Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/gIAy82UdzzXawEIjo1TGQHfbSvI.roa
File:                     gIAy82UdzzXawEIjo1TGQHfbSvI.roa (raw, json)
Hash identifier:          PqmtvanTCxcRAvy5xVCZm5jY4X5DaTy2SIKmdzS1Tt4=
Subject key identifier:   80:80:32:F3:65:1D:CF:35:DA:C0:42:23:A3:54:C6:40:77:DB:4A:F2
Certificate issuer:       /CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Certificate serial:       0953
Authority key identifier: 9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/gIAy82UdzzXawEIjo1TGQHfbSvI.roa
Signing time:             Wed 29 Sep 2021 02:42:22 +0000
ROA not before:           Wed 29 Sep 2021 02:42:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     3462
IP address blocks:        2407:4700::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
        Validity
            Not Before: Sep 29 02:42:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=808032F3651DCF35DAC04223A354C64077DB4AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:f7:a5:4d:e5:6f:d3:28:ba:6a:4a:52:15:
                    af:fd:be:39:1d:2d:1b:48:dc:06:e6:d6:00:57:fe:
                    48:04:4b:d2:f2:ba:9f:00:ff:44:e9:90:d9:17:54:
                    00:e8:63:d6:27:4c:9e:72:47:70:b6:59:c2:e8:1a:
                    a2:5c:68:41:fc:ef:f1:2c:3a:4a:09:73:39:17:90:
                    2a:eb:d7:e9:ea:03:07:21:e1:d5:92:bc:e3:72:b4:
                    0d:07:7c:f2:bf:50:9d:b4:d5:d8:f9:5e:3f:58:68:
                    7b:6f:5c:07:4c:a0:0b:90:65:b3:6a:b0:8b:d3:cb:
                    f0:42:1e:9a:58:d4:30:e0:87:a8:3b:e4:3d:f6:0e:
                    d8:52:ea:2c:46:3a:49:a7:d4:24:29:15:08:45:63:
                    5f:b8:56:5a:bb:1c:ce:03:56:06:ae:ac:a5:1a:81:
                    72:a6:72:8b:09:3b:02:a9:e2:e3:35:23:21:3f:0b:
                    f4:34:a7:72:83:14:05:44:3b:7e:30:1e:14:84:16:
                    62:ef:93:a4:e8:6a:b0:06:f5:8c:05:b7:33:1e:7d:
                    94:ea:63:96:5b:f2:0a:29:69:bd:65:92:97:50:4a:
                    0a:f3:7d:44:6a:dc:21:89:30:e0:2c:8d:0f:3e:a6:
                    2c:84:23:a1:ee:b5:ab:4a:e9:6b:b5:87:f8:b1:af:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:80:32:F3:65:1D:CF:35:DA:C0:42:23:A3:54:C6:40:77:DB:4A:F2
            X509v3 Authority Key Identifier:
                keyid:9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/gIAy82UdzzXawEIjo1TGQHfbSvI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4700::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:38:95:80:4f:47:f2:49:ee:02:33:63:33:1a:ea:bb:f4:
         8c:ac:a8:1e:66:a5:91:3e:69:c7:71:c4:d2:6f:b6:a3:66:b5:
         7f:28:09:b1:75:61:02:39:7b:6e:ba:58:89:42:5b:c0:c7:03:
         17:57:c6:11:f8:50:8f:6c:66:3f:b4:a9:c9:b9:b1:34:a5:5e:
         60:0e:1c:53:72:75:c5:65:ef:37:3d:6e:df:33:99:e2:d4:a7:
         84:1d:b8:aa:0d:e1:3e:ee:bf:75:ec:b7:09:a1:6d:72:ff:fe:
         94:bc:0e:4d:c6:1b:e5:e7:b0:3e:e7:4a:02:2b:51:54:0b:b9:
         88:d5:af:96:01:8f:b9:43:27:38:34:0e:64:df:ba:fe:17:dd:
         8a:54:3c:d3:b1:08:ae:d7:ad:d2:84:8a:3a:9f:d5:3d:88:d6:
         95:08:63:63:ec:eb:44:45:8d:74:e2:0a:04:18:cd:f1:28:1a:
         f3:17:57:6a:d9:13:3e:3e:72:ff:63:0e:f1:2a:b1:b9:09:0f:
         19:f9:43:d4:16:bb:f2:30:e5:ae:64:fd:6d:9f:37:e4:87:24:
         d3:54:b3:d7:16:03:f8:6f:70:8a:c6:d3:c1:ca:d4:af:da:e5:
         b5:0a:a3:2a:99:b5:48:56:34:95:e1:2b:3a:ed:3a:9e:e7:73:
         d4:9c:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org