Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XeH3sr5HxutMCxTgOGZD0lEG47Q.roa
File:                     XeH3sr5HxutMCxTgOGZD0lEG47Q.roa (raw, json)
Hash identifier:          7Yie+dT4z8Z4W8C+/ujnx2F0RdTH14LjJGCzlKlnt2I=
Subject key identifier:   5D:E1:F7:B2:BE:47:C6:EB:4C:0B:14:E0:38:66:43:D2:51:06:E3:B4
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0A5B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XeH3sr5HxutMCxTgOGZD0lEG47Q.roa
Signing time:             Thu 15 Sep 2022 02:44:13 +0000
ROA not before:           Thu 15 Sep 2022 02:44:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131593
IP address blocks:        103.42.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 15 02:44:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5DE1F7B2BE47C6EB4C0B14E0386643D25106E3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:77:29:90:9d:f5:83:a9:9b:0f:10:8d:04:
                    1e:9c:dc:93:0d:1d:70:4f:19:25:bd:da:d3:cf:b8:
                    cb:35:8f:d5:db:a8:d8:d4:fc:8b:86:48:e6:81:f4:
                    88:eb:1d:96:73:7a:18:4f:a5:d9:35:70:89:b6:16:
                    d7:00:02:c5:8d:fb:ef:3c:1c:ca:6c:f2:42:75:f9:
                    99:a0:f4:a8:6d:cf:76:1b:53:ba:76:e6:ca:c0:53:
                    fa:b0:2b:3d:e1:e1:c4:be:72:a7:12:85:5e:8a:2c:
                    e3:d8:f0:13:21:59:c2:72:f5:01:00:6f:28:51:6e:
                    b2:b9:4a:2e:a1:7a:98:f2:df:2b:3d:4e:83:db:64:
                    62:bf:e1:bd:f2:dd:a4:f4:db:ad:c9:5b:6f:69:95:
                    22:d9:b8:f6:34:b5:7b:fb:e1:a8:a6:cb:94:38:98:
                    87:91:d7:5e:49:a0:91:76:7f:ca:4a:79:e0:c0:fd:
                    f2:d3:62:a1:c3:18:f6:cd:3a:5e:f2:65:a8:e1:18:
                    53:56:47:3a:42:bb:b5:f8:97:50:1c:e5:06:3f:6f:
                    30:7e:5e:26:29:55:74:b6:d1:4c:80:76:a7:33:41:
                    f6:58:d1:5f:07:42:7c:02:48:14:73:96:91:30:d3:
                    36:6a:38:2f:8f:4d:fd:18:a9:e5:59:2d:b6:fd:f8:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E1:F7:B2:BE:47:C6:EB:4C:0B:14:E0:38:66:43:D2:51:06:E3:B4
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/XeH3sr5HxutMCxTgOGZD0lEG47Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:56:10:90:f6:5d:d8:4b:3f:83:15:1a:04:da:b2:2a:7a:
         8f:ff:74:08:20:6a:20:8e:47:57:e6:87:91:a0:18:a3:32:52:
         74:c2:5a:43:18:08:d9:e2:e3:b7:3e:62:69:71:59:b9:b2:41:
         bf:a3:94:79:2d:81:a0:bd:24:0b:52:28:aa:dd:2a:03:19:17:
         06:8f:93:01:e7:39:52:aa:44:e8:73:aa:a6:c2:ef:d5:39:97:
         90:c5:c0:ca:91:09:a1:cc:71:ca:8e:f5:30:74:f4:4d:22:bf:
         3d:0a:67:c7:d4:ba:43:9b:d1:5f:d2:af:bc:8e:95:65:fd:79:
         75:9d:4e:a0:12:0b:77:ae:e9:fb:22:20:4f:b3:76:1a:e7:5d:
         6f:31:0d:48:5a:6a:40:bc:55:18:af:4c:79:b2:c3:7c:93:b9:
         97:02:aa:8e:d6:9b:66:25:2f:1d:f1:10:88:f8:cf:33:0e:6c:
         8a:7c:d7:3c:b7:f9:b6:8d:18:b4:20:bc:84:48:94:3f:84:81:
         18:f6:71:db:cf:41:57:84:e5:aa:36:72:8a:f6:28:7b:73:e7:
         90:50:76:61:53:d0:bb:de:2b:af:89:27:e7:39:40:49:6a:b9:
         e2:c2:72:68:be:6f:55:8d:07:2a:d9:fa:ea:e6:9d:ec:8a:9c:
         d5:45:11:8e
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICClswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yMjA5MTUw
MjQ0MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVERTFGN0IyQkU0N0M2
RUI0QzBCMTRFMDM4NjY0M0QyNTEwNkUzQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzV3cpkJ31g6mbDxCNBB6c3JMNHXBPGSW92tPPuMs1j9XbqNjU
/IuGSOaB9IjrHZZzehhPpdk1cIm2FtcAAsWN++88HMps8kJ1+Zmg9Khtz3YbU7p2
5srAU/qwKz3h4cS+cqcShV6KLOPY8BMhWcJy9QEAbyhRbrK5Si6hepjy3ys9ToPb
ZGK/4b3y3aT0263JW29plSLZuPY0tXv74aimy5Q4mIeR115JoJF2f8pKeeDA/fLT
YqHDGPbNOl7yZajhGFNWRzpCu7X4l1Ac5QY/bzB+XiYpVXS20UyAdqczQfZY0V8H
QnwCSBRzlpEw0zZqOC+PTf0YqeVZLbb9+N1BAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUXeH3sr5HxutMCxTgOGZD0lEG47QwHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9YZUgzc3I1SHh1dE1D
eFRnT0daRDBsRUc0N1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZyqUMA0GCSqGSIb3DQEBCwUAA4IBAQBlfFYQkPZd2Es/gxUaBNqyKnqP/3QI
IGogjkdX5oeRoBijMlJ0wlpDGAjZ4uO3PmJpcVm5skG/o5R5LYGgvSQLUiiq3SoD
GRcGj5MB5zlSqkToc6qmwu/VOZeQxcDKkQmhzHHKjvUwdPRNIr89CmfH1LpDm9Ff
0q+8jpVl/Xl1nU6gEgt3run7IiBPs3Ya511vMQ1IWmpAvFUYr0x5ssN8k7mXAqqO
1ptmJS8d8RCI+M8zDmyKfNc8t/m2jRi0ILyESJQ/hIEY9nHbz0FXhOWqNnKK9ih7
c+eQUHZhU9C73iuviSfnOUBJarniwnJovm9VjQcq2frq5p3sipzVRRGO
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org