Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/YE0X190fTZ0dTMuiHqJUe2RsPuk.roa
File:                     YE0X190fTZ0dTMuiHqJUe2RsPuk.roa (raw, json)
Hash identifier:          axRv0I5/eER7cGKh791nw4RaIka4R8axpowmZkXA48I=
Subject key identifier:   60:4D:17:D7:DD:1F:4D:9D:1D:4C:CB:A2:1E:A2:54:7B:64:6C:3E:E9
Certificate issuer:       /CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Certificate serial:       0775
Authority key identifier: 9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/YE0X190fTZ0dTMuiHqJUe2RsPuk.roa
Signing time:             Tue 29 Sep 2020 10:04:52 +0000
ROA not before:           Tue 29 Sep 2020 10:04:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        2407:4700::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
        Validity
            Not Before: Sep 29 10:04:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=604D17D7DD1F4D9D1D4CCBA21EA2547B646C3EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:a2:ba:ad:90:b3:42:63:84:29:f9:78:4d:
                    b8:7a:09:11:61:58:30:bc:48:bc:7a:b5:0f:6b:05:
                    9b:61:cf:16:ae:bd:4d:36:57:29:75:82:5d:13:8f:
                    fb:38:c9:fe:fc:c2:bf:da:c2:72:25:a0:d3:ca:21:
                    78:a3:22:69:92:c4:59:96:bd:0d:b0:ab:20:52:08:
                    f7:d9:88:42:1a:28:5b:93:27:18:a4:b5:1f:e7:2a:
                    b9:84:44:52:1c:3e:65:dd:3a:34:6a:ce:9d:14:24:
                    0b:8c:5b:05:c0:39:8a:e4:5b:c6:6d:3a:61:79:66:
                    5d:7e:94:22:a7:2c:73:65:65:2a:4c:49:0f:34:04:
                    fe:05:3a:b1:a2:45:9b:b6:c3:19:f2:e0:7f:1a:00:
                    e7:f2:8c:a7:09:a9:04:4d:fa:58:a2:a5:3c:53:79:
                    34:b2:e4:94:82:15:6c:11:29:d8:f3:ac:f2:d2:a8:
                    85:87:a5:22:a6:c2:13:10:1d:ae:7d:74:da:04:5e:
                    c2:f0:55:ac:73:a4:bf:b0:41:df:2d:18:3b:48:3a:
                    67:2a:05:eb:72:02:99:04:54:7f:fd:59:2b:68:e6:
                    6d:ec:40:cc:0d:41:ce:6b:88:c4:83:c9:a5:67:f7:
                    4c:f1:4a:25:a2:29:30:d5:97:39:bd:33:3c:57:5b:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:17:D7:DD:1F:4D:9D:1D:4C:CB:A2:1E:A2:54:7B:64:6C:3E:E9
            X509v3 Authority Key Identifier:
                keyid:9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/YE0X190fTZ0dTMuiHqJUe2RsPuk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4700::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:20:23:4b:95:5c:41:2f:0c:45:1b:ff:1c:20:c4:72:29:be:
         3d:ff:b9:9f:3a:63:ae:6e:83:b0:1d:62:6a:e9:5f:b6:65:3c:
         0b:5a:9e:03:d7:3a:31:5e:2a:b6:1b:ca:5d:60:38:bc:d3:d6:
         c6:02:2c:09:e4:21:44:c7:24:e1:fb:cd:ee:63:50:c6:f2:1d:
         c7:82:df:b6:88:ba:31:1e:57:7d:3f:66:93:74:0a:f3:b6:ec:
         2e:5f:57:61:bb:2f:36:36:a8:94:92:d2:8b:96:04:15:3b:7c:
         e9:4a:44:8f:10:f0:27:0a:45:e8:6e:95:c8:6e:57:60:9d:45:
         44:ce:ae:61:58:9b:be:20:79:4b:10:8b:84:63:01:d7:7a:26:
         6a:1c:f5:67:cf:f7:39:48:65:47:a5:69:b0:24:20:8d:2a:29:
         eb:b1:e4:67:35:cb:3b:30:02:64:b5:aa:d7:56:33:e1:1c:23:
         db:2b:70:4d:cb:77:f6:38:2c:e2:1a:4a:b5:4e:77:b3:a0:a1:
         0f:b0:9c:13:fd:fd:82:4c:26:35:a4:01:56:6d:95:14:6b:e1:
         9f:fa:0f:b9:64:47:80:3f:44:45:2b:03:51:5e:d5:06:ca:20:
         38:ff:ef:e6:74:2d:2e:84:26:a2:8d:9c:2b:81:2b:b7:64:14:
         75:62:2b:51
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUVD
QkYxNzBGN0Y3RDIyOTBFNkFFRDM5Q0E4RDIzOEY2NjA3MkI3QTAeFw0yMDA5Mjkx
MDA0NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYwNEQxN0Q3REQxRjRE
OUQxRDRDQ0JBMjFFQTI1NDdCNjQ2QzNFRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoLaK6rZCzQmOEKfl4Tbh6CRFhWDC8SLx6tQ9rBZthzxauvU02
Vyl1gl0Tj/s4yf78wr/awnIloNPKIXijImmSxFmWvQ2wqyBSCPfZiEIaKFuTJxik
tR/nKrmERFIcPmXdOjRqzp0UJAuMWwXAOYrkW8ZtOmF5Zl1+lCKnLHNlZSpMSQ80
BP4FOrGiRZu2wxny4H8aAOfyjKcJqQRN+liipTxTeTSy5JSCFWwRKdjzrPLSqIWH
pSKmwhMQHa59dNoEXsLwVaxzpL+wQd8tGDtIOmcqBetyApkEVH/9WSto5m3sQMwN
Qc5riMSDyaVn90zxSiWiKTDVlzm9MzxXW6zlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUYE0X190fTZ0dTMuiHqJUe2RsPukwHwYDVR0jBBgwFoAUnsvxcPf30ikOau05
yo0jj2YHK3owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEFOREJB
TksvbnN2eGNQZjMwaWtPYXUwNXlvMGpqMllISzNvLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9uc3Z4Y1BmMzBpa09hdTA1eW8wamoyWUhLM28uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MQU5EQkFOSy9ZRTBYMTkwZlRaMGRU
TXVpSHFKVWUyUnNQdWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAdHADANBgkqhkiG9w0BAQsFAAOCAQEANiAjS5VcQS8MRRv/HCDEcim+Pf+5
nzpjrm6DsB1iaulftmU8C1qeA9c6MV4qthvKXWA4vNPWxgIsCeQhRMck4fvN7mNQ
xvIdx4Lftoi6MR5XfT9mk3QK87bsLl9XYbsvNjaolJLSi5YEFTt86UpEjxDwJwpF
6G6VyG5XYJ1FRM6uYVibviB5SxCLhGMB13omahz1Z8/3OUhlR6VpsCQgjSop67Hk
ZzXLOzACZLWq11Yz4Rwj2ytwTct39jgs4hpKtU53s6ChD7CcE/39gkwmNaQBVm2V
FGvhn/oPuWRHgD9ERSsDUV7VBsogOP/v5nQtLoQmoo2cK4Ert2QUdWIrUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org