Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7Ovhm_18b0Dp4OGMychFfVVsYJk.roa
File:                     7Ovhm_18b0Dp4OGMychFfVVsYJk.roa (raw, json)
Hash identifier:          S9XG3bktl5p+MlzLMw8AbiP3I14S8Fpvw4ugIYU9bKc=
Subject key identifier:   EC:EB:E1:9B:FD:7C:6F:40:E9:E0:E1:8C:C9:C8:45:7D:55:6C:60:99
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       11F3
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7Ovhm_18b0Dp4OGMychFfVVsYJk.roa
Signing time:             Mon 26 Aug 2024 05:24:32 +0000
ROA not before:           Mon 26 Aug 2024 05:24:32 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        210.17.17.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4595 (0x11f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 26 05:24:32 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ECEBE19BFD7C6F40E9E0E18CC9C8457D556C6099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:32:1e:b4:67:48:50:d8:bf:57:5b:ea:71:
                    d4:43:3c:c8:b8:78:7c:fb:ff:7d:79:c5:33:bf:56:
                    ef:01:20:e6:6f:46:a8:7a:3d:7e:07:97:b6:78:94:
                    07:c1:39:c1:d9:03:96:c9:3c:ae:ac:f6:0c:1a:dc:
                    17:9e:36:93:b6:01:5a:67:3c:d4:c4:64:22:34:ba:
                    cc:4d:d1:b5:ba:8b:5b:67:50:29:3b:51:45:f8:5e:
                    33:14:01:60:4c:c3:a1:6f:40:e5:a4:18:19:ff:a9:
                    2d:34:84:98:0a:05:a2:e6:e1:26:3e:36:6c:ff:1d:
                    ae:f4:66:75:9f:96:65:5e:c4:fb:79:e3:05:bd:74:
                    ec:da:2d:f1:45:e1:c3:06:e8:07:df:e8:0d:c3:3e:
                    9b:01:38:68:1d:6e:2a:ee:88:a5:c8:76:5b:d0:f1:
                    19:53:c2:87:3e:6d:85:b5:db:97:43:71:17:c9:15:
                    45:fc:96:7a:73:f7:13:3b:cb:aa:70:90:c4:39:96:
                    a5:2b:96:3a:4c:c4:98:8c:9e:3a:ac:71:1c:e4:f1:
                    43:82:e2:8e:9e:1f:b7:c5:71:32:00:aa:d3:70:08:
                    74:08:44:15:6e:d6:bd:2f:4b:a9:12:d0:82:90:d6:
                    20:15:f1:31:1d:7d:b4:6c:26:4c:2c:bd:5f:96:a4:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EB:E1:9B:FD:7C:6F:40:E9:E0:E1:8C:C9:C8:45:7D:55:6C:60:99
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7Ovhm_18b0Dp4OGMychFfVVsYJk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:28:42:75:2b:e6:9b:bf:f6:a8:86:93:2f:02:8d:f5:50:62:
         e7:c2:d1:ea:d3:e4:d1:fc:10:09:93:f4:34:1e:7b:cf:7c:11:
         60:b7:bd:d7:0a:ef:a2:58:52:80:51:2c:65:b9:53:29:f8:66:
         12:82:1f:12:1e:24:c1:3c:fc:1f:b6:ff:eb:52:eb:a7:c8:ab:
         fc:b3:44:f2:85:57:ec:30:90:3c:01:53:a8:69:b3:4f:a6:3a:
         a5:a2:fe:cf:7d:3c:36:dd:9c:82:62:6d:86:67:8e:a7:53:f4:
         9b:ad:9c:d6:4b:59:6e:f0:75:a2:5b:3f:ef:ae:46:d3:fd:36:
         b8:a8:82:8b:0a:4f:58:e0:94:d9:15:1c:10:95:6b:25:92:5e:
         42:c7:44:d7:34:af:3b:de:22:32:73:3d:94:f1:f9:85:50:6c:
         47:64:39:73:cd:e9:b6:af:21:ef:7d:65:54:6d:aa:9f:1c:82:
         f2:82:aa:b7:f6:bb:e3:29:b9:f9:df:7e:66:a9:5a:1d:ed:72:
         10:41:5e:06:79:06:e6:91:b6:25:53:21:a4:c7:8b:16:6c:72:
         fb:29:cc:62:99:43:65:69:7b:d5:ae:ae:08:5e:1c:3d:82:af:
         48:e8:c2:aa:be:14:84:48:28:d2:9b:3a:82:f2:05:4e:46:54:
         be:78:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:38 2025 by rpki-client