Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/xS50AaELZNrSoJbim8ToBzvBvG8.roa
File:                     xS50AaELZNrSoJbim8ToBzvBvG8.roa (raw, json)
Hash identifier:          aQJ2KUbKYXUOldCJbhaK2BoWKrWvvIevVx+IF3TsT4k=
Subject key identifier:   C5:2E:74:01:A1:0B:64:DA:D2:A0:96:E2:9B:C4:E8:07:3B:C1:BC:6F
Certificate issuer:       /CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Certificate serial:       0776
Authority key identifier: 9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/xS50AaELZNrSoJbim8ToBzvBvG8.roa
Signing time:             Tue 29 Sep 2020 10:04:52 +0000
ROA not before:           Tue 29 Sep 2020 10:04:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        103.24.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
        Validity
            Not Before: Sep 29 10:04:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C52E7401A10B64DAD2A096E29BC4E8073BC1BC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:f8:ee:fe:a6:60:79:54:76:a5:44:ee:30:
                    e4:c6:39:f2:5e:48:cf:33:eb:e4:f7:ad:f3:1f:ec:
                    67:fb:09:03:0b:27:bd:a6:57:df:1b:d6:02:f8:04:
                    aa:0a:dc:39:d2:b1:f7:9a:56:d9:d3:57:48:9e:51:
                    e2:ad:09:d1:63:00:26:4e:3f:59:ac:fe:fb:f3:85:
                    ad:a2:4d:fd:3b:3a:4b:d4:01:d3:b1:4e:bf:c5:dc:
                    0b:f6:44:f7:04:ca:a5:b5:33:f3:1a:b9:ba:f3:bc:
                    b6:da:ba:01:45:a7:35:6d:cd:23:9c:11:61:19:ae:
                    91:24:6f:e3:e3:38:01:1a:4d:b4:73:c6:f4:6d:68:
                    8f:de:b6:af:5b:ce:f1:31:1d:74:92:f8:5c:02:ef:
                    0f:00:88:88:31:e8:06:ce:f2:e3:d8:86:9f:60:a1:
                    fe:04:5e:75:ba:60:b7:1b:4a:d2:85:c0:ea:e2:7e:
                    7c:b9:62:58:02:3c:51:81:56:aa:eb:2f:05:23:2c:
                    62:ef:34:9b:1e:4e:b3:98:04:0e:7b:ed:7f:62:e5:
                    55:f1:19:77:10:f0:be:5f:75:81:3d:2a:e9:7b:53:
                    e4:45:9c:64:11:93:c8:5b:b1:1c:23:dc:da:b0:34:
                    b8:b1:23:28:98:10:c0:c4:32:35:cb:57:44:06:03:
                    22:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2E:74:01:A1:0B:64:DA:D2:A0:96:E2:9B:C4:E8:07:3B:C1:BC:6F
            X509v3 Authority Key Identifier:
                keyid:9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/xS50AaELZNrSoJbim8ToBzvBvG8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:29:aa:fc:47:98:a6:a6:a8:29:66:b5:1e:ec:0a:08:0b:
         f7:7d:d7:70:cb:9d:e4:7c:08:17:dd:f9:dd:b1:ed:a1:26:b2:
         33:e3:5a:94:e3:cd:5f:a6:80:2e:0d:c4:03:98:91:74:d6:f5:
         83:1f:b8:8d:7b:4f:b6:b9:d0:b1:09:b5:a2:0c:75:ae:ee:fd:
         cd:1b:3b:25:cc:6e:7d:09:a6:8f:54:63:01:68:c9:80:1c:fb:
         79:b3:c2:3f:b3:ac:bf:ea:dc:7a:a0:dd:3c:3f:42:78:ee:a7:
         c2:06:57:1f:5e:99:7c:70:d0:3a:a6:d8:bd:1c:4f:cd:05:e4:
         ba:48:65:75:f6:cf:eb:de:31:7c:4f:33:0c:dc:2c:b3:2e:e9:
         78:92:52:9e:a1:72:33:ed:73:0e:ef:7c:27:8d:26:6b:46:f2:
         e5:8e:8e:ee:40:a1:3f:6e:28:d7:9d:74:da:76:87:65:f6:79:
         0e:7b:20:bd:dc:fe:92:88:ad:b2:51:51:1f:a3:e0:c0:fb:ee:
         8a:d4:73:6c:f2:37:d3:a0:d0:6a:b0:58:21:d6:c0:bb:76:91:
         e0:50:13:0f:1b:a0:b9:7b:3b:6e:7a:8a:39:9f:43:db:6c:df:
         a1:82:bc:b0:b8:c9:cb:5a:8a:0f:e8:3f:d4:77:ef:f7:a4:29:
         e9:8b:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----