Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CCQlEpf6wHdzm52RBw9uT8T7utw.roa
File:                     CCQlEpf6wHdzm52RBw9uT8T7utw.roa (raw, json)
Hash identifier:          oF2JoaQbp8AZf24XfO9hd4M5Dl8bFwpP5X0bUkInDMU=
Subject key identifier:   08:24:25:12:97:FA:C0:77:73:9B:9D:91:07:0F:6E:4F:C4:FB:BA:DC
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       11D9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CCQlEpf6wHdzm52RBw9uT8T7utw.roa
Signing time:             Mon 26 Aug 2024 05:24:26 +0000
ROA not before:           Mon 26 Aug 2024 05:24:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        203.77.36.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4569 (0x11d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 26 05:24:26 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0824251297FAC077739B9D91070F6E4FC4FBBADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:21:37:d4:ef:cc:86:38:3a:23:87:ac:89:
                    e9:84:3c:f8:c5:ba:2d:cf:85:3e:81:55:ed:a3:4a:
                    4a:17:dd:1a:9b:a4:5c:5b:53:1a:61:33:a1:bb:21:
                    0b:48:b0:17:11:d3:dc:36:21:49:fc:f1:86:a2:cb:
                    e8:c8:70:de:98:95:46:c0:42:b7:81:9e:1b:b8:b1:
                    d4:9a:9c:31:d1:a5:11:9e:10:98:0b:68:4e:6f:5a:
                    01:b9:e9:70:38:27:54:aa:22:7c:18:4f:47:03:52:
                    7d:ba:d5:51:49:da:de:2b:89:90:3d:55:76:90:fb:
                    f4:39:51:d8:17:a7:8e:01:4c:c0:be:79:b7:3f:da:
                    b7:90:f0:76:a9:56:8b:0c:37:6d:c0:aa:9b:29:38:
                    bc:52:d7:b1:39:9a:59:ce:e1:53:22:6e:b9:ca:5d:
                    5b:84:85:f7:76:16:56:55:a8:fd:40:51:c7:7f:33:
                    9d:a9:60:ea:a7:6f:fa:3b:dc:17:1f:13:34:8d:85:
                    8a:95:1a:b6:1d:fd:a4:9a:fc:91:b5:60:ed:1b:6f:
                    18:a3:b7:99:d5:ac:80:a2:5c:29:c4:78:f9:b6:b5:
                    20:f0:78:ae:29:56:2b:34:a9:10:a9:03:e6:5b:32:
                    fc:85:8c:ea:76:55:26:d4:4e:5f:60:cc:83:e7:8b:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:25:12:97:FA:C0:77:73:9B:9D:91:07:0F:6E:4F:C4:FB:BA:DC
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/CCQlEpf6wHdzm52RBw9uT8T7utw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:16:a1:73:44:7e:12:0b:eb:d4:d2:fe:56:e5:05:f8:ba:41:
         44:1c:53:cd:65:ac:2d:88:42:0e:1c:85:0b:f6:d4:ad:30:7f:
         8c:0f:5a:8a:aa:fd:75:b1:e4:55:0f:e9:c7:4a:1e:ae:aa:b3:
         a1:30:a4:11:b3:b1:fd:b8:13:85:eb:bd:7d:59:36:da:e5:4c:
         fb:d3:34:be:2f:b4:3d:91:54:6a:44:c8:67:14:46:9c:c0:3f:
         eb:87:55:0c:b6:d3:7e:75:02:3a:d8:c9:3c:8f:6e:cf:61:c6:
         37:90:d8:07:2b:c0:f2:63:5c:70:43:7e:9c:f9:ba:6a:7f:e0:
         9a:50:6e:1c:c0:ea:50:f5:a6:59:bf:ed:1a:a4:6f:ed:79:c6:
         46:7e:cb:c7:ac:fc:96:2f:da:2e:37:33:33:af:ee:d0:47:9f:
         a7:7e:b1:40:9a:8f:53:bf:67:03:14:25:24:b1:74:18:c5:0d:
         6c:f1:f9:d2:a3:7f:37:16:52:72:4e:c4:b7:16:5b:65:81:5d:
         99:60:31:48:ce:1f:c0:c1:d9:68:3c:53:88:63:46:02:1e:fa:
         b8:4c:cb:6d:c6:9c:20:0e:80:65:54:59:06:13:3c:cf:82:f0:
         c4:5f:0c:9c:21:74:6b:97:3e:72:c3:17:49:a0:20:cb:42:e4:
         67:15:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:36 2025 by rpki-client