Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/IRzPKDqHcE-LA67noCsv5hN6ht8.roa
File:                     IRzPKDqHcE-LA67noCsv5hN6ht8.roa (raw, json)
Hash identifier:          KTKRPTcCKZ39kRJFdZNpVWY+QmgmAmvW7LzcItB2qn0=
Subject key identifier:   21:1C:CF:28:3A:87:70:4F:8B:03:AE:E7:A0:2B:2F:E6:13:7A:86:DF
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       096B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/IRzPKDqHcE-LA67noCsv5hN6ht8.roa
Signing time:             Wed 29 Sep 2021 02:44:36 +0000
ROA not before:           Wed 29 Sep 2021 02:44:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131593
IP address blocks:        103.42.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411 (0x96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 02:44:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=211CCF283A87704F8B03AEE7A02B2FE6137A86DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:45:79:d7:0c:8d:43:94:70:40:1a:6e:1b:
                    fb:37:33:0b:2d:75:0f:d5:fe:75:98:08:42:dd:3a:
                    81:7b:f4:db:71:a5:02:17:2c:c1:e8:70:07:57:c6:
                    ad:46:50:b7:01:c1:df:09:d6:af:89:74:cb:31:bb:
                    ac:fb:4f:ae:5e:26:11:5e:fd:fd:49:02:82:22:15:
                    e8:4e:4e:32:9d:17:4d:6e:1b:43:71:4f:cd:31:d5:
                    93:91:e2:d5:6c:cf:4d:8b:ed:53:15:bf:f3:95:a8:
                    aa:1c:92:08:d3:20:78:ad:06:c2:14:0a:68:57:53:
                    60:a9:7a:df:2b:9d:d8:b8:da:84:ed:91:7f:1b:af:
                    76:fe:4f:a6:b4:03:48:b3:00:28:e8:3d:c3:f4:d2:
                    2a:fb:ef:2d:7a:5d:08:24:45:ef:91:7b:08:23:2c:
                    dd:79:43:c7:77:aa:3d:7b:d4:6e:a3:38:c5:a3:e1:
                    d2:ab:d6:27:4b:2f:50:cf:9d:45:fa:b7:95:92:ae:
                    d9:28:0b:d7:1a:f8:b0:83:97:cb:8b:ca:6d:2d:d7:
                    78:c4:61:93:4d:61:47:44:19:64:7b:22:c9:03:4a:
                    53:39:76:99:2c:80:7c:f3:1a:14:93:51:1a:91:8f:
                    f2:4b:69:28:a9:49:ec:8d:c7:4c:d2:d3:63:aa:bc:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:CF:28:3A:87:70:4F:8B:03:AE:E7:A0:2B:2F:E6:13:7A:86:DF
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/IRzPKDqHcE-LA67noCsv5hN6ht8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:7b:f4:d2:c7:1e:39:95:0e:58:a5:93:50:d4:f5:11:37:
         12:cb:73:27:98:40:39:e3:8c:e7:ff:36:d8:d7:36:a3:a5:b3:
         fb:9e:ed:db:39:0a:ba:14:7e:b9:1e:c1:0c:e1:f5:43:8e:0c:
         d8:00:a0:53:ba:ed:3b:71:5a:09:ef:dc:31:b9:f0:52:c1:e1:
         12:60:32:09:e0:51:bb:fd:13:4f:5f:f5:fe:3d:57:46:c1:3a:
         13:36:f7:2f:79:39:4b:2f:f4:76:53:7b:20:b6:16:c0:93:de:
         54:11:2a:f4:9a:e3:14:b7:ea:7a:e2:4c:b6:14:74:1e:38:f1:
         48:df:7d:3e:ca:53:f8:1d:f1:b5:1e:bf:96:55:78:da:75:8c:
         4d:15:a1:66:48:51:92:34:fe:9b:f2:d4:28:84:a2:e8:1c:37:
         03:f5:de:db:64:d0:8b:8c:8d:92:c1:57:e0:74:0c:5a:31:72:
         e7:7b:4d:b2:20:39:2d:79:39:ff:7d:fa:dd:87:58:37:a6:b0:
         e9:dd:12:74:dc:60:fe:01:b5:80:fa:27:e6:3e:e2:d3:06:bf:
         45:48:c5:eb:ea:43:e0:d1:4f:d6:8b:c4:f7:d7:d1:1e:2b:5c:
         30:cf:87:6d:13:5d:3b:0e:72:33:73:f4:d5:c1:8d:98:91:04:
         a5:30:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org