Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/l4tLRWV2aNUpe6Q34l090vrG-uw.roa
File:                     l4tLRWV2aNUpe6Q34l090vrG-uw.roa (raw, json)
Hash identifier:          xpIHqmUmb8GOnAQawMF6SYeyUj/dvhCeZF3xPv/b3/o=
Subject key identifier:   97:8B:4B:45:65:76:68:D5:29:7B:A4:37:E2:5D:3D:D2:FA:C6:FA:EC
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0D13
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/l4tLRWV2aNUpe6Q34l090vrG-uw.roa
Signing time:             Mon 26 Aug 2024 05:19:33 +0000
ROA not before:           Mon 26 Aug 2024 05:19:33 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9416
IP address blocks:        119.14.0.0/17 maxlen: 17
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Aug 26 05:19:33 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=978B4B45657668D5297BA437E25D3DD2FAC6FAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:53:27:29:07:2f:08:47:7a:69:48:27:0d:
                    51:93:fa:47:93:8b:38:a8:74:1c:da:d6:10:0c:c2:
                    f8:e1:44:75:fe:b9:cb:b6:2a:5b:75:18:65:8f:35:
                    04:cb:5e:cb:51:98:c5:0e:1e:3c:18:e8:65:ee:73:
                    7a:b6:2a:98:5c:f8:ca:63:53:82:5a:66:1b:62:67:
                    2a:66:c5:36:ab:37:d5:e4:42:b2:8c:9f:ad:ba:e7:
                    29:11:de:cb:f0:07:3b:ca:e8:1c:1a:34:84:4d:0e:
                    d7:cd:d5:68:4d:d0:31:ad:a3:2b:5d:fb:39:58:78:
                    8e:4f:b0:56:9c:96:83:d5:8c:fa:81:d8:20:30:9d:
                    48:3f:7d:4c:13:0a:36:52:39:ef:8b:34:81:f3:4e:
                    c6:02:e2:7b:f8:5a:1c:f8:99:7d:a0:6f:b1:3b:5d:
                    67:66:14:eb:cb:5c:a1:88:52:c8:46:11:4c:8d:21:
                    16:30:85:a0:41:23:ff:ed:e4:ef:7f:5d:cb:d7:c2:
                    07:55:3c:78:6a:3b:2e:92:d8:bf:ff:ad:87:9f:25:
                    2a:76:7e:ad:a4:31:33:f0:48:23:a1:33:fd:35:62:
                    9c:83:93:90:6e:e5:57:8f:70:54:98:3e:27:02:23:
                    fe:90:30:4b:61:4e:4f:92:a7:fb:d8:12:99:c8:04:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:4B:45:65:76:68:D5:29:7B:A4:37:E2:5D:3D:D2:FA:C6:FA:EC
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/l4tLRWV2aNUpe6Q34l090vrG-uw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.14.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         34:4c:da:93:eb:86:a5:69:4f:f7:1a:ed:ce:2e:2b:66:c0:e7:
         1a:f6:22:95:ec:5a:11:e9:95:3e:a0:09:ce:6b:6e:e0:fa:53:
         c3:4d:8b:25:3f:d7:b1:73:d4:90:21:60:bf:4e:96:27:a7:21:
         8f:a3:d6:63:f8:71:9e:90:d6:d1:f1:fb:f9:93:69:3e:2e:de:
         73:08:3b:2f:c6:d7:35:50:99:d8:48:63:63:71:4a:a8:a2:c0:
         29:e3:b2:9f:a4:de:09:73:27:5f:13:d1:20:90:22:9a:5e:68:
         d9:d3:ce:51:78:19:86:81:85:fd:49:da:9c:78:49:85:cc:c9:
         5b:e6:79:69:88:5d:bb:bc:13:86:4b:b7:b3:a8:13:ff:ca:cb:
         b2:48:79:0b:6d:2b:9d:a5:0f:58:87:d0:13:ef:2f:1c:21:27:
         08:bc:a7:60:74:1f:3f:43:9f:9a:f3:be:fe:8c:40:f9:89:4f:
         05:c0:f4:ee:ee:46:08:ff:70:33:11:7c:04:9d:4c:79:3d:af:
         5a:86:5e:df:14:b5:9a:5b:c7:10:76:58:72:ce:1e:b5:3d:1d:
         f9:09:2a:c7:59:c6:dd:77:8f:fe:35:76:6f:5a:f7:7c:6f:a2:
         bc:09:90:1d:12:f5:5c:97:ee:37:fe:60:28:a9:63:77:37:e2:
         b5:a9:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:46 2025 by rpki-client