Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/5Ku7ikMExHP8Bnapu1J_TMvuS_M.roa
File:                     5Ku7ikMExHP8Bnapu1J_TMvuS_M.roa (raw, json)
Hash identifier:          3ZM9vh127Q55syHmGLi0yIoxs9G0bl4UKAJRD4wXkkM=
Subject key identifier:   E4:AB:BB:8A:43:04:C4:73:FC:06:76:A9:BB:52:7F:4C:CB:EE:4B:F3
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0BE7
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/5Ku7ikMExHP8Bnapu1J_TMvuS_M.roa
Signing time:             Mon 19 Feb 2024 08:37:00 +0000
ROA not before:           Mon 19 Feb 2024 08:37:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     21859
IP address blocks:        121.50.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 05:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb 19 08:37:00 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E4ABBB8A4304C473FC0676A9BB527F4CCBEE4BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:6c:ac:f3:73:8e:de:2c:e8:c0:85:20:e5:
                    a1:3b:f1:58:b3:c7:32:f0:dc:9a:22:88:06:f9:42:
                    2f:94:57:2f:be:50:12:06:3b:7b:19:81:bb:23:58:
                    ad:98:72:16:2c:1c:de:59:5a:07:38:e9:03:95:0b:
                    20:91:33:dc:6d:51:00:05:d5:2d:4f:50:d9:81:a9:
                    15:b2:a6:f9:1d:a7:5f:2a:79:3b:bd:32:2a:b1:ac:
                    3d:21:54:f2:54:51:64:dd:1a:71:50:27:79:6b:26:
                    7c:0f:5e:dc:68:ba:c1:29:64:ed:38:f2:7b:de:4e:
                    43:02:9b:1d:bc:27:8c:ca:41:8a:91:5c:9f:b3:81:
                    e6:1d:01:d4:3c:34:ae:a4:62:cf:0b:52:cd:e8:f3:
                    25:aa:9a:f0:11:ba:09:e1:96:df:73:0d:df:41:99:
                    2c:ff:32:80:3c:57:fe:07:02:14:81:9e:e7:ed:39:
                    58:c5:e6:0e:10:80:90:89:a3:b0:56:97:38:d0:f1:
                    9c:bf:9a:aa:8f:0b:fa:fa:16:6b:67:18:ad:3e:a5:
                    70:cb:6c:ad:15:7a:ea:0b:29:b9:ce:79:41:70:10:
                    bd:80:ce:b9:79:df:49:eb:66:2d:77:d4:57:67:7e:
                    89:96:dd:fa:ce:b9:5b:b2:26:e5:d9:d6:5b:6a:2d:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:BB:8A:43:04:C4:73:FC:06:76:A9:BB:52:7F:4C:CB:EE:4B:F3
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/5Ku7ikMExHP8Bnapu1J_TMvuS_M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:a2:13:31:9f:df:69:80:39:fa:3e:5a:da:2d:2f:0b:20:
         01:40:a5:c3:aa:48:04:85:61:a7:dc:11:df:2c:10:f9:1d:d0:
         3b:9c:61:fd:d7:eb:12:04:4e:5d:a5:e9:2f:24:3d:e9:df:9a:
         15:a5:14:9b:06:0d:ac:19:e7:39:95:e4:22:5a:be:ac:dd:6f:
         8d:02:a7:d2:0f:ff:1e:81:bb:b9:cd:ec:df:e2:f1:31:fe:78:
         e1:84:01:6e:d7:e6:25:61:c6:44:5f:ef:b8:56:39:39:94:d6:
         f9:64:db:4e:8c:27:e6:70:6e:a4:17:f4:50:74:ad:d9:27:80:
         88:9e:d0:2b:af:a1:c9:07:ee:08:ca:82:0f:93:6e:09:90:8d:
         c3:fd:6a:24:0c:ce:81:aa:d0:95:2b:bf:df:12:fd:25:bf:db:
         6c:3b:88:6d:5d:ed:5d:07:24:ed:6d:e5:9c:ed:65:69:72:7a:
         8d:40:c6:a6:8c:e4:8d:00:38:37:7f:1b:7b:6a:28:a6:fb:9c:
         2b:77:7d:34:86:de:b4:c3:1c:7f:c4:67:ef:61:a6:43:7c:7f:
         1f:40:53:e9:58:82:03:31:e3:bd:d3:c9:bb:50:9b:42:24:e8:
         44:71:73:fc:02:44:20:8e:8c:ec:88:60:04:45:13:f6:58:6d:
         c4:8a:47:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org