Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/UWOl9i3SMQiKaLTo0DRKx8BOWBg.roa
File:                     UWOl9i3SMQiKaLTo0DRKx8BOWBg.roa (raw, json)
Hash identifier:          4EmqZnvlv3ozA32FuxOu2txO+2CpRyubclCQOhV7ICY=
Subject key identifier:   51:63:A5:F6:2D:D2:31:08:8A:68:B4:E8:D0:34:4A:C7:C0:4E:58:18
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       096D
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/UWOl9i3SMQiKaLTo0DRKx8BOWBg.roa
Signing time:             Wed 29 Sep 2021 02:44:36 +0000
ROA not before:           Wed 29 Sep 2021 02:44:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131593
IP address blocks:        43.251.63.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 02:44:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5163A5F62DD231088A68B4E8D0344AC7C04E5818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:46:8e:00:96:e4:e0:b1:4a:b2:ad:e7:36:
                    55:d2:90:02:0e:8a:87:63:00:6b:df:d4:17:91:2a:
                    66:57:9f:8f:57:c9:9f:6b:ff:8b:88:e4:29:34:db:
                    36:02:a2:90:60:ce:2a:15:1c:ea:69:af:91:42:86:
                    73:71:df:2c:c0:41:89:a2:35:7f:3d:c9:1b:e1:5e:
                    53:f3:8b:11:48:53:ea:ba:a5:50:c6:5c:aa:13:90:
                    93:55:aa:85:1d:9c:f2:eb:54:89:32:54:26:5a:cb:
                    61:fd:5e:ca:ab:43:bd:94:bd:75:a4:a7:13:a3:06:
                    2d:0f:14:60:93:2f:d6:3f:9c:8c:30:78:36:e5:85:
                    b2:5e:d2:9b:49:11:26:2c:2e:aa:f1:7d:87:3e:f2:
                    e3:52:ef:7e:9e:ac:bd:9e:a7:77:c8:ed:0c:cf:5d:
                    f6:a1:60:35:20:cb:c1:ba:73:f6:c9:9e:65:53:00:
                    cd:83:59:36:39:54:a6:a0:33:b1:17:06:72:44:6d:
                    6e:b6:74:0b:d5:c2:ca:b8:f3:cc:2d:70:fb:28:84:
                    a5:7d:30:8d:6c:a3:0c:f4:a4:c4:e8:29:d1:63:7c:
                    a1:80:13:f4:a5:bb:75:9c:da:cf:ed:e9:08:bb:80:
                    5d:08:ce:8b:c7:95:dc:1c:f2:0c:a1:91:30:10:fd:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:63:A5:F6:2D:D2:31:08:8A:68:B4:E8:D0:34:4A:C7:C0:4E:58:18
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/UWOl9i3SMQiKaLTo0DRKx8BOWBg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:7a:7a:69:76:c4:35:1c:47:fd:19:ff:d2:ab:42:a9:85:
         4d:a6:9b:63:6e:89:d6:9b:ee:15:7d:88:1d:09:41:ee:41:f0:
         05:43:97:54:b8:ce:d7:5c:06:4b:cd:2e:87:d4:93:45:56:85:
         33:dc:15:a2:a0:d7:cc:f7:af:97:a8:e8:9d:7b:5c:4b:fa:74:
         94:f1:17:c1:f0:a4:99:3e:5f:c7:0f:1f:6f:b9:6d:d5:d9:f1:
         fe:eb:0c:68:aa:41:8e:a2:17:ef:d8:71:a0:12:9f:29:85:b6:
         5b:7d:30:a2:2f:51:00:dc:06:61:a9:39:1d:03:1f:62:8c:25:
         61:33:19:48:f5:7f:74:fe:fb:fd:70:5c:f6:3c:5c:7e:69:51:
         b5:e2:55:e5:53:1e:ba:bb:34:fc:f0:0f:4f:32:e4:12:7f:8d:
         15:03:a5:ed:68:2d:37:c5:7c:7b:76:3d:9a:3a:1f:96:f2:cf:
         57:4e:c3:2d:68:e8:57:10:ac:6d:96:58:fb:56:54:00:4c:a7:
         03:ad:a9:5f:1e:b3:7b:e2:a3:cf:35:8d:ef:b7:e3:a4:0c:b3:
         4a:78:d4:8e:21:06:aa:a9:f2:c4:ee:87:2b:86:44:47:64:0b:
         fc:5f:0e:f6:66:8e:3e:9e:4b:96:31:80:40:ac:7a:fa:42:df:
         ac:b9:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:35 2025 by rpki-client