Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/AOI-FcF7ehL8pn6qqQCY-basgQ0.roa
File:                     AOI-FcF7ehL8pn6qqQCY-basgQ0.roa (raw, json)
Hash identifier:          Ir251GfdHhsuo7KpnR/uaog4eexhOxQeZB9fjQKplng=
Subject key identifier:   00:E2:3E:15:C1:7B:7A:12:FC:A6:7E:AA:A9:00:98:F9:B6:AC:81:0D
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       08C8
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/AOI-FcF7ehL8pn6qqQCY-basgQ0.roa
Signing time:             Sun 07 Feb 2021 13:05:49 +0000
ROA not before:           Sun 07 Feb 2021 13:05:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        103.42.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Feb  7 13:05:49 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=00E23E15C17B7A12FCA67EAAA90098F9B6AC810D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:83:bd:0b:9e:ab:2a:a4:fd:58:79:4b:c5:
                    8b:59:99:2a:a9:18:dd:fb:ed:db:09:a1:f9:d4:33:
                    89:49:0a:06:60:41:0d:7f:e4:a0:5e:fb:5a:3d:9a:
                    96:75:b2:3b:2f:02:7d:11:22:15:5b:0d:ae:9f:19:
                    76:6d:2e:7e:05:32:77:ca:f6:09:cd:c9:ce:97:7c:
                    e1:82:6e:c4:2c:7e:af:96:39:f7:12:5d:fd:1b:d5:
                    52:07:9f:52:2b:78:3f:8f:4b:be:ed:82:60:9c:de:
                    e2:83:56:ca:09:9e:1c:6c:1f:d0:f2:6b:86:b1:60:
                    64:ea:b3:1a:fa:1f:68:59:c8:67:14:50:f6:5d:b3:
                    a8:dc:84:71:59:83:ae:b0:a3:32:72:67:84:04:ce:
                    c1:54:67:95:58:4b:35:df:5f:43:9c:35:30:13:1c:
                    59:b4:78:9f:45:0c:0e:21:a6:a1:24:0b:a0:f3:8b:
                    89:7f:02:74:1f:a8:36:c2:2f:19:ee:b3:87:bf:85:
                    d5:8a:a6:54:84:5a:f8:8e:dd:3e:23:7d:3b:98:2d:
                    93:86:4d:32:df:24:7e:4c:f5:8d:ae:53:d6:08:97:
                    81:83:95:67:d5:23:61:7b:e6:31:f1:d2:58:b1:df:
                    f7:66:d7:37:31:b7:a0:af:f9:ac:b7:49:9c:6e:43:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:3E:15:C1:7B:7A:12:FC:A6:7E:AA:A9:00:98:F9:B6:AC:81:0D
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/AOI-FcF7ehL8pn6qqQCY-basgQ0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:92:a7:81:66:3b:ca:f3:91:6d:dc:57:b9:91:88:a4:ea:
         69:1c:cc:f9:78:a0:eb:06:60:ce:6a:4c:a3:52:be:e1:bd:8b:
         4d:30:34:a0:39:7d:da:a6:68:23:30:e7:f6:99:9b:00:dd:40:
         cd:6d:f7:49:1b:09:d6:97:8f:31:1b:03:20:2e:d8:c1:8e:fb:
         52:fb:f1:c7:bf:ca:e7:a7:2c:e7:32:e9:ba:c6:ab:e1:4b:ea:
         99:6b:7f:1b:6b:7b:86:06:a2:c2:ac:11:12:8e:be:f0:d0:e8:
         e2:cb:79:43:5d:88:df:91:52:7d:a3:16:e3:55:cd:47:27:d1:
         db:e5:e1:21:dd:c6:ba:f9:7b:04:82:c1:62:65:17:d7:99:a0:
         c5:72:68:84:02:0c:82:33:ee:98:7b:78:16:14:4a:1e:03:fa:
         f1:66:80:52:3c:fd:a3:52:fa:cf:e1:89:5b:9b:c9:02:f2:ad:
         1f:e1:87:bf:19:22:7d:10:57:bb:86:7e:8b:b8:e5:f4:cb:69:
         b9:c9:0c:b4:8d:45:83:0d:68:0a:59:b3:e4:ff:f3:55:c8:1a:
         d4:6c:a7:db:00:04:11:a5:83:e8:55:10:d8:93:bb:5f:dd:81:
         63:bc:d3:bf:6a:4b:9c:4e:82:d2:88:9c:82:52:a3:99:fd:2f:
         5c:45:a3:63
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yMTAyMDcx
MzA1NDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAwRTIzRTE1QzE3QjdB
MTJGQ0E2N0VBQUE5MDA5OEY5QjZBQzgxMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpUYO9C56rKqT9WHlLxYtZmSqpGN377dsJofnUM4lJCgZgQQ1/
5KBe+1o9mpZ1sjsvAn0RIhVbDa6fGXZtLn4FMnfK9gnNyc6XfOGCbsQsfq+WOfcS
Xf0b1VIHn1IreD+PS77tgmCc3uKDVsoJnhxsH9Dya4axYGTqsxr6H2hZyGcUUPZd
s6jchHFZg66wozJyZ4QEzsFUZ5VYSzXfX0OcNTATHFm0eJ9FDA4hpqEkC6Dzi4l/
AnQfqDbCLxnus4e/hdWKplSEWviO3T4jfTuYLZOGTTLfJH5M9Y2uU9YIl4GDlWfV
I2F75jHx0lix3/dm1zcxt6Cv+ay3SZxuQ1FjAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUAOI+FcF7ehL8pn6qqQCY+basgQ0wHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9BT0ktRmNGN2VoTDhw
bjZxcVFDWS1iYXNnUTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZyqUMA0GCSqGSIb3DQEBCwUAA4IBAQA265KngWY7yvORbdxXuZGIpOppHMz5
eKDrBmDOakyjUr7hvYtNMDSgOX3apmgjMOf2mZsA3UDNbfdJGwnWl48xGwMgLtjB
jvtS+/HHv8rnpyznMum6xqvhS+qZa38ba3uGBqLCrBESjr7w0Ojiy3lDXYjfkVJ9
oxbjVc1HJ9Hb5eEh3ca6+XsEgsFiZRfXmaDFcmiEAgyCM+6Ye3gWFEoeA/rxZoBS
PP2jUvrP4Ylbm8kC8q0f4Ye/GSJ9EFe7hn6LuOX0y2m5yQy0jUWDDWgKWbPk//NV
yBrUbKfbAAQRpYPoVRDYk7tf3YFjvNO/akucToLSiJyCUqOZ/S9cRaNj
-----END CERTIFICATE-----