12:fa:af:3b:b4:fe:11:df:06:eb:e8:a0:18:6d:b6:
                    33:24:bd:8e:9a:37:77:e7:4b:de:48:ed:7e:9a:d4:
                    95:e6:54:30:60:6d:04:9b:b3:69:ce:a5:c5:81:7e:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:31:62:08:73:6B:BD:51:8C:10:6C:35:3D:55:67:D2:B0:E6:3B
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/2XUxYghza71RjBBsNT1VZ9Kw5js.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:cc:63:06:82:04:13:21:e1:38:03:31:e7:3f:57:6f:fc:
         79:3b:54:ae:dc:59:0c:7a:ec:5a:d9:67:9b:72:63:2d:3c:14:
         d5:4e:e1:51:94:a5:fa:e6:47:a4:22:bc:8e:4a:91:b8:0d:1f:
         ce:2d:00:43:97:30:03:7d:52:35:9b:1b:f7:f0:83:e2:e0:4c:
         87:7d:ec:78:0c:d1:5d:9a:2f:3a:36:29:94:df:94:7d:8b:6e:
         36:cd:69:b9:73:ce:f2:61:f0:cd:a8:b8:c1:29:02:de:8a:5a:
         eb:9e:0c:de:bc:ec:5e:82:1a:95:7d:35:b1:19:d7:8c:7d:71:
         42:10:47:55:32:e5:52:f2:ca:a0:51:33:98:f1:7c:09:df:cd:
         75:25:1a:68:bc:a3:32:d6:e9:53:45:39:ef:fb:33:d3:0c:72:
         52:d9:fe:20:97:09:06:91:87:c2:ce:f4:69:12:d0:a7:bf:ba:
         e2:57:cd:bd:00:89:65:cd:07:57:1e:4c:4a:53:9f:97:8e:d2:
         61:9a:67:cd:e6:93:5f:83:57:03:1c:f4:d7:f2:b9:78:82:59:
         31:41:75:1d:90:56:e2:9b:37:40:62:58:c6:7e:38:33:2e:6e:
         9d:a2:ca:f2:ad:76:62:ca:1b:c3:4b:77:9b:7b:fe:2e:2f:72:
         c3:f4:fa:40
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICClswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yMjA5MTUw
MjQ0MTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ5NzUzMTYyMDg3MzZC
QkQ1MThDMTA2QzM1M0Q1NTY3RDJCMEU2M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDemvEk0jmSAtTUY/8yUCtA7booxyTpvmo6q846E51fqoR5ERpf
YZoURMVqllIjqnN5oltsqqJcPsfijBK0pD39npUEvxBDd5MJ7JzYU2+2oSSyTfV1
POFCtyzwCe3G5HLFqusjnb6X+A0WmKk0VFsK3yhdyIxsiwuIRhJOkKvUjD4y/2/4
D/K/e7qH6qefRtcOo2bu83Zfa3OKK9xq/qTYqgRMkJVLANh5Wg+tKcRTJRfkAAuB
rEyP5WLbWQJRLUB14PqF4ZrVslpTOOWuxHgqSBL6rzu0/hHfBuvooBhttjMkvY6a
N3fnS95I7X6a1JXmVDBgbQSbs2nOpcWBfjcbAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU2XUxYghza71RjBBsNT1VZ9Kw5jswHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi8yWFV4WWdoemE3MVJq
QkJzTlQxVlo5S3c1anMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZyqUMA0GCSqGSIb3DQEBCwUAA4IBAQCtAcxjBoIEEyHhOAMx5z9Xb/x5O1Su
3FkMeuxa2WebcmMtPBTVTuFRlKX65kekIryOSpG4DR/OLQBDlzADfVI1mxv38IPi
4EyHfex4DNFdmi86NimU35R9i242zWm5c87yYfDNqLjBKQLeilrrngzevOxeghqV
fTWxGdeMfXFCEEdVMuVS8sqgUTOY8XwJ3811JRpovKMy1ulTRTnv+zPTDHJS2f4g
lwkGkYfCzvRpEtCnv7riV829AIllzQdXHkxKU5+XjtJhmmfN5pNfg1cDHPTX8rl4
glkxQXUdkFbimzdAYljGfjgzLm6dosryrXZiyhvDS3ebe/4uL3LD9PpA
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org