Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/KPrRMXfoiW599gOH_7F_1rQRAdE.roa
File:                     KPrRMXfoiW599gOH_7F_1rQRAdE.roa (raw, json)
Hash identifier:          U6vT3+v9wdbSDLAQUUH5fwDf6sABq7lnKoezbri9M/E=
Subject key identifier:   28:FA:D1:31:77:E8:89:6E:7D:F6:03:87:FF:B1:7F:D6:B4:11:01:D1
Certificate issuer:       /CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Certificate serial:       0A3D
Authority key identifier: 9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/KPrRMXfoiW599gOH_7F_1rQRAdE.roa
Signing time:             Thu 15 Sep 2022 02:42:08 +0000
ROA not before:           Thu 15 Sep 2022 02:42:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     3462
IP address blocks:        103.24.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
        Validity
            Not Before: Sep 15 02:42:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=28FAD13177E8896E7DF60387FFB17FD6B41101D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:2b:7d:8d:bd:6e:3c:b9:3b:28:33:f8:1b:
                    e6:70:9a:59:32:22:ea:3b:42:00:d4:18:6a:06:62:
                    1b:a6:2f:c1:7f:9d:dc:e4:1b:77:eb:69:46:55:f2:
                    38:76:38:e5:a5:a9:5b:2b:a8:06:0f:63:85:33:76:
                    82:52:9c:16:67:91:1c:26:9f:31:bc:9a:17:8d:33:
                    ef:dd:3c:a0:71:67:f0:55:c8:d0:9e:8f:83:e3:a1:
                    83:24:44:9a:7b:b1:41:0f:e8:c5:57:c5:7a:33:aa:
                    98:b3:89:b4:a4:45:fb:25:b5:e8:40:11:95:20:0e:
                    bc:c0:87:21:91:85:ee:08:58:ad:b5:0c:d7:0a:e5:
                    f4:71:6e:c0:20:0c:eb:98:0d:c3:29:01:0b:6f:c5:
                    bf:32:ef:65:ba:80:fd:80:5b:18:df:c4:9a:50:d2:
                    2d:0c:26:12:de:1e:d1:f8:9e:ae:10:ef:3d:cb:33:
                    fd:99:13:9e:8f:a4:73:e0:0a:fe:2e:7a:ff:7a:b6:
                    b8:c5:6c:fe:6b:4c:d3:40:44:69:51:85:89:24:cc:
                    0a:86:45:c8:0b:fa:42:18:9a:e4:5b:5d:7e:c4:33:
                    c0:26:b9:63:78:3e:b3:5f:9d:a2:52:4e:02:15:4f:
                    96:a5:02:01:e3:fe:4b:ed:bb:b3:4c:17:1f:2b:64:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FA:D1:31:77:E8:89:6E:7D:F6:03:87:FF:B1:7F:D6:B4:11:01:D1
            X509v3 Authority Key Identifier:
                keyid:9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/KPrRMXfoiW599gOH_7F_1rQRAdE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:49:59:15:58:7a:91:44:ef:85:43:70:b5:a2:63:5b:e7:ba:
         68:8d:ff:10:33:cc:5b:37:62:83:cc:2f:f3:eb:12:fe:9e:36:
         a2:bd:6d:04:33:a0:5a:7e:63:70:0f:be:ab:4d:19:a3:95:ac:
         e4:fe:82:eb:b8:58:ab:f5:5d:97:c3:4b:53:18:d6:f4:57:46:
         96:d6:03:31:17:a6:63:39:40:65:9b:02:ec:42:cb:cb:9c:b7:
         07:1a:ee:c5:7b:d5:7f:df:58:a2:33:89:9e:d0:03:07:12:20:
         b7:4b:01:e1:cb:50:26:2c:96:05:e3:07:c2:fa:e0:c5:f9:5b:
         4c:a4:cb:e1:2f:76:8e:de:d4:98:f9:4f:85:64:99:98:a3:3a:
         7d:7c:4c:53:d6:e7:2d:fd:78:25:ff:fd:99:c9:a5:f7:32:54:
         af:0e:76:4f:5c:ee:d1:44:4d:ac:f5:65:44:d5:e0:82:de:c8:
         49:8f:fe:6c:bc:b8:57:72:3f:b7:90:23:10:83:7c:15:55:8b:
         6d:83:af:2a:5a:8e:c4:d7:9d:a5:68:bc:fd:dd:1b:b7:9f:cd:
         ea:7a:93:6f:92:13:49:a1:d3:fc:54:79:89:e8:17:ab:30:91:
         51:db:cb:bc:64:91:3d:43:45:32:f6:2c:23:1f:6b:14:70:f4:
         f8:fe:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org