Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/dsGnliCZlRrKfbHFTb-zHqc3npo.roa
File:                     dsGnliCZlRrKfbHFTb-zHqc3npo.roa (raw, json)
Hash identifier:          bS6bev536s3MwogOA/EjC9pOSageSJ3d8L/UGz+JV5Y=
Subject key identifier:   76:C1:A7:96:20:99:95:1A:CA:7D:B1:C5:4D:BF:B3:1E:A7:37:9E:9A
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0760
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/dsGnliCZlRrKfbHFTb-zHqc3npo.roa
Signing time:             Tue 29 Sep 2020 10:05:28 +0000
ROA not before:           Tue 29 Sep 2020 10:05:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        43.251.61.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 10:05:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=76C1A7962099951ACA7DB1C54DBFB31EA7379E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:87:eb:5b:86:d3:47:06:fb:3e:b7:e1:9a:
                    6e:36:3f:30:9c:0d:da:36:6e:f8:24:a1:2d:81:11:
                    45:d4:7c:ea:ad:26:a4:ac:ec:fb:b9:62:3b:e1:2a:
                    f1:72:07:1d:2d:52:5e:c7:5d:3a:a3:34:f5:39:fa:
                    5b:d5:29:a7:33:a9:5e:85:81:19:53:3f:20:70:d3:
                    50:0a:2a:85:07:15:1e:60:d0:a3:d9:83:cc:55:27:
                    5e:60:d3:0e:2f:62:53:8d:87:5c:e4:49:98:70:0a:
                    cf:af:1c:5a:27:20:ae:d4:28:3a:46:2f:26:62:6d:
                    52:29:01:be:bf:de:56:cd:d1:b4:da:aa:72:ff:01:
                    49:de:a4:85:13:1c:35:46:6a:ff:41:09:ad:f8:a0:
                    d4:87:a9:9e:2b:d0:1e:22:1d:16:e2:81:54:cf:ed:
                    b4:2b:d7:60:c6:6b:65:95:1e:5c:bc:51:c3:72:31:
                    03:2f:ae:24:87:80:3a:ef:4c:83:f2:e9:67:7c:d9:
                    3b:4b:b5:64:4a:3d:a3:2f:13:02:e5:44:cd:0b:22:
                    58:d0:95:18:f2:36:e6:f3:60:2e:54:5b:77:a1:7d:
                    e3:47:e8:8d:8d:90:80:c2:c3:6e:b8:72:d8:4b:f8:
                    c2:92:20:9e:55:af:8a:8b:b9:e9:9a:76:99:4c:e0:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:A7:96:20:99:95:1A:CA:7D:B1:C5:4D:BF:B3:1E:A7:37:9E:9A
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/dsGnliCZlRrKfbHFTb-zHqc3npo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:36:f0:a9:54:98:fa:24:72:e1:b9:4a:6e:f7:02:a1:1b:
         a8:11:2d:f2:1f:32:f8:d5:e9:ed:01:f0:f8:e1:46:ab:8d:fc:
         cf:c2:dc:a6:a5:54:9e:f4:78:39:ff:81:74:ad:c5:85:f7:4f:
         db:f4:a6:47:1c:69:1e:f6:af:0b:36:81:18:a8:53:df:07:ac:
         9a:8a:c8:87:1a:62:39:bf:e6:fc:b5:35:c9:f5:cc:b5:35:6a:
         e5:cd:da:28:ca:27:28:ea:87:d9:9e:5c:bc:21:f3:09:60:b1:
         08:67:f1:da:f4:d0:92:ab:5e:c3:04:b0:6d:18:2f:f7:19:00:
         6e:14:e2:db:d3:c6:bf:68:61:9b:24:e3:ae:ec:9b:15:5a:ff:
         41:e2:52:ea:2a:dc:a7:38:52:d0:3c:9e:47:0a:4f:12:c1:97:
         1a:a3:b0:f6:4d:c3:16:96:dd:fc:31:c7:85:34:92:d6:a5:27:
         7e:22:b7:4c:7f:d3:83:bd:a9:a7:66:d3:ec:c2:98:26:31:41:
         b9:8e:cc:9a:b3:c9:9e:b5:f7:49:38:46:f7:32:f4:0d:37:d9:
         a8:e8:05:91:0c:76:d2:48:c8:0b:d0:45:98:de:48:86:20:eb:
         e0:9e:2a:b9:74:94:ac:8b:83:8d:62:c1:63:56:07:98:10:45:
         93:1c:12:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:13 2025 by rpki-client