Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ggxi6BF5JoZaisA6RmNE6yVO-wA.roa
File:                     ggxi6BF5JoZaisA6RmNE6yVO-wA.roa (raw, json)
Hash identifier:          hhHXpYE2G1R3pNn6Er5w/otqpF/uXz49AVUSxSZMn0M=
Subject key identifier:   82:0C:62:E8:11:79:26:86:5A:8A:C0:3A:46:63:44:EB:25:4E:FB:00
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       162B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ggxi6BF5JoZaisA6RmNE6yVO-wA.roa
Signing time:             Mon 26 Aug 2024 05:21:51 +0000
ROA not before:           Mon 26 Aug 2024 05:21:51 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4780
IP address blocks:        175.183.0.0/17 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5675 (0x162b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 26 05:21:51 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=820C62E8117926865A8AC03A466344EB254EFB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:41:5e:02:72:1c:e9:2e:58:77:18:bc:73:
                    5e:79:a8:f6:8d:1f:e6:a9:b1:4d:ec:fb:65:5c:ff:
                    56:7c:b6:8a:c2:71:ad:33:76:c9:f2:45:d4:f6:b5:
                    ce:0d:62:bc:89:07:1d:2b:4f:38:b0:bb:e6:24:0f:
                    59:2e:93:e2:10:b8:c7:50:20:b7:0b:ee:e6:05:4c:
                    b1:4b:61:db:bd:cb:6c:c2:c5:b0:b9:ae:16:d1:8d:
                    77:0a:e6:d9:49:10:13:21:d5:e8:3a:22:3c:86:a2:
                    95:95:89:a7:98:7a:7a:39:d5:58:58:57:81:9e:63:
                    23:d1:b7:a9:e4:f4:38:af:43:a9:6c:3a:6e:68:ae:
                    ef:4a:29:f1:be:0e:c1:af:2c:38:91:63:21:4b:3c:
                    e0:bf:bf:7c:5e:2e:d2:02:d8:56:a0:d1:9f:13:ad:
                    48:fc:16:b0:65:12:fd:e0:2f:43:eb:10:01:4b:3b:
                    e2:bb:77:b7:5b:58:74:25:b8:2b:80:37:1b:20:0a:
                    65:4b:8d:32:95:4b:50:64:dc:be:44:96:be:e6:09:
                    19:4a:27:f8:fd:2c:43:bd:9b:36:0a:8d:a8:fe:be:
                    57:ef:cb:79:4b:aa:38:89:15:59:46:d0:5e:bf:f2:
                    a1:32:c7:a0:71:4c:96:e6:1e:0d:4e:fe:4d:36:ba:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:62:E8:11:79:26:86:5A:8A:C0:3A:46:63:44:EB:25:4E:FB:00
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ggxi6BF5JoZaisA6RmNE6yVO-wA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:a6:ed:6c:9a:7c:b6:c2:f4:da:42:04:41:07:99:36:75:85:
         4a:f0:98:27:d0:2e:b1:7b:82:83:15:b7:0f:9c:b1:ea:24:35:
         66:ca:dc:3d:ad:2f:c2:1b:f9:9c:b6:89:18:6d:dc:05:43:cd:
         ed:8f:e9:a6:c2:3a:af:6b:f1:49:14:bb:78:30:14:2b:ab:ce:
         e9:cb:85:43:8e:c3:a8:52:84:e5:5d:84:8f:29:6d:8d:aa:b9:
         35:9a:d1:03:cb:89:ee:8e:01:9c:55:ed:b1:31:12:94:ff:ff:
         39:3b:ac:92:68:bb:58:2a:94:51:11:74:91:5d:33:c5:05:15:
         c6:23:e1:47:68:69:68:45:45:f1:e1:04:c7:b8:f8:1c:b1:d6:
         35:42:2d:5c:aa:15:e8:eb:65:fc:81:d2:05:0a:2f:8f:a1:20:
         71:e8:5b:d0:a2:b7:b1:83:27:24:5b:10:3e:80:45:a1:c7:ec:
         15:0d:48:33:be:a2:37:f7:ae:ce:f7:dc:d1:53:fb:07:dd:d1:
         22:fa:a5:0a:77:a5:50:94:60:5f:50:9e:fd:bf:43:6a:46:25:
         8b:cc:15:8f:00:c7:a6:a3:b7:ef:1c:5f:33:ab:ff:ed:e5:02:
         94:6c:47:2e:8d:79:8f:b4:7b:33:11:49:a4:36:ac:1c:30:47:
         cb:17:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:43 2025 by rpki-client