Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/cdyoqLawlmiTUvHD8gDivCZUVfE.roa
File:                     cdyoqLawlmiTUvHD8gDivCZUVfE.roa (raw, json)
Hash identifier:          eQcqr21T4w2YW4vq9nwKhyueLgiSsfVafeYZFnq3/WM=
Subject key identifier:   71:DC:A8:A8:B6:B0:96:68:93:52:F1:C3:F2:00:E2:BC:26:54:55:F1
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       08CA
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/cdyoqLawlmiTUvHD8gDivCZUVfE.roa
Signing time:             Sun 07 Feb 2021 13:05:50 +0000
ROA not before:           Sun 07 Feb 2021 13:05:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        103.42.151.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Feb  7 13:05:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=71DCA8A8B6B096689352F1C3F200E2BC265455F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:8e:0e:bc:87:61:c4:83:74:cb:f8:a8:6f:
                    7c:8e:4b:23:6f:6c:db:27:fd:51:63:1f:c9:0a:a6:
                    4d:73:3e:a9:33:67:7e:08:84:79:2e:a0:9f:a5:57:
                    69:c3:56:1d:7d:8c:ac:23:cb:94:17:b6:cb:74:ac:
                    8d:71:60:35:91:ac:20:46:ea:88:34:5a:cc:f0:df:
                    5d:93:34:64:08:bd:2f:73:c6:eb:9f:eb:fa:4c:ae:
                    01:74:d9:52:00:88:54:f2:10:c6:d6:03:20:a4:4b:
                    93:78:bc:24:89:89:4d:8e:af:2b:38:a3:00:88:04:
                    17:c7:69:ba:89:c9:9f:06:fd:6a:e1:eb:8b:1c:dc:
                    45:54:78:fe:41:5b:93:9f:0c:c6:aa:4d:4a:f9:3d:
                    e7:bd:d8:66:ca:01:23:72:bb:8c:7d:fa:64:60:5a:
                    e4:dc:5a:13:ab:dc:89:73:f9:3c:ac:9f:88:d4:d8:
                    0e:bc:41:78:01:f6:5f:de:60:92:f9:11:80:7a:bb:
                    36:0c:23:9e:4d:9c:de:73:8d:4a:98:bd:67:79:89:
                    8d:94:05:38:9a:05:77:bd:ea:ec:60:20:b4:09:c9:
                    6d:97:c3:08:d4:74:53:3c:5d:83:53:4c:16:0e:05:
                    18:50:df:4c:bf:4b:2d:33:af:7a:42:1b:22:30:7e:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DC:A8:A8:B6:B0:96:68:93:52:F1:C3:F2:00:E2:BC:26:54:55:F1
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/cdyoqLawlmiTUvHD8gDivCZUVfE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:92:9c:ca:73:c1:67:18:68:29:1e:48:6f:1f:7f:ab:64:
         b3:c7:c9:38:ef:1a:f6:66:26:68:c0:da:85:20:7c:92:35:48:
         06:67:71:f0:4c:3f:a6:80:6d:a6:f9:ba:a6:6c:2f:68:20:35:
         b1:db:95:e2:d3:bf:19:ea:f7:1d:97:3e:95:8a:39:77:e9:dd:
         07:33:dd:f5:fb:b3:35:b9:a9:d6:95:2b:2a:5b:9d:c6:48:23:
         a4:65:58:09:a9:c9:12:94:b2:ca:ca:9a:dc:99:6d:2c:1f:c4:
         87:06:bc:39:49:64:92:b9:da:08:45:04:dd:08:b2:ac:09:de:
         f3:47:07:9e:e9:35:1e:77:38:ce:92:d7:a5:3e:67:d0:08:ff:
         36:65:7a:b5:33:07:8b:80:7e:5f:b9:39:1d:5d:40:6d:8d:4a:
         59:75:9c:aa:da:7c:58:db:1e:31:5e:8e:cc:b6:32:36:9d:5a:
         9e:b8:fd:f7:37:c1:20:e5:d1:83:e7:2a:2c:05:ba:94:79:b1:
         e1:c1:42:73:31:a0:f7:39:bc:a7:6b:16:aa:86:f6:9f:df:d7:
         1c:4f:52:46:bc:da:1a:64:a2:f9:27:3f:06:f9:32:e1:eb:87:
         ee:47:71:d5:68:4d:44:c0:2e:dd:6b:94:23:a2:af:11:ed:f1:
         53:30:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:10 2025 by rpki-client