Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8xUcp9IQF_zIssEejvscI4ulDUE.roa
File:                     8xUcp9IQF_zIssEejvscI4ulDUE.roa (raw, json)
Hash identifier:          s7B9AKiNZvi066PRsyMq72G7qajdz31n9ncSLleQz1A=
Subject key identifier:   F3:15:1C:A7:D2:10:17:FC:C8:B2:C1:1E:8E:FB:1C:23:8B:A5:0D:41
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       0C3E
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8xUcp9IQF_zIssEejvscI4ulDUE.roa
Signing time:             Mon 26 Aug 2024 05:23:48 +0000
ROA not before:           Mon 26 Aug 2024 05:23:48 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4781
IP address blocks:        210.63.101.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 13:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3134 (0xc3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Aug 26 05:23:48 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F3151CA7D21017FCC8B2C11E8EFB1C238BA50D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:43:0b:8d:31:c0:8e:a4:f3:d6:a1:07:f0:
                    99:1e:7d:ef:0a:42:18:14:6d:ff:3a:10:27:d1:2a:
                    fb:07:ab:00:60:80:2b:c5:b2:81:dd:c6:ae:21:f2:
                    64:7c:5d:df:d2:7e:e3:04:b8:e1:b8:12:ff:85:54:
                    b2:dd:cf:ec:71:4c:65:21:c9:4d:e6:84:0f:f3:fc:
                    a3:7d:e6:a2:60:b1:d5:0c:ff:3c:98:e0:1c:69:6f:
                    56:ca:1f:48:a2:b4:08:71:74:23:87:b4:ef:47:da:
                    d1:95:e7:56:83:b4:27:5c:47:92:83:19:31:c9:40:
                    b1:14:be:0a:f9:de:d3:db:f6:b0:b0:bf:9d:e4:dd:
                    86:f9:c8:24:95:6a:4b:ba:5d:23:9b:7d:0c:11:84:
                    0c:73:44:65:60:0b:29:d7:68:c5:3e:a7:ae:68:1b:
                    0e:48:9b:01:c8:b2:db:88:7c:41:39:b0:f0:c0:6a:
                    4d:0d:98:8f:48:3c:20:c5:b8:48:44:d3:d4:2d:88:
                    29:bb:63:14:5c:19:6e:67:38:d4:f3:f2:69:b9:8e:
                    a0:3f:0e:3f:6f:08:f3:ce:1d:f0:f5:38:6b:1a:2a:
                    0f:e6:b2:7a:55:c7:d2:ad:6a:5e:2f:28:d1:c4:de:
                    bc:c4:75:9a:46:a4:85:20:a4:a5:f2:30:49:89:cd:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:1C:A7:D2:10:17:FC:C8:B2:C1:1E:8E:FB:1C:23:8B:A5:0D:41
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8xUcp9IQF_zIssEejvscI4ulDUE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:7f:f5:40:ab:10:76:38:20:55:cf:b0:1d:4f:20:6a:b9:1c:
         0d:51:be:de:1b:9e:78:49:c1:28:25:8e:29:aa:3b:bf:76:a2:
         68:38:e3:6d:ad:98:db:7e:ed:f3:f3:ac:69:7a:df:10:ba:7d:
         e9:05:82:9e:f6:6f:7e:73:3b:b8:60:2d:c9:88:af:ee:77:9b:
         ac:d0:4a:86:68:a9:57:d6:cd:94:a0:b3:59:a0:e6:bd:49:0b:
         d6:2f:f4:4a:3c:9b:04:66:15:ef:55:8a:8c:6c:23:4e:86:4f:
         c3:61:bb:9b:8e:74:ae:86:a1:4e:2c:4f:e8:f8:cf:a5:7b:fb:
         a0:d4:ec:9e:d7:6b:1f:03:f2:e6:f7:8b:49:7b:e7:fe:a5:3d:
         83:67:5c:30:2a:ca:c6:c8:3a:66:8a:b3:53:bd:bc:e5:6b:4f:
         c2:b7:b0:38:e4:e1:8b:93:4d:c8:c4:83:61:5f:5d:e5:37:fc:
         0a:c6:9c:18:4f:8d:fc:5a:e6:44:9b:af:3c:d8:aa:d9:a7:8e:
         d1:ac:c8:51:89:fd:3a:18:e6:3e:5c:fe:63:88:de:c2:75:47:
         35:52:84:e6:b8:40:ac:22:f3:f2:e2:a2:c8:36:df:83:67:94:
         28:e4:42:d2:c5:3e:c6:62:09:5c:32:77:18:b7:5b:f7:b0:02:
         74:d6:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:46 2025 by rpki-client