Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/d5Ial-fIYaqa_MShyoR57jOq1BE.roa
File:                     d5Ial-fIYaqa_MShyoR57jOq1BE.roa (raw, json)
Hash identifier:          gckeFqhAyrJ9C7ZrkOhLLUeaPedhxdnld7L0rvtB/tM=
Subject key identifier:   77:92:1A:97:E7:C8:61:AA:9A:FC:C4:A1:CA:84:79:EE:33:AA:D4:11
Certificate issuer:       /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial:       0C19
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/d5Ial-fIYaqa_MShyoR57jOq1BE.roa
Signing time:             Mon 26 Aug 2024 05:19:13 +0000
ROA not before:           Mon 26 Aug 2024 05:19:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18422
IP address blocks:        2001:ed8::/32 maxlen: 56
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3097 (0xc19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
        Validity
            Not Before: Aug 26 05:19:13 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=77921A97E7C861AA9AFCC4A1CA8479EE33AAD411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:8e:35:39:6a:97:37:e8:c0:53:e7:5a:09:
                    20:d4:89:e2:61:33:a8:13:e3:56:0c:63:d5:70:f6:
                    01:96:34:a4:08:d8:b5:e2:99:64:77:a1:69:53:a4:
                    4e:de:c6:5d:88:2f:f5:5e:2c:dc:9e:c9:f4:a0:8f:
                    51:38:89:c7:b3:2b:0f:b9:29:1b:40:96:e2:c9:01:
                    f1:19:fd:75:7a:39:a9:9f:da:0f:10:88:8f:e4:ec:
                    63:e2:fc:5f:25:60:86:aa:c8:96:e9:e6:36:81:8d:
                    ea:76:e9:cf:d7:78:82:17:cc:75:ae:55:21:97:7b:
                    6f:15:25:c8:62:3b:85:0a:15:27:bc:bb:b6:4f:67:
                    9a:09:24:eb:92:19:6a:c9:6b:c7:06:fd:bc:f8:52:
                    39:92:dc:0f:47:ba:ab:9b:0a:45:26:d9:0e:ca:d7:
                    ff:2b:b3:85:2d:59:f2:53:2e:80:54:d6:55:29:6f:
                    95:48:28:e3:6d:55:00:2f:0f:eb:a5:15:7b:fe:24:
                    41:08:75:80:17:22:16:57:98:fc:78:50:02:f4:3b:
                    c1:b0:29:98:ae:f9:d0:fd:b3:2f:92:c2:7f:cf:c5:
                    48:00:ed:13:47:f7:1e:67:59:37:66:cd:0c:67:19:
                    85:e0:fd:62:c0:ad:62:ff:2a:14:e5:b8:ac:0d:89:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:92:1A:97:E7:C8:61:AA:9A:FC:C4:A1:CA:84:79:EE:33:AA:D4:11
            X509v3 Authority Key Identifier:
                keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/d5Ial-fIYaqa_MShyoR57jOq1BE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:46:49:7c:c5:a6:a7:f5:2c:0d:80:6a:7b:c1:ae:32:c4:
         ed:b6:7b:8e:a8:85:b2:c7:a9:2f:4b:f4:7f:85:f4:95:97:37:
         b8:52:a6:63:83:7b:fe:25:5e:4a:df:5e:90:4c:80:5a:0c:70:
         c3:f6:3d:26:db:32:e8:97:27:4c:91:75:d0:be:bd:6d:c7:89:
         d1:7a:cc:58:2f:92:fa:69:b4:bf:f0:28:5a:d8:72:8b:3e:f5:
         23:7f:a1:46:01:70:42:08:eb:bd:48:4b:1c:f2:2a:eb:6d:b5:
         a9:fb:73:ea:f1:57:57:fd:4c:d8:b7:22:35:19:c4:94:e7:63:
         f2:17:4b:e3:b4:3e:a7:87:b1:7d:ea:eb:09:23:14:c7:4c:75:
         e3:86:79:51:72:74:49:c4:14:01:e9:4d:33:e6:67:03:bb:f0:
         c5:02:e3:79:43:a9:97:a6:41:95:3e:4e:f2:35:4e:42:d7:d2:
         63:88:28:66:a6:30:71:2c:b1:d7:e3:32:86:1c:96:44:7d:51:
         aa:88:67:58:3d:31:4c:58:25:33:84:64:e8:60:b6:f2:e8:b1:
         95:e1:2e:3a:f5:9d:78:0f:d6:32:ea:95:e7:53:f6:0b:5c:f7:
         ab:01:81:32:30:58:35:08:ce:10:47:0d:0a:dc:1d:14:9c:d9:
         bc:d2:71:48
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkY5
QkVDRkZFN0RBMDlDQTA1M0EyRjk2ODE0MTJCMTlGQjAwNEE3NDAeFw0yNDA4MjYw
NTE5MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3OTIxQTk3RTdDODYx
QUE5QUZDQzRBMUNBODQ3OUVFMzNBQUQ0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9U441OWqXN+jAU+daCSDUieJhM6gT41YMY9Vw9gGWNKQI2LXi
mWR3oWlTpE7exl2IL/VeLNyeyfSgj1E4icezKw+5KRtAluLJAfEZ/XV6Oamf2g8Q
iI/k7GPi/F8lYIaqyJbp5jaBjep26c/XeIIXzHWuVSGXe28VJchiO4UKFSe8u7ZP
Z5oJJOuSGWrJa8cG/bz4UjmS3A9HuqubCkUm2Q7K1/8rs4UtWfJTLoBU1lUpb5VI
KONtVQAvD+ulFXv+JEEIdYAXIhZXmPx4UAL0O8GwKZiu+dD9sy+Swn/PxUgA7RNH
9x5nWTdmzQxnGYXg/WLArWL/KhTluKwNiejTAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUd5Ial+fIYaqa/MShyoR57jOq1BEwHwYDVR0jBBgwFoAUL5vs/+faCcoFOi+W
gUErGfsASnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVRSSU5F
VC9MNXZzXy1mYUNjb0ZPaS1XZ1VFckdmc0FTblEuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0w1dnNfLWZhQ2NvRk9pLVdnVUVyR2ZzQVNuUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lUUklORVQvZDVJYWwtZklZYXFhX01T
aHlvUjU3ak9xMUJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACABDtgwDQYJKoZIhvcNAQELBQADggEBABHkRkl8xaan9SwNgGp7wa4yxO22e46o
hbLHqS9L9H+F9JWXN7hSpmODe/4lXkrfXpBMgFoMcMP2PSbbMuiXJ0yRddC+vW3H
idF6zFgvkvpptL/wKFrYcos+9SN/oUYBcEII671ISxzyKutttan7c+rxV1f9TNi3
IjUZxJTnY/IXS+O0PqeHsX3q6wkjFMdMdeOGeVFydEnEFAHpTTPmZwO78MUC43lD
qZemQZU+TvI1TkLX0mOIKGamMHEssdfjMoYclkR9UaqIZ1g9MUxYJTOEZOhgtvLo
sZXhLjr1nXgP1jLqledT9gtc96sBgTIwWDUIzhBHDQrcHRSc2bzScUg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:16 2025 by rpki-client