Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/nxSCyzDxbwS3hFpxL6VeDEkMxaU.roa
File:                     nxSCyzDxbwS3hFpxL6VeDEkMxaU.roa (raw, json)
Hash identifier:          CxeI/1iyHuzoTLo3ngazxLtHtNqUEto3rZ8hEs1PkbE=
Subject key identifier:   9F:14:82:CB:30:F1:6F:04:B7:84:5A:71:2F:A5:5E:0C:49:0C:C5:A5
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       082A
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/nxSCyzDxbwS3hFpxL6VeDEkMxaU.roa
Signing time:             Fri 06 Nov 2020 01:46:59 +0000
ROA not before:           Fri 06 Nov 2020 01:46:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131593
IP address blocks:        103.42.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Nov  6 01:46:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9F1482CB30F16F04B7845A712FA55E0C490CC5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:13:10:b9:6f:23:a0:94:3b:43:28:e7:11:
                    19:8d:5d:c2:0d:78:5a:12:6b:51:1e:0c:1b:c7:ce:
                    93:a1:4e:cb:fb:09:45:e4:1c:cd:bd:f2:80:d7:6a:
                    1e:9f:6e:54:42:ec:78:c3:85:63:43:55:13:ad:d3:
                    14:93:68:8e:75:b6:6e:5b:83:8c:dd:6c:cd:ba:13:
                    98:f4:95:14:2b:9f:bf:0f:e7:d9:76:d2:f3:d8:15:
                    76:7e:7e:d0:5d:bc:fc:47:7e:9e:01:2d:f1:7e:f3:
                    27:55:67:ec:80:b3:1b:5a:df:a8:02:d5:61:54:de:
                    f0:ce:5b:b4:76:59:84:7e:7c:3b:8f:ab:bb:78:22:
                    7b:8b:83:21:fa:56:28:10:99:28:af:28:8a:0f:69:
                    26:72:10:c0:56:1f:15:6a:3b:a0:26:4d:06:10:10:
                    cc:11:6d:2c:64:94:20:9a:f2:77:72:03:13:2b:be:
                    03:70:32:79:6c:4b:8b:b9:f7:77:ab:6b:cf:52:e5:
                    83:ad:a9:57:35:bd:13:6d:0a:a2:71:cc:cc:74:40:
                    53:42:b8:43:39:b3:c7:b6:17:32:41:7b:07:59:d1:
                    f5:64:94:c9:e3:90:62:3a:a8:5c:2f:67:ff:c7:e0:
                    b7:2b:99:e5:66:70:3a:01:d0:05:70:15:e3:fc:b5:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:82:CB:30:F1:6F:04:B7:84:5A:71:2F:A5:5E:0C:49:0C:C5:A5
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/nxSCyzDxbwS3hFpxL6VeDEkMxaU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:57:be:72:75:e5:91:80:9c:8d:b1:3c:73:4b:76:ba:65:
         d1:75:c4:ec:a5:83:6e:e0:76:f3:86:d6:c4:3e:0f:da:4b:07:
         4a:e0:f9:8c:cb:05:e2:1d:23:19:72:d1:cd:9f:76:f3:e1:ab:
         1e:79:32:cc:5c:ba:22:db:a0:30:41:fc:60:3e:44:c7:c5:dd:
         e9:e5:ef:5a:87:19:97:f2:7a:d9:fb:6e:74:f0:36:4c:e0:4d:
         2b:3a:35:82:62:c3:f6:18:97:d2:e8:05:92:0b:c0:19:c6:18:
         04:2e:a5:66:75:1a:da:a4:e6:70:7e:08:4d:6f:da:e7:11:c7:
         5e:57:e8:4e:2e:90:6c:21:ce:ea:17:0c:34:7b:51:27:e9:63:
         49:83:a1:f9:90:5c:d7:8a:03:67:b9:b5:b2:b5:41:c1:a0:3d:
         ae:b3:0d:78:7a:5b:d3:3d:ad:83:ac:ad:81:32:b2:47:a2:2f:
         db:ba:c8:24:c8:17:18:62:ba:e0:02:c0:c2:0f:fe:fb:f4:e2:
         c6:05:ed:f7:e4:9b:43:5f:fe:2d:45:a9:07:23:94:62:c6:b9:
         f3:fd:5d:85:bc:c8:19:59:b2:ee:5c:8e:f0:aa:6c:1e:89:3a:
         8b:72:12:3b:c3:a1:80:10:4c:cc:54:81:49:b8:45:b9:80:26:
         b1:ca:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org