Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eCn0wirVHa0KB4sUrHribrPSm8A.roa
File:                     eCn0wirVHa0KB4sUrHribrPSm8A.roa (raw, json)
Hash identifier:          ln8bCG2cylyNcbBBDgUa/AsH+hNFeuEiqH1x4DQSEno=
Subject key identifier:   78:29:F4:C2:2A:D5:1D:AD:0A:07:8B:14:AC:7A:E2:6E:B3:D2:9B:C0
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       1070
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eCn0wirVHa0KB4sUrHribrPSm8A.roa
Signing time:             Thu 18 Apr 2024 06:11:42 +0000
ROA not before:           Thu 18 Apr 2024 06:11:42 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     150150
IP address blocks:        150.116.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 06:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4208 (0x1070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Apr 18 06:11:42 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7829F4C22AD51DAD0A078B14AC7AE26EB3D29BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:31:f0:1f:e7:e9:91:f6:3c:d6:01:b9:2d:
                    7e:1f:67:82:54:fd:5c:de:f8:a9:ad:55:fd:0d:63:
                    2e:42:9f:5f:89:e3:27:d8:36:db:f9:01:c6:1d:47:
                    da:76:7a:10:31:44:0e:01:2a:b1:3e:91:d8:d0:da:
                    5e:45:19:e5:cc:05:49:45:47:b9:1e:ae:a4:3a:c4:
                    48:b9:01:f4:4a:d9:97:a8:29:58:79:a4:8f:e3:b0:
                    96:0c:b6:f2:91:ab:b1:69:3e:f3:69:d5:17:04:a3:
                    29:ed:4b:c1:f7:ed:c8:24:67:1e:3e:72:90:75:58:
                    9a:df:e9:d3:1b:cd:d5:07:2e:77:99:f2:f0:74:e6:
                    ce:10:25:91:dc:59:58:86:8e:4a:2c:59:29:79:2c:
                    bd:dc:a9:24:cc:3a:4d:d4:42:c1:4b:1e:cf:fd:cc:
                    86:6d:67:c5:61:3d:ab:ea:35:5f:fa:0a:ce:0b:eb:
                    fa:b2:83:17:15:08:77:dc:99:17:62:95:2a:bf:aa:
                    89:65:d9:23:6e:b9:8a:b1:ff:ed:08:c7:6b:e3:38:
                    99:88:b7:79:73:9b:34:53:ac:c9:37:2d:13:f7:c4:
                    31:89:f2:55:61:f8:db:0f:af:2e:1f:10:e6:9b:8d:
                    24:8d:46:eb:90:2f:d1:9b:c3:9a:3a:41:ee:74:01:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:29:F4:C2:2A:D5:1D:AD:0A:07:8B:14:AC:7A:E2:6E:B3:D2:9B:C0
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eCn0wirVHa0KB4sUrHribrPSm8A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:2c:b2:2c:09:e7:8a:25:2c:e9:4c:b4:b5:7f:5c:e8:22:
         8d:86:8f:bb:91:71:1e:1c:bd:df:1f:1e:2b:30:82:0d:7a:98:
         d1:d5:95:a1:5c:0d:b3:a0:7c:34:d2:4e:ad:b1:39:4b:48:cb:
         4b:af:28:cf:2e:5b:8a:85:a7:6b:8c:c3:ec:4a:0b:74:2d:ae:
         89:44:78:1c:51:6d:c1:fa:db:a0:eb:c0:34:40:96:6f:13:4d:
         0e:a3:dd:46:42:70:c8:d3:df:80:bb:63:bd:a3:1d:ed:88:07:
         af:f7:49:ce:5f:33:f3:c0:ac:5f:7e:e8:ae:8a:0b:da:e9:cb:
         a2:ed:42:f8:cc:e6:c5:c9:14:bf:a2:f0:e4:a4:ed:78:e7:58:
         9f:f8:9c:6c:de:f5:e1:33:63:46:6c:4b:fd:66:c6:77:1e:fe:
         9a:d4:b3:b7:62:34:11:f7:93:92:4c:60:27:28:7b:04:1a:31:
         c4:b3:ba:67:9a:93:2c:fb:e9:80:f0:a8:ff:7c:97:de:6e:00:
         58:54:66:a1:1d:3c:17:e5:5c:46:20:0c:4f:fd:db:08:e7:54:
         15:76:8e:79:b4:6f:ca:4a:17:1f:fe:c0:71:e0:93:99:8d:d3:
         ae:7f:99:4f:c1:c8:9e:bc:37:16:3e:05:61:37:c8:d9:d0:85:
         3d:fc:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org