Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/HriLbuJ9fbOZXqCe-875hnwEQao.roa
File:                     HriLbuJ9fbOZXqCe-875hnwEQao.roa (raw, json)
Hash identifier:          JMQORktgmHjHzuQbYfqSh9mtkGVsI8MhfRuh5dzAxLs=
Subject key identifier:   1E:B8:8B:6E:E2:7D:7D:B3:99:5E:A0:9E:FB:CE:F9:86:7C:04:41:AA
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       0308
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/HriLbuJ9fbOZXqCe-875hnwEQao.roa
Signing time:             Mon 26 Aug 2024 05:17:25 +0000
ROA not before:           Mon 26 Aug 2024 05:17:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     20473
IP address blocks:        103.169.212.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 13:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug 26 05:17:25 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1EB88B6EE27D7DB3995EA09EFBCEF9867C0441AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:08:d4:49:01:fb:6b:55:db:a8:b3:be:bd:
                    f5:6b:5f:9a:4e:d5:52:b6:72:82:9d:6b:2d:a5:1d:
                    4b:1d:19:97:96:03:37:79:7e:6a:3e:a4:7a:5e:89:
                    9f:35:dd:2d:a5:29:c4:11:52:6b:a9:43:9e:3a:d1:
                    c8:a9:7f:73:98:02:00:96:b2:bc:05:d6:32:35:b1:
                    1f:84:27:a0:0d:97:3b:1b:f3:3a:6d:8f:8c:32:4a:
                    e0:aa:8e:d0:ad:49:14:96:da:95:d6:7b:81:8a:e7:
                    7e:41:9e:ec:7c:e7:cb:20:f7:84:62:1b:08:8b:68:
                    5e:d6:fb:24:e2:7a:06:3c:f9:86:a9:57:2f:77:e8:
                    c6:f3:34:75:a8:31:0b:f6:16:1b:b0:01:10:d7:12:
                    cd:fe:25:5b:71:7f:35:82:21:5b:98:6d:e0:c6:ef:
                    8c:ce:7f:b6:6c:20:ef:15:a4:33:b7:1b:f4:31:16:
                    57:64:9a:68:fb:5a:45:4c:f5:22:9b:4a:29:d9:77:
                    30:b3:eb:ea:18:51:f1:3b:1e:16:0d:e1:6e:78:e6:
                    84:83:c9:e0:00:b6:db:0b:b9:bc:43:f1:34:49:0e:
                    a8:3e:dd:43:35:8e:e8:a3:f3:dc:1c:8b:92:4a:b5:
                    b2:2c:6d:b2:1b:54:20:fa:33:ff:90:a2:47:9c:58:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:8B:6E:E2:7D:7D:B3:99:5E:A0:9E:FB:CE:F9:86:7C:04:41:AA
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/HriLbuJ9fbOZXqCe-875hnwEQao.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:11:8b:d9:4d:5f:ce:01:1e:29:ef:fe:8d:75:93:b6:77:5f:
         0a:ba:d2:a3:24:72:7a:e2:ca:93:e3:f6:70:f4:85:cc:44:ec:
         09:87:ad:a7:77:24:8a:3e:c4:3a:c4:b8:95:b4:49:f2:d0:cc:
         48:6f:23:67:f5:89:b3:a6:bf:8a:05:e1:6e:8b:38:1d:2e:8a:
         71:78:90:0a:7e:48:4f:54:d5:df:69:44:31:4e:dd:9b:bc:45:
         3d:2d:40:7a:b2:4d:8b:aa:5a:91:c8:c3:d3:eb:53:94:31:93:
         b5:2c:d7:bc:48:bc:1b:78:5b:27:78:94:30:d6:af:33:9c:bf:
         35:25:45:88:57:6e:91:12:75:c4:5b:ac:63:86:7a:16:9b:90:
         88:18:30:78:58:8c:6a:76:c8:fc:e7:b3:18:13:ab:bc:65:d9:
         60:65:c9:44:5b:5a:bd:b3:4a:ca:ac:e1:39:b5:a7:5c:a9:06:
         05:d1:0f:54:36:35:da:28:8c:2e:8b:1b:aa:2d:15:aa:96:f3:
         b2:30:fb:b5:7a:e2:4b:2d:a7:30:a5:64:25:2f:bb:d4:51:7c:
         2e:71:ef:77:31:e1:ff:7f:11:99:b1:d8:43:9d:b2:96:4c:09:
         8f:56:ec:db:0a:54:0f:72:36:83:46:c2:9f:89:9c:41:18:9a:
         cb:ee:d5:ea
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDBE
Q0YwNTBDNENFQUU1MDIxQUE4RDMxMTk1M0YwMkQ2MTIxRkQ4RDAeFw0yNDA4MjYw
NTE3MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFFQjg4QjZFRTI3RDdE
QjM5OTVFQTA5RUZCQ0VGOTg2N0MwNDQxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhIwjUSQH7a1XbqLO+vfVrX5pO1VK2coKday2lHUsdGZeWAzd5
fmo+pHpeiZ813S2lKcQRUmupQ5460cipf3OYAgCWsrwF1jI1sR+EJ6ANlzsb8zpt
j4wySuCqjtCtSRSW2pXWe4GK535Bnux858sg94RiGwiLaF7W+yTiegY8+YapVy93
6MbzNHWoMQv2FhuwARDXEs3+JVtxfzWCIVuYbeDG74zOf7ZsIO8VpDO3G/QxFldk
mmj7WkVM9SKbSinZdzCz6+oYUfE7HhYN4W545oSDyeAAttsLubxD8TRJDqg+3UM1
juij89wci5JKtbIsbbIbVCD6M/+QokecWJrbAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUHriLbuJ9fbOZXqCe+875hnwEQaowHwYDVR0jBBgwFoAUANzwUMTOrlAhqo0x
GVPwLWEh/Y0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFQUFlN
T05FWS9BTnp3VU1UT3JsQWhxbzB4R1ZQd0xXRWhfWTAuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0FOendVTVRPcmxBaHFvMHhHVlB3TFdFaF9ZMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hBUFBZTU9ORVkvSHJpTGJ1Sjlm
Yk9aWHFDZS04NzVobndFUWFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGep1DANBgkqhkiG9w0BAQsFAAOCAQEABRGL2U1fzgEeKe/+jXWTtndf
CrrSoyRyeuLKk+P2cPSFzETsCYetp3ckij7EOsS4lbRJ8tDMSG8jZ/WJs6a/igXh
bos4HS6KcXiQCn5IT1TV32lEMU7dm7xFPS1AerJNi6pakcjD0+tTlDGTtSzXvEi8
G3hbJ3iUMNavM5y/NSVFiFdukRJ1xFusY4Z6FpuQiBgweFiManbI/OezGBOrvGXZ
YGXJRFtavbNKyqzhObWnXKkGBdEPVDY12iiMLosbqi0VqpbzsjD7tXriSy2nMKVk
JS+71FF8LnHvdzHh/38RmbHYQ52ylkwJj1bs2wpUD3I2g0bCn4mcQRiay+7V6g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:23 2025 by rpki-client