Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/8CGFSgm82qmJloqTRFMcP8PpWf4.roa
File:                     8CGFSgm82qmJloqTRFMcP8PpWf4.roa (raw, json)
Hash identifier:          qduQTFYgcyUleaztOB4nY4DNm0EDz7JKXb1XqWnwKRk=
Subject key identifier:   F0:21:85:4A:09:BC:DA:A9:89:96:8A:93:44:53:1C:3F:C3:E9:59:FE
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       096F
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/8CGFSgm82qmJloqTRFMcP8PpWf4.roa
Signing time:             Wed 29 Sep 2021 02:44:37 +0000
ROA not before:           Wed 29 Sep 2021 02:44:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131593
IP address blocks:        43.251.61.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 02:44:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F021854A09BCDAA989968A9344531C3FC3E959FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:01:fe:62:78:6c:2d:ea:49:32:ee:9c:8e:
                    29:6f:fd:14:52:41:d5:83:3a:f0:3b:45:34:30:dd:
                    f8:2d:e2:3a:f6:16:2b:1a:6c:69:7d:3e:0b:b6:f9:
                    44:3e:17:7d:b4:c5:1c:a6:46:51:82:a0:d9:f1:97:
                    e3:92:01:e6:9c:6d:2b:a5:35:9d:38:bc:35:44:20:
                    ee:f6:6b:f6:0f:f3:d9:78:cb:be:60:c6:24:87:7a:
                    2e:b7:2c:33:4d:1f:1f:98:49:2b:66:73:73:b3:d9:
                    cc:dd:c6:d6:52:6f:83:d1:c5:36:60:49:fc:f4:0e:
                    43:2b:c7:1c:c8:91:35:5a:a2:1c:fb:fa:5e:3e:be:
                    27:8b:ea:77:b4:b3:78:18:2c:77:51:e7:97:34:4f:
                    f3:d1:8a:6b:c2:9d:f9:9c:88:3d:b2:d1:a1:3c:85:
                    4d:4e:10:bd:76:9c:9c:e9:bc:f5:4e:45:03:6d:8d:
                    79:0e:ae:67:dc:b0:90:fb:ba:77:87:1f:34:0c:d1:
                    45:bd:dc:26:58:6f:90:fa:91:2f:1f:ed:b2:06:8a:
                    1c:8a:8e:99:37:19:51:33:5f:4c:92:e5:61:e4:bb:
                    42:13:0e:69:2f:3c:cc:7a:2b:86:19:de:a8:98:9c:
                    b8:6d:68:9a:9f:9e:23:51:ce:6b:91:99:4e:30:c3:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:85:4A:09:BC:DA:A9:89:96:8A:93:44:53:1C:3F:C3:E9:59:FE
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/8CGFSgm82qmJloqTRFMcP8PpWf4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:43:06:8b:24:d1:1a:41:13:2d:18:1e:39:3e:41:af:9d:
         61:b1:fe:19:0f:45:25:bf:80:cb:c4:dc:a2:b3:49:f7:31:9b:
         95:56:19:8f:1f:42:83:c4:c6:c5:9c:97:e6:fb:61:7d:ca:00:
         01:3b:b6:a9:dc:2b:64:dd:37:07:f0:df:1a:8b:17:41:43:51:
         a2:1e:47:30:a4:d0:a8:26:6c:10:1d:6b:f5:d7:1d:f0:46:b7:
         97:01:ed:cf:43:c4:17:da:ff:15:2f:c0:4b:9d:be:50:ae:32:
         05:fb:22:cb:96:27:89:b5:8c:d2:30:58:f1:4b:94:24:30:af:
         fc:97:48:8c:90:38:9f:bd:e7:d7:c4:74:3e:59:39:13:21:bc:
         1d:fe:54:05:4b:77:ab:0f:c6:23:9c:9c:d9:a3:6c:cd:1b:e1:
         76:22:30:f5:05:99:4f:5f:21:1f:ea:e9:60:fe:ad:d9:a6:d8:
         cc:97:9b:d2:79:e8:3c:b9:5e:c0:3e:6c:e7:06:bd:09:d1:4b:
         51:9b:c4:0e:06:9a:4c:71:3e:ac:f1:39:03:09:5c:ca:e5:d9:
         9c:fc:5e:a3:08:23:7e:9a:6f:cf:59:3e:3d:3b:d2:f8:7f:65:
         91:ad:12:73:66:5b:80:06:62:f7:16:37:bd:84:20:dc:dd:13:
         d8:4e:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:37 2025 by rpki-client