Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/fmvDwNuiAgsXaaj48aqh3vAYcgs.roa
File:                     fmvDwNuiAgsXaaj48aqh3vAYcgs.roa (raw, json)
Hash identifier:          LZ7Uxc5/hU858HLzfoq6GYDjpGhDIQGeWvSxLzjG68w=
Subject key identifier:   7E:6B:C3:C0:DB:A2:02:0B:17:69:A8:F8:F1:AA:A1:DE:F0:18:72:0B
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       1D
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/fmvDwNuiAgsXaaj48aqh3vAYcgs.roa
Signing time:             Thu 15 Aug 2024 17:24:17 +0000
ROA not before:           Thu 15 Aug 2024 17:24:17 +0000
ROA not after:            Fri 08 Aug 2025 15:30:25 +0000
asID:                     20473
IP address blocks:        160.30.79.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Sat 09 Nov 2024 02:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Aug 15 17:24:17 2024 GMT
            Not After : Aug  8 15:30:25 2025 GMT
        Subject: CN=7E6BC3C0DBA2020B1769A8F8F1AAA1DEF018720B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:66:73:6b:50:f0:25:f9:19:d9:52:1e:a3:
                    92:75:8c:35:e4:a7:33:1f:ee:fc:42:9d:36:af:87:
                    50:9f:f0:61:da:66:78:44:5d:59:1c:ae:f0:4b:59:
                    f1:07:17:ef:c1:7b:f4:c1:2d:c9:3c:1e:2a:5c:c8:
                    bf:a6:f6:33:77:6c:0b:af:74:c3:db:92:6a:a8:7a:
                    cc:6f:21:8f:97:da:5c:e5:65:c4:75:a2:f7:0b:3a:
                    04:2c:eb:ac:00:db:86:5f:fd:dc:7b:e6:54:4d:9e:
                    00:ec:05:99:ea:fc:49:b0:12:2c:48:34:32:26:fa:
                    3c:23:ca:a3:df:d9:e4:95:6c:38:52:97:4b:b2:8a:
                    33:7f:87:2f:67:f8:0e:76:d3:89:53:0b:46:d3:83:
                    30:0f:c0:92:57:a4:29:31:40:63:a0:a0:47:ce:ac:
                    39:f6:b8:86:88:5e:0b:da:24:ea:27:24:03:6c:4d:
                    42:c8:db:7b:db:65:e0:4d:f5:eb:1d:f4:f8:81:2b:
                    72:52:96:09:e4:ac:95:24:1a:86:89:c6:a2:bd:5e:
                    23:8b:21:89:44:1f:52:83:14:c6:36:c5:02:23:5f:
                    9f:96:8d:33:f5:ef:91:a5:b0:e6:1e:01:30:f1:f3:
                    0a:2d:f8:a4:08:44:0c:f0:a2:ab:d0:2b:8c:a3:eb:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:C3:C0:DB:A2:02:0B:17:69:A8:F8:F1:AA:A1:DE:F0:18:72:0B
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/fmvDwNuiAgsXaaj48aqh3vAYcgs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:6a:b2:67:20:81:d8:88:db:fd:77:28:ac:89:69:7c:e8:
         ed:e8:21:c6:bd:a6:ef:11:35:09:5b:07:76:3d:89:31:d5:0a:
         ae:aa:7d:4b:d4:64:9f:50:3a:24:b2:4d:da:b7:ec:c7:f7:c5:
         67:73:56:3c:59:67:e0:b8:40:e9:5d:ea:46:e9:ec:52:2b:65:
         c7:3d:71:eb:43:bd:a2:f1:26:e0:46:91:f6:12:f7:da:54:6e:
         d3:db:b5:0d:b2:c2:29:a5:38:84:4e:66:cf:8c:8b:07:64:58:
         54:99:06:b8:aa:0a:75:81:48:2f:5b:bb:c4:f7:9f:04:c3:bc:
         d1:58:f1:aa:98:f2:63:a9:e9:3d:cf:e6:42:e0:1b:8a:cd:a9:
         8f:59:e2:49:8f:c3:f1:a9:89:7f:ed:7e:2d:57:01:83:4f:e4:
         86:e4:d6:ba:70:8a:78:e7:48:f2:96:28:50:07:05:e4:e3:0f:
         0f:2a:16:04:af:11:1c:09:b2:af:77:bd:e7:9e:9a:01:06:79:
         8b:81:83:a8:7e:40:12:ef:b6:76:7d:a3:1a:53:22:29:19:cf:
         bd:a0:d2:58:98:31:72:4b:93:2b:63:41:00:3c:0f:a4:33:a8:
         56:6b:b3:b4:40:fb:77:2c:62:a0:f6:88:57:91:b6:2f:c4:77:
         bb:f6:41:2c
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NEY4
RENGNjZCMjVCNzE5MDU2RDFFRDY1QzE2RUE5MjU3RTU1NTNEMB4XDTI0MDgxNTE3
MjQxN1oXDTI1MDgwODE1MzAyNVowMzExMC8GA1UEAxMoN0U2QkMzQzBEQkEyMDIw
QjE3NjlBOEY4RjFBQUExREVGMDE4NzIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAgZnNrUPAl+RnZUh6jknWMNeSnMx/u/EKdNq+HUJ/wYdpmeERd
WRyu8EtZ8QcX78F79MEtyTweKlzIv6b2M3dsC690w9uSaqh6zG8hj5faXOVlxHWi
9ws6BCzrrADbhl/93HvmVE2eAOwFmer8SbASLEg0Mib6PCPKo9/Z5JVsOFKXS7KK
M3+HL2f4DnbTiVMLRtODMA/AklekKTFAY6CgR86sOfa4hoheC9ok6ickA2xNQsjb
e9tl4E316x30+IErclKWCeSslSQahonGor1eI4shiUQfUoMUxjbFAiNfn5aNM/Xv
kaWw5h4BMPHzCi34pAhEDPCiq9ArjKPrrysCAwEAAaOCAe4wggHqMB0GA1UdDgQW
BBR+a8PA26ICCxdpqPjxqqHe8BhyCzAfBgNVHSMEGDAWgBRE+Nz2ayW3GQVtHtZc
FuqSV+VVPTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRUlET1Uv
UlBqYzltc2x0eGtGYlI3V1hCYnFrbGZsVlQwLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SUGpjOW1zbHR4a0ZiUjdXWEJicWtsZmxWVDAuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRUlET1UvZm12RHdOdWlBZ3NYYWFqNDhh
cWgzdkFZY2dzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAe
TzANBgkqhkiG9w0BAQsFAAOCAQEAgStqsmcggdiI2/13KKyJaXzo7eghxr2m7xE1
CVsHdj2JMdUKrqp9S9Rkn1A6JLJN2rfsx/fFZ3NWPFln4LhA6V3qRunsUitlxz1x
60O9ovEm4EaR9hL32lRu09u1DbLCKaU4hE5mz4yLB2RYVJkGuKoKdYFIL1u7xPef
BMO80VjxqpjyY6npPc/mQuAbis2pj1niSY/D8amJf+1+LVcBg0/khuTWunCKeOdI
8pYoUAcF5OMPDyoWBK8RHAmyr3e9556aAQZ5i4GDqH5AEu+2dn2jGlMiKRnPvaDS
WJgxckuTK2NBADwPpDOoVmuztED7dyxioPaIV5G2L8R3u/ZBLA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:15 2025 by rpki-client