Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XUX9RGgwT4Wq1OKmN4o4h_pw6Yk.roa
File:                     XUX9RGgwT4Wq1OKmN4o4h_pw6Yk.roa (raw, json)
Hash identifier:          uPooZZCRfE6A4fhTFJxMFY1vCvJMjZeSbs8qTagiSI0=
Subject key identifier:   5D:45:FD:44:68:30:4F:85:AA:D4:E2:A6:37:8A:38:87:FA:70:E9:89
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0828
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XUX9RGgwT4Wq1OKmN4o4h_pw6Yk.roa
Signing time:             Fri 06 Nov 2020 01:42:15 +0000
ROA not before:           Fri 06 Nov 2020 01:42:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        103.42.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Nov  6 01:42:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5D45FD4468304F85AAD4E2A6378A3887FA70E989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:37:40:1b:f4:a6:11:11:11:05:90:13:2e:8b:
                    38:de:90:58:2d:71:4a:af:cf:8d:c4:f7:3c:d5:99:
                    9f:02:f4:a9:88:6e:06:32:e4:9c:2e:ef:dc:fa:ab:
                    b9:cd:07:6f:5e:5c:18:56:da:2f:e1:2f:cf:de:f0:
                    37:89:bd:d5:4a:61:0c:2a:d2:61:5f:73:99:25:6e:
                    cf:db:80:c5:f4:ea:fc:32:e9:44:fa:31:51:d3:c1:
                    11:d5:4e:33:64:9f:17:49:32:6c:a3:64:d4:43:0d:
                    f4:96:27:6e:d2:7e:3b:1d:fe:d6:df:bd:ea:12:89:
                    a5:1b:85:6a:6d:fc:f5:65:48:28:5f:1b:10:73:a0:
                    39:7b:42:9d:5f:dc:20:13:49:9d:f3:9e:e8:93:8e:
                    2d:f3:ec:bc:a0:d6:f1:96:8d:16:d5:e9:f1:3e:30:
                    2f:07:ed:fa:0a:bd:59:31:ee:ab:fb:db:d1:db:8e:
                    2f:6e:bd:a7:be:b0:6a:bd:8d:80:36:ee:69:fc:98:
                    35:10:ba:a8:cb:d9:c8:24:ef:8f:7d:5a:fd:03:7b:
                    c7:ba:61:5e:22:df:27:da:53:da:b1:06:74:ae:af:
                    9c:0c:88:19:bf:87:4f:b8:ec:f6:9e:20:45:22:46:
                    5e:f2:8c:8c:c3:8f:26:7e:f7:34:0e:a4:0d:99:45:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:45:FD:44:68:30:4F:85:AA:D4:E2:A6:37:8A:38:87:FA:70:E9:89
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XUX9RGgwT4Wq1OKmN4o4h_pw6Yk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:58:5c:2a:dd:1d:d2:ec:e2:65:d5:79:a0:38:0c:89:75:
         4e:64:8b:84:12:61:ff:d0:0f:4c:59:c6:bc:06:d4:47:79:b6:
         20:7e:a7:0f:ca:11:15:2d:91:4c:ca:83:3c:5f:0e:da:94:81:
         49:62:ae:b5:1f:6c:09:12:4a:9a:aa:a7:7c:f1:c7:a3:8a:bc:
         e0:96:95:7d:66:a5:50:2f:d3:86:bd:59:ff:7b:11:2a:88:e0:
         ad:1a:53:e7:2b:b0:4f:40:5f:53:37:48:f4:3c:1b:66:35:58:
         9c:5b:ba:1c:14:1f:4d:dc:28:b7:b2:3c:a3:15:f0:ec:93:ec:
         4b:14:3f:84:33:26:21:b3:65:e1:45:f6:86:01:69:28:c3:bf:
         fc:81:78:a9:c8:19:44:a2:fc:81:e6:6d:4a:bd:75:91:d1:01:
         42:30:95:54:09:3e:8d:89:76:62:8c:7a:6b:52:2a:81:f8:62:
         74:cd:3a:38:00:c2:98:07:0d:f8:14:53:30:29:72:b5:f0:f8:
         24:c5:94:90:fd:4e:3d:3b:3f:53:81:ee:ff:20:1a:25:24:00:
         04:36:b7:7e:cf:c5:2e:79:74:6c:9b:9f:87:e7:c0:b7:db:72:
         72:e8:37:02:c3:77:6a:f7:2b:ef:44:05:2e:6b:47:ec:df:53:
         e0:3b:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org