Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TQ8Qv00jCIzDRmxxYBdtffdGu7E.roa
File:                     TQ8Qv00jCIzDRmxxYBdtffdGu7E.roa (raw, json)
Hash identifier:          ostoq/spWl27NKWHMgm8gPzTLcf4Ea+yzwpU3lra2lA=
Subject key identifier:   4D:0F:10:BF:4D:23:08:8C:C3:46:6C:71:60:17:6D:7D:F7:46:BB:B1
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       1592
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TQ8Qv00jCIzDRmxxYBdtffdGu7E.roa
Signing time:             Tue 11 Feb 2025 23:44:45 +0000
ROA not before:           Tue 11 Feb 2025 23:44:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     198949
IP address blocks:        210.61.3.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 01:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5522 (0x1592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 11 23:44:45 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4D0F10BF4D23088CC3466C7160176D7DF746BBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:0d:d5:20:a6:ae:a5:c1:70:6d:36:3d:4c:
                    38:7c:25:00:9e:1e:5e:65:60:04:80:23:1b:d0:23:
                    a1:7b:71:84:0b:38:b7:4b:b2:9f:19:a7:06:15:b5:
                    f2:cc:db:20:31:1b:37:09:ac:c7:b8:82:70:4b:20:
                    5a:64:c4:16:8c:c8:74:ac:f6:6a:8d:35:ea:7b:d8:
                    af:71:d9:d6:fa:92:a4:6d:b5:b1:c5:d7:58:8c:71:
                    29:ea:bd:62:65:8b:88:3e:c5:9a:00:66:3f:61:f7:
                    d2:e9:60:c7:4a:33:93:4f:b9:8c:2e:96:48:ea:6c:
                    c1:44:5e:c4:78:55:d9:85:ea:c3:0d:bb:d5:1f:fe:
                    66:3b:07:eb:fa:14:d3:0c:60:b1:36:ec:8d:69:6e:
                    0d:23:6e:99:12:6b:06:ff:a1:47:0f:17:2c:1a:56:
                    0d:20:fd:53:a4:ff:84:70:e0:96:db:b4:f4:29:61:
                    38:4a:6b:d9:aa:9b:80:68:cb:18:7b:21:86:57:9d:
                    56:2c:09:1f:29:3a:6b:fa:74:02:d9:c9:2f:82:16:
                    c0:e5:6b:4d:95:eb:1a:82:bf:68:ca:ef:36:47:eb:
                    54:fe:ae:c5:73:11:54:0d:74:9d:13:b4:22:78:53:
                    31:a1:2d:0f:8e:cf:f1:3f:b9:39:5d:4b:04:2b:ad:
                    1b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0F:10:BF:4D:23:08:8C:C3:46:6C:71:60:17:6D:7D:F7:46:BB:B1
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TQ8Qv00jCIzDRmxxYBdtffdGu7E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.61.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:36:6c:b9:59:5b:63:62:6f:0c:ab:1d:e3:26:29:2d:ce:f9:
         9f:dc:e8:d5:a0:65:6f:88:b8:e1:02:47:1a:08:19:fb:6e:bd:
         50:89:0b:da:91:39:f2:b1:89:53:f8:fe:04:05:4c:2d:64:f0:
         df:57:b1:e7:e4:d8:f6:cd:a5:7f:f6:ca:7f:01:f6:7b:0b:3e:
         42:ab:9b:5b:b6:4b:e2:4a:72:dd:d5:d3:fc:6a:b2:aa:c9:aa:
         71:b6:5e:a5:69:86:d4:f5:e1:40:ce:7c:7d:d9:de:70:b9:80:
         13:a4:94:48:1e:64:ec:40:d3:c2:08:7f:c5:e4:3e:b3:9c:1c:
         48:62:81:f8:5a:71:49:f5:d5:fd:a8:28:c2:9d:6b:43:90:a2:
         4d:fd:ce:c9:40:f5:0a:0b:c8:4d:68:0e:3e:d5:1f:8b:5d:cf:
         45:34:08:cc:ae:6f:8e:62:52:31:35:28:6f:89:e2:92:de:41:
         b4:5d:2b:91:d7:78:9a:7c:17:16:b6:6f:e0:88:76:ec:e0:03:
         53:04:fc:1c:b0:0a:4b:4e:fe:85:a8:43:6c:6d:c9:f8:ef:08:
         f4:47:c9:ef:6b:de:a5:3c:ac:b8:8b:a1:35:39:5b:9f:ed:7a:
         b3:35:21:ea:7a:43:52:72:8e:2d:0b:9b:b0:bc:cc:03:00:eb:
         79:66:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:32:17 2025 by rpki-client