Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k4jG1xJ9Iwx866eKFVxucmZkGns.roa
File:                     k4jG1xJ9Iwx866eKFVxucmZkGns.roa (raw, json)
Hash identifier:          Wz1XVGMzxYKq04Oyi+w8DQpHVyW2jhbgZL8KTrN8SmY=
Subject key identifier:   93:88:C6:D7:12:7D:23:0C:7C:EB:A7:8A:15:5C:6E:72:66:64:1A:7B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       16AB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k4jG1xJ9Iwx866eKFVxucmZkGns.roa
Signing time:             Mon 26 Aug 2024 05:22:28 +0000
ROA not before:           Mon 26 Aug 2024 05:22:28 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18049
IP address blocks:        175.183.64.0/20 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5803 (0x16ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Aug 26 05:22:28 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9388C6D7127D230C7CEBA78A155C6E7266641A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:13:f1:be:99:45:bb:6c:d0:68:23:41:a5:
                    9c:f2:84:2f:41:d3:d9:1d:aa:43:a3:e4:e8:1f:ba:
                    90:f8:9e:12:36:bd:d2:b7:7e:df:62:a0:11:84:dd:
                    84:19:68:97:30:8b:8a:0f:8a:f9:85:4a:ac:65:ee:
                    e9:37:ae:5b:6b:82:80:f5:5c:29:b3:de:a2:f9:a6:
                    44:85:a4:96:dc:dd:2e:bb:c7:75:fd:94:75:b9:ef:
                    39:7e:62:38:bb:de:3a:ff:f1:b4:5b:12:33:a3:4c:
                    55:fd:ba:1d:ed:d4:97:7b:5e:74:30:10:b6:0c:82:
                    6d:04:e4:53:22:dd:6e:4e:10:65:94:08:d5:36:16:
                    7a:fa:8b:e8:76:d2:4a:01:d3:a7:38:53:86:71:38:
                    fc:7e:50:61:77:7f:a6:44:d1:9d:e9:4f:a8:e6:42:
                    f1:8c:5f:c7:70:56:08:57:1b:2e:0b:5a:48:cd:fb:
                    ab:19:cf:c6:10:83:a0:63:ea:44:b9:2f:8b:a5:8d:
                    d2:a2:e1:46:c2:39:8e:20:3f:b4:21:37:15:ae:bf:
                    df:96:0b:c3:dc:23:61:83:3f:96:78:c5:e2:bb:e0:
                    f9:90:16:b8:b7:8f:80:12:08:ed:d0:34:cd:4d:a2:
                    f8:91:7e:cc:56:3a:bd:70:16:88:ea:f1:44:f8:c6:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:88:C6:D7:12:7D:23:0C:7C:EB:A7:8A:15:5C:6E:72:66:64:1A:7B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k4jG1xJ9Iwx866eKFVxucmZkGns.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:de:1b:ef:09:79:d1:b5:d3:a7:40:a1:6e:68:97:59:9f:9f:
         f0:5b:d4:9c:53:9b:55:89:29:f0:1a:41:ab:c9:29:87:1a:5e:
         8b:3f:4d:88:d9:f6:65:d9:50:b0:11:b3:89:a4:8a:8e:3c:6b:
         ee:7e:54:33:5f:3c:9e:13:75:dd:05:65:b6:ff:e1:70:b4:fa:
         f5:b8:d1:79:b6:12:08:c1:88:05:ce:61:cd:f6:5d:ad:e4:56:
         54:7f:e6:ae:9f:94:46:43:eb:24:06:05:80:fa:c0:01:e3:d6:
         cc:4f:41:8c:14:3d:ac:f7:8f:da:13:b7:0d:a1:cd:e0:68:d8:
         9d:c6:6b:05:ce:30:29:41:8f:f2:86:5d:96:10:eb:2b:95:9c:
         f3:5c:d9:97:de:23:30:9b:87:4c:4a:a5:05:25:39:c6:49:fd:
         c9:b2:7e:54:8c:0c:1f:65:ee:85:0b:9d:1f:c8:3a:04:18:23:
         c1:21:39:79:3d:f4:88:3e:ea:d1:b7:e6:4f:5d:55:2e:12:7e:
         92:c1:d2:40:65:16:a1:a4:0d:d9:be:b6:30:2a:4b:37:fa:a1:
         9f:39:ef:cd:b4:23:a7:66:5a:9f:e2:ce:36:57:26:6d:24:55:
         fe:4d:34:84:d4:20:67:f9:d4:f7:1b:d8:0b:2d:2a:a0:04:9f:
         98:cb:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:21 2025 by rpki-client