Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Fpti2zZYgdBN7XTByWYVuT1oztw.roa
File:                     Fpti2zZYgdBN7XTByWYVuT1oztw.roa (raw, json)
Hash identifier:          qvF1psJooWTWaJC0eNXOol6PTorZAuTd+o2fG1CiDO0=
Subject key identifier:   16:9B:62:DB:36:58:81:D0:4D:ED:74:C1:C9:66:15:B9:3D:68:CE:DC
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       09B7
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Fpti2zZYgdBN7XTByWYVuT1oztw.roa
Signing time:             Mon 26 Aug 2024 05:15:39 +0000
ROA not before:           Mon 26 Aug 2024 05:15:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131671
IP address blocks:        2405:a0c0::/32 maxlen: 48
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 20:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Aug 26 05:15:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=169B62DB365881D04DED74C1C96615B93D68CEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:b7:51:1c:92:4b:96:13:c9:06:11:99:3a:
                    f3:5f:43:e3:8e:11:87:57:f9:bf:f9:4c:4b:52:bf:
                    3a:0f:24:64:a1:0d:07:a7:14:3f:1b:b7:1c:a0:c5:
                    6a:49:3a:b7:db:f7:f4:7d:9f:85:a5:93:c9:9c:aa:
                    e1:25:e1:eb:f9:3c:96:5d:a7:d3:72:c8:5d:d0:12:
                    bf:75:d1:36:a8:d6:85:c4:4f:e6:24:f5:ae:34:df:
                    8a:95:66:d5:1f:db:d6:c7:3d:1f:38:bc:21:df:c9:
                    46:45:92:7b:28:9f:05:4e:9e:f3:6b:14:d5:da:5b:
                    fb:03:c6:64:ad:c0:f8:af:9e:8a:76:ba:74:71:16:
                    f8:f8:c2:a8:41:92:fd:50:b4:27:56:70:f9:f5:5c:
                    47:1d:92:30:9d:3b:dd:a1:c6:b6:e2:c5:93:41:e9:
                    ac:58:05:a5:09:88:f5:f3:de:81:60:cc:be:5e:85:
                    23:25:63:31:10:b1:1a:5c:92:51:6e:ee:aa:10:ab:
                    96:49:31:55:d8:9a:1b:39:c1:ba:90:d3:b9:b3:d0:
                    c8:93:4a:8c:27:02:76:10:4b:0f:05:7a:c4:ee:7e:
                    79:69:bd:98:c7:38:07:3c:74:7b:32:4d:2e:69:68:
                    bf:36:39:db:52:fe:c2:da:20:01:35:08:90:b7:1b:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9B:62:DB:36:58:81:D0:4D:ED:74:C1:C9:66:15:B9:3D:68:CE:DC
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Fpti2zZYgdBN7XTByWYVuT1oztw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:8c:71:b2:4f:a7:e1:6b:15:42:75:ef:a0:d0:9d:7a:41:
         3a:11:f3:7b:db:4e:c8:44:c8:68:e2:68:bd:36:2f:00:c6:96:
         31:ef:f1:c2:ed:ec:db:92:ec:fc:26:68:c1:22:53:cd:3d:10:
         dc:86:1f:d3:e1:70:b9:94:13:32:e2:e7:ce:74:10:be:69:aa:
         8b:24:12:6b:78:60:27:ea:76:94:0b:5e:93:ec:1c:7f:01:1b:
         35:22:35:3f:dd:4f:0a:11:fb:d1:59:00:8f:ad:c9:a8:71:ce:
         56:6a:d6:4d:78:70:96:fe:24:1f:b6:5e:a9:75:6c:b6:4d:35:
         d1:1a:99:7a:2e:fc:f0:ed:e2:95:f1:9c:03:54:a4:37:05:06:
         c2:aa:c8:d7:c7:d6:1e:6a:66:d4:8e:18:50:f5:fb:b1:17:06:
         c4:dc:ef:a5:4c:a6:2d:cc:34:84:52:90:49:83:fb:c0:14:a0:
         b1:b7:8d:bb:c1:c0:c9:e7:5e:08:93:fc:2d:50:66:b4:32:90:
         58:57:d4:be:74:c9:05:56:9f:8a:6d:74:6e:1c:05:11:46:7a:
         0f:95:5e:16:d8:6c:11:22:8f:55:41:ab:d3:fe:7e:62:00:d5:
         4c:2c:01:30:c1:57:aa:77:1c:c0:16:10:b1:f4:a9:fc:62:7f:
         63:14:15:19
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNDA4MjYw
NTE1MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2OUI2MkRCMzY1ODgx
RDA0REVENzRDMUM5NjYxNUI5M0Q2OENFREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2ybdRHJJLlhPJBhGZOvNfQ+OOEYdX+b/5TEtSvzoPJGShDQen
FD8btxygxWpJOrfb9/R9n4Wlk8mcquEl4ev5PJZdp9NyyF3QEr910Tao1oXET+Yk
9a4034qVZtUf29bHPR84vCHfyUZFknsonwVOnvNrFNXaW/sDxmStwPivnop2unRx
Fvj4wqhBkv1QtCdWcPn1XEcdkjCdO92hxrbixZNB6axYBaUJiPXz3oFgzL5ehSMl
YzEQsRpcklFu7qoQq5ZJMVXYmhs5wbqQ07mz0MiTSownAnYQSw8FesTufnlpvZjH
OAc8dHsyTS5paL82OdtS/sLaIAE1CJC3G9ijAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUFpti2zZYgdBN7XTByWYVuT1oztwwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvRnB0aTJ6WllnZEJON1hU
QnlXWVZ1VDFvenR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQFoMAwDQYJKoZIhvcNAQELBQADggEBAB13jHGyT6fhaxVCde+g0J16QToR83vb
TshEyGjiaL02LwDGljHv8cLt7NuS7PwmaMEiU809ENyGH9PhcLmUEzLi5850EL5p
qoskEmt4YCfqdpQLXpPsHH8BGzUiNT/dTwoR+9FZAI+tyahxzlZq1k14cJb+JB+2
Xql1bLZNNdEamXou/PDt4pXxnANUpDcFBsKqyNfH1h5qZtSOGFD1+7EXBsTc76VM
pi3MNIRSkEmD+8AUoLG3jbvBwMnnXgiT/C1QZrQykFhX1L50yQVWn4ptdG4cBRFG
eg+VXhbYbBEij1VBq9P+fmIA1UwsATDBV6p3HMAWELH0qfxif2MUFRk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:19 2025 by rpki-client