Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/QWhMdW4o9v11iP9Ypb71H1pwYF8.roa
File:                     QWhMdW4o9v11iP9Ypb71H1pwYF8.roa (raw, json)
Hash identifier:          gF8IFuW81MrdqFa21t6OY1d8mXdFvEb720lGQvFj+jU=
Subject key identifier:   41:68:4C:75:6E:28:F6:FD:75:88:FF:58:A5:BE:F5:1F:5A:70:60:5F
Certificate issuer:       /CN=6C9A1AB5E96241E0C97E2DBDF02A6354E030AA1A
Certificate serial:       05
Authority key identifier: 6C:9A:1A:B5:E9:62:41:E0:C9:7E:2D:BD:F0:2A:63:54:E0:30:AA:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/QWhMdW4o9v11iP9Ypb71H1pwYF8.roa
Signing time:             Wed 12 Mar 2025 08:08:04 +0000
ROA not before:           Wed 12 Mar 2025 08:08:04 +0000
ROA not after:            Thu 19 Feb 2026 15:30:29 +0000
asID:                     17408
IP address blocks:        163.61.184.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Fri 14 Mar 2025 06:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C9A1AB5E96241E0C97E2DBDF02A6354E030AA1A
        Validity
            Not Before: Mar 12 08:08:04 2025 GMT
            Not After : Feb 19 15:30:29 2026 GMT
        Subject: CN=41684C756E28F6FD7588FF58A5BEF51F5A70605F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:2d:a0:f8:10:70:97:86:20:f5:76:26:c2:
                    d7:b6:d3:f1:41:01:89:72:94:c0:cc:d2:f3:be:95:
                    87:fd:87:b6:0a:e6:bc:06:58:fb:db:de:95:22:cf:
                    b2:64:90:84:a5:40:78:ee:a6:72:04:ca:6b:7b:03:
                    c3:0e:3a:b7:ec:a2:c4:42:c1:3b:3f:8d:63:23:9e:
                    30:81:ba:ee:d0:16:78:53:ea:ee:5a:0f:ca:00:d5:
                    f8:34:35:d5:19:10:32:2e:29:4b:07:ac:24:81:51:
                    72:cb:87:f4:71:a3:92:2f:e8:6d:1f:b0:ca:3c:3e:
                    9c:3a:49:c2:33:74:0a:3f:0d:61:a9:ba:7d:eb:d7:
                    83:9b:7a:63:d3:71:4e:8a:d3:ac:ad:dc:db:a7:8c:
                    f0:d9:59:03:c2:0b:8d:96:6d:f6:56:45:2a:19:b6:
                    e8:c9:05:b4:33:59:16:ac:04:e6:64:b9:3f:36:cd:
                    e6:a8:b8:99:54:85:cd:11:76:f3:c5:db:f9:63:bc:
                    f9:d5:9f:72:75:19:55:08:8e:54:6c:e1:6d:02:22:
                    e0:44:89:70:86:b4:12:0b:f2:f8:3d:e6:25:63:50:
                    7f:2d:44:e5:56:53:63:78:54:e1:c8:83:3d:d2:18:
                    42:94:75:49:6d:54:2b:0c:6f:1b:0e:6e:0a:ed:22:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:4C:75:6E:28:F6:FD:75:88:FF:58:A5:BE:F5:1F:5A:70:60:5F
            X509v3 Authority Key Identifier:
                keyid:6C:9A:1A:B5:E9:62:41:E0:C9:7E:2D:BD:F0:2A:63:54:E0:30:AA:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/bJoateliQeDJfi298CpjVOAwqho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bJoateliQeDJfi298CpjVOAwqho.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOQUAN/QWhMdW4o9v11iP9Ypb71H1pwYF8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:26:06:86:72:18:42:e8:d7:d4:0c:c9:33:2a:c0:1a:95:53:
         d4:90:a7:1f:b8:e4:42:62:86:53:a0:1f:cd:ba:54:ad:35:5e:
         b3:06:44:bf:63:f1:44:40:ad:e1:40:7f:15:f5:ab:44:89:cb:
         a1:74:b3:8c:a2:0f:fb:ce:69:33:97:2b:2c:b9:be:d8:5f:cb:
         f1:4b:15:ee:db:7d:82:8f:33:1d:f5:dd:b6:ea:b5:ab:7f:e9:
         8f:ec:b9:c8:e3:65:60:7a:d8:54:08:f4:55:68:6e:30:67:56:
         ea:a5:66:71:07:cf:31:e0:d8:f1:bd:28:2e:f6:8b:6d:e7:67:
         c4:b6:77:56:66:79:50:e5:b0:e2:6e:e4:47:06:31:cd:26:5f:
         1f:ee:81:fe:9e:55:25:e6:b7:14:85:f3:52:37:10:d7:8a:de:
         e9:08:b7:d7:c1:04:84:58:7a:52:2f:5c:dc:ee:68:b1:6c:bc:
         22:a0:06:1d:f2:19:d4:09:6e:57:90:62:4d:d5:d3:f1:8b:d5:
         64:ab:a9:25:3b:52:ca:b1:5e:23:85:29:3b:44:e9:47:c9:ec:
         65:fe:09:1f:0a:b3:d4:f5:c2:6d:2e:14:3c:4a:e3:db:52:30:
         f5:e1:2a:c1:8e:fb:e7:5a:28:b7:e9:bf:22:cf:c6:1b:2f:19:
         35:6c:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:23:35 2025 by rpki-client