Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/BASQNUWetwencMsDtWJApO9PKHA.roa
File:                     BASQNUWetwencMsDtWJApO9PKHA.roa (raw, json)
Hash identifier:          K9Z7J7OqKq/AYiuolYGv5st47hEwD2OvazmKmaCd7Ik=
Subject key identifier:   04:04:90:35:45:9E:B7:07:A7:70:CB:03:B5:62:40:A4:EF:4F:28:70
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0A5B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/BASQNUWetwencMsDtWJApO9PKHA.roa
Signing time:             Thu 15 Sep 2022 02:44:16 +0000
ROA not before:           Thu 15 Sep 2022 02:44:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131593
IP address blocks:        103.42.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 15 02:44:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=04049035459EB707A770CB03B56240A4EF4F2870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:e3:00:f5:94:9f:e2:22:6a:7d:29:97:c2:
                    d9:6d:d3:14:1a:33:3b:22:84:6e:2b:79:fa:20:ee:
                    c4:2b:87:f3:2f:05:ff:f6:66:e4:a2:7e:89:6f:bf:
                    fc:b9:71:b8:21:e0:fa:38:92:18:cb:2b:13:ea:33:
                    c0:8a:5f:dd:e4:4c:44:39:e6:78:ec:bc:74:20:a4:
                    d3:5d:4e:03:70:8e:57:60:22:20:d6:5a:08:3b:6e:
                    80:3d:54:0b:3e:4f:96:19:42:0b:03:d5:ed:1a:93:
                    b9:f6:dc:2e:29:5c:cd:df:ee:25:db:52:44:6f:7e:
                    66:08:27:a5:51:de:23:8a:20:ed:d6:02:a0:ed:73:
                    bc:5b:1a:b3:d9:20:95:e9:f0:5e:55:e8:4e:31:3f:
                    16:f0:ea:13:41:a3:23:64:69:19:e9:14:02:73:1d:
                    26:68:f9:fa:3c:2b:8c:43:01:e0:d6:bb:f1:6b:df:
                    bd:42:58:21:ba:7f:ef:94:de:84:b3:16:be:74:02:
                    6c:e1:2e:2e:d0:de:c6:1a:90:37:46:47:a0:c3:00:
                    f9:4c:d9:53:04:b4:40:31:99:e7:0c:cd:86:b3:f7:
                    6d:4b:c6:e1:68:3e:a8:45:73:d6:8e:34:75:76:44:
                    8b:93:00:57:24:23:c8:19:bd:27:23:d6:1a:66:2e:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:90:35:45:9E:B7:07:A7:70:CB:03:B5:62:40:A4:EF:4F:28:70
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/BASQNUWetwencMsDtWJApO9PKHA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:3b:db:72:01:9e:bc:ad:46:7c:1a:a0:d4:ba:da:34:6a:
         42:c8:a6:2f:da:96:3e:d9:c6:8e:d3:09:28:38:71:f8:ea:ef:
         d5:85:6f:aa:e1:da:15:f8:94:85:01:6f:51:47:a3:be:f2:94:
         93:32:67:0f:6d:e3:e8:f8:a9:9a:6e:7a:5f:fd:dc:4b:5c:a4:
         6f:62:5b:7d:3c:3d:a2:bf:1c:41:ec:20:03:8e:70:21:ca:13:
         5b:38:30:a5:97:df:66:cf:c2:25:20:37:6b:93:47:2f:57:00:
         34:8d:e2:9b:f9:8f:d8:4d:49:9e:34:79:f2:07:b6:2a:6c:5d:
         32:21:d2:66:64:f6:8c:ab:fa:5a:ff:ac:fb:76:ad:8a:9c:91:
         b3:77:9f:d3:ae:b4:0d:7d:ce:ff:1b:6f:35:7f:d1:26:55:23:
         f5:6d:a7:2e:93:f2:d8:ce:96:6e:21:4d:e6:75:ce:9a:a6:e9:
         70:22:26:29:45:a6:34:72:15:9b:ca:23:70:ea:d1:7f:d2:7a:
         e3:6a:f1:5a:1e:91:b9:47:79:ac:9c:ea:b0:5b:ff:ea:c9:3f:
         fc:ab:a1:09:20:04:42:35:c6:08:3a:82:28:c4:3d:f8:22:90:
         eb:98:bb:8c:2e:5e:82:15:2f:1c:40:a5:d7:fd:b7:30:0b:be:
         9d:bb:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org