Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/0TeJmEMwtMuTWV5dp-oee9hqKfU.roa
File:                     0TeJmEMwtMuTWV5dp-oee9hqKfU.roa (raw, json)
Hash identifier:          +EkPLQCRro1ETUxxt600Gq25kLpAWAfpjGbZ3iYI0iQ=
Subject key identifier:   D1:37:89:98:43:30:B4:CB:93:59:5E:5D:A7:EA:1E:7B:D8:6A:29:F5
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14BB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0TeJmEMwtMuTWV5dp-oee9hqKfU.roa
Signing time:             Mon 10 Feb 2025 14:35:14 +0000
ROA not before:           Mon 10 Feb 2025 14:35:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     36040
IP address blocks:        202.39.67.192/27 maxlen: 27
Validation:               Failed, certificate revoked on Tue 11 Feb 2025 23:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5307 (0x14bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D13789984330B4CB93595E5DA7EA1E7BD86A29F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:86:b8:77:eb:e5:41:19:97:93:e4:1f:98:c6:
                    b6:a7:8e:60:a4:61:ff:39:e9:fe:b4:1d:29:50:44:
                    cf:18:c9:1f:a1:53:c0:12:d3:ab:75:00:22:6a:aa:
                    d2:e9:53:6a:ca:c7:1a:5d:af:1b:b5:ec:ad:6e:23:
                    d2:64:84:61:60:ca:ca:3e:4b:18:35:a4:d4:cb:3a:
                    41:73:f1:ad:d6:f6:d3:14:fe:d1:7b:64:a7:a0:c5:
                    da:f4:22:15:22:1b:92:92:c8:3c:40:ed:1f:8d:9b:
                    1b:b8:4e:39:99:5b:72:38:12:66:17:bf:07:0a:af:
                    2f:87:79:d1:ef:b4:5a:2a:c8:3d:8c:be:c0:be:bc:
                    0b:7f:8a:2b:16:b9:4b:ab:eb:9e:c9:0e:57:e6:42:
                    55:28:1f:f4:14:aa:ff:72:48:bc:db:f1:73:de:15:
                    8a:36:34:7a:ec:8d:71:b3:ba:18:8b:49:31:a2:a7:
                    73:ff:6b:67:a7:99:35:7d:11:62:f2:44:92:31:5c:
                    dc:e8:66:71:84:c1:c7:04:f7:3e:1f:46:d3:b6:65:
                    87:6a:e7:de:dd:5d:45:65:6e:d2:e0:9c:c2:26:a2:
                    55:81:d1:da:6a:54:89:6b:85:06:06:8d:51:8b:45:
                    c2:97:f6:ce:0e:f1:4b:e8:f7:af:6f:75:7f:b5:1f:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:89:98:43:30:B4:CB:93:59:5E:5D:A7:EA:1E:7B:D8:6A:29:F5
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0TeJmEMwtMuTWV5dp-oee9hqKfU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.67.192/27

    Signature Algorithm: sha256WithRSAEncryption
         c4:9e:84:ac:b0:fd:e0:3d:d0:b1:bb:db:2f:f1:da:5d:9a:7d:
         64:39:30:e6:7a:fb:96:d5:65:b6:21:b4:a6:d0:1f:12:a7:81:
         23:7e:49:58:e0:e9:e0:aa:4a:e3:19:a7:01:5a:74:70:fb:41:
         86:3c:77:5d:7b:d6:a4:76:8c:ef:60:e1:40:ae:01:33:9f:e6:
         da:d8:e2:6e:25:4c:e6:3a:dd:ec:9d:4c:9b:a1:cd:35:0b:a1:
         fc:a5:34:28:73:0b:52:51:34:d7:f0:2c:6c:01:f6:90:56:96:
         b3:5b:2a:1f:61:2e:d8:76:12:72:fd:4b:68:21:28:c2:27:d4:
         de:4c:1a:5b:97:84:ad:a4:ed:1a:d6:d6:9f:c4:6b:78:17:68:
         1b:87:a3:c5:d2:63:5a:cd:2b:69:41:9e:1d:66:fc:2d:d9:f0:
         74:8e:5d:50:99:66:da:94:fd:72:cd:75:c0:98:1f:0a:ce:e8:
         d5:35:56:e5:31:5d:0e:e5:f4:90:ed:a4:4d:2f:39:89:aa:09:
         bf:ab:2a:a7:8a:c0:7a:70:9f:4d:a2:64:19:ca:f5:f8:59:6d:
         bf:f1:3f:77:92:1a:c3:c6:9e:a9:38:61:12:a7:4b:ce:15:ea:
         ac:1c:dc:7a:22:88:5f:be:98:c0:89:d2:5b:46:7d:93:9d:98:
         3b:39:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:15:38 2025 by rpki-client