Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/ARUk-4zbT9d2pXXYS4eRsJu4H2w.roa
File:                     ARUk-4zbT9d2pXXYS4eRsJu4H2w.roa (raw, json)
Hash identifier:          hUqPWeePTS8aI9LASvDlqGi1n0wR3t50HGVl1ER2hNU=
Subject key identifier:   01:15:24:FB:8C:DB:4F:D7:76:A5:75:D8:4B:87:91:B0:9B:B8:1F:6C
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       096E
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/ARUk-4zbT9d2pXXYS4eRsJu4H2w.roa
Signing time:             Wed 29 Sep 2021 02:44:36 +0000
ROA not before:           Wed 29 Sep 2021 02:44:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131593
IP address blocks:        43.251.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 02:44:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=011524FB8CDB4FD776A575D84B8791B09BB81F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:ae:52:aa:3f:eb:de:2c:6d:0e:0c:01:e1:
                    3c:fb:fd:f4:12:68:7d:e1:25:20:22:95:76:2d:49:
                    5d:7d:1e:a8:f3:14:eb:b1:f1:5b:0a:16:6c:2f:17:
                    cd:e8:d4:14:74:fe:71:9c:71:47:38:9e:6b:f8:c1:
                    02:1c:b9:f5:1d:44:ae:fe:c9:5b:f2:37:02:de:bf:
                    41:1a:49:94:3f:ed:bd:91:c8:02:f5:6f:22:3f:1b:
                    4b:22:7e:38:10:d1:df:7d:02:2e:5e:fa:4f:d5:93:
                    f1:d6:33:a8:a6:88:30:ee:47:ad:36:4c:e1:e7:3d:
                    25:f0:1c:2e:89:2d:f2:b7:87:80:e1:2e:58:2e:d3:
                    8a:20:c9:7a:20:ad:54:d3:a6:d5:67:a9:29:6e:ac:
                    5e:7b:0c:5d:7c:79:1f:6b:66:71:d2:f9:a8:d9:0a:
                    48:b4:e0:70:d4:f8:d1:32:35:6f:35:98:2d:6b:e8:
                    28:d6:b2:0e:5d:32:40:f6:f1:d0:22:b7:08:b0:1b:
                    98:01:63:8b:8d:db:c7:32:0a:1b:6b:dc:21:a6:67:
                    4a:08:f2:62:f0:b6:f4:c2:36:00:29:f2:e7:db:96:
                    10:9e:a2:76:4e:33:6e:50:aa:89:42:7b:52:fd:23:
                    09:bc:3e:06:71:e3:cc:e7:72:bc:35:1e:37:bb:fb:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:15:24:FB:8C:DB:4F:D7:76:A5:75:D8:4B:87:91:B0:9B:B8:1F:6C
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/ARUk-4zbT9d2pXXYS4eRsJu4H2w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:87:8c:c8:7e:3c:be:98:a5:46:3f:b7:06:e6:d0:4d:f9:
         5a:52:bf:15:e4:de:b0:e5:9f:aa:88:98:f6:89:08:76:bb:db:
         fe:d7:26:6d:b8:b9:03:f4:26:2c:8f:91:0f:ad:23:a3:cf:40:
         51:af:21:64:99:64:81:0a:18:9c:d7:83:da:7e:be:b2:ca:55:
         c5:23:40:f9:fc:70:65:ef:8c:c1:10:4e:0d:a7:b4:86:5b:25:
         45:72:f6:e6:70:28:4f:16:48:e7:b8:d1:12:dd:a8:c5:f8:a0:
         b2:64:6b:60:90:3b:60:88:76:fe:02:f3:03:b8:2e:9b:ba:c7:
         ff:9d:01:49:fb:e5:cd:59:bb:6d:e4:29:0c:ff:67:be:80:96:
         ed:7d:85:98:2b:85:ab:38:7c:d3:b5:e8:a2:b0:bd:cf:4c:67:
         08:aa:2b:79:bd:2a:4a:22:e0:03:b0:33:7a:0c:07:db:a5:48:
         c8:81:d7:3d:6f:85:9c:13:6e:5a:44:72:d1:31:4a:34:d4:37:
         bc:3d:82:c3:9c:f3:59:1c:16:3b:9a:01:fd:b0:77:d4:12:7f:
         d9:38:79:e6:51:8b:f8:aa:51:de:c3:ce:c3:92:44:21:0d:f2:
         3e:c6:3f:d3:85:7a:af:2a:35:8a:12:8b:ce:06:5f:dc:ec:1a:
         a4:b4:f2:27
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yMTA5Mjkw
MjQ0MzZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDAxMTUyNEZCOENEQjRG
RDc3NkE1NzVEODRCODc5MUIwOUJCODFGNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJo65Sqj/r3ixtDgwB4Tz7/fQSaH3hJSAilXYtSV19HqjzFOux
8VsKFmwvF83o1BR0/nGccUc4nmv4wQIcufUdRK7+yVvyNwLev0EaSZQ/7b2RyAL1
byI/G0sifjgQ0d99Ai5e+k/Vk/HWM6imiDDuR602TOHnPSXwHC6JLfK3h4DhLlgu
04ogyXogrVTTptVnqSlurF57DF18eR9rZnHS+ajZCki04HDU+NEyNW81mC1r6CjW
sg5dMkD28dAitwiwG5gBY4uN28cyChtr3CGmZ0oI8mLwtvTCNgAp8ufblhCeonZO
M25QqolCe1L9Iwm8PgZx48zncrw1Hje7+0zHAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUARUk+4zbT9d2pXXYS4eRsJu4H2wwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9BUlVrLTR6YlQ5ZDJw
WFhZUzRlUnNKdTRIMncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAK/s+MA0GCSqGSIb3DQEBCwUAA4IBAQBvQoeMyH48vpilRj+3BubQTflaUr8V
5N6w5Z+qiJj2iQh2u9v+1yZtuLkD9CYsj5EPrSOjz0BRryFkmWSBChic14Pafr6y
ylXFI0D5/HBl74zBEE4Np7SGWyVFcvbmcChPFkjnuNES3ajF+KCyZGtgkDtgiHb+
AvMDuC6busf/nQFJ++XNWbtt5CkM/2e+gJbtfYWYK4WrOHzTteiisL3PTGcIqit5
vSpKIuADsDN6DAfbpUjIgdc9b4WcE25aRHLRMUo01De8PYLDnPNZHBY7mgH9sHfU
En/ZOHnmUYv4qlHew87DkkQhDfI+xj/ThXqvKjWKEovOBl/c7BqktPIn
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org