Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EWBXJdYZa_WAt5vHiSN27-6HiIU.roa
File:                     EWBXJdYZa_WAt5vHiSN27-6HiIU.roa (raw, json)
Hash identifier:          I2bP9BI566Jij35f6Fh3epVu32sKEM5n16xngWXAVDM=
Subject key identifier:   11:60:57:25:D6:19:6B:F5:80:B7:9B:C7:89:23:76:EF:EE:87:88:85
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       11D2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EWBXJdYZa_WAt5vHiSN27-6HiIU.roa
Signing time:             Mon 26 Aug 2024 05:24:24 +0000
ROA not before:           Mon 26 Aug 2024 05:24:24 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131634
IP address blocks:        124.108.140.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4562 (0x11d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 26 05:24:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=11605725D6196BF580B79BC7892376EFEE878885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:89:4e:fe:ba:c6:2b:ea:ec:73:69:36:a2:
                    06:97:9c:64:e3:15:e1:4d:a3:be:b2:69:b3:51:e3:
                    bb:43:a1:f3:4d:82:bb:b2:a0:59:5e:28:55:8a:2c:
                    8b:c4:dc:d7:f9:0e:0f:be:1d:b6:41:7c:20:24:06:
                    d4:50:4c:20:61:9e:db:df:ef:99:c8:44:cf:c3:ec:
                    54:58:3a:98:74:8f:8a:fc:4a:5d:6f:b1:37:aa:aa:
                    3a:80:77:11:68:87:8b:5f:a2:e5:69:a8:47:c5:b3:
                    5b:4e:c2:26:66:ba:a6:d3:af:51:4d:bb:27:23:71:
                    52:f1:e7:9d:b3:e5:ec:53:ed:24:b8:ce:2d:4a:cd:
                    f5:15:23:d8:73:a3:88:55:d0:21:d4:88:32:28:05:
                    68:42:2e:42:a2:53:00:ae:1e:ce:bf:f2:db:cb:dc:
                    99:49:91:e0:db:fa:54:00:35:e7:75:e7:1f:43:d0:
                    e1:63:ce:a9:23:24:e7:67:ab:d2:1b:b9:ef:d4:6d:
                    b5:ba:6e:f0:bc:23:24:81:f1:9e:6b:2e:e0:19:63:
                    5a:7a:6d:97:9e:9d:ee:61:1b:38:00:e8:de:3d:5a:
                    2b:72:5f:16:8b:22:2d:7a:30:2a:dc:9b:b0:05:c7:
                    50:b2:f3:92:7c:4b:1b:40:42:36:88:c6:f8:52:bf:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:60:57:25:D6:19:6B:F5:80:B7:9B:C7:89:23:76:EF:EE:87:88:85
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/EWBXJdYZa_WAt5vHiSN27-6HiIU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:97:28:95:46:cc:85:e1:48:8b:d3:df:72:8d:90:e3:3f:
         0d:fc:86:a6:6d:0d:77:a4:14:81:78:55:b0:f2:1c:7d:85:1d:
         40:a1:b0:64:74:39:ab:e3:40:c8:fb:5d:79:df:6e:ff:48:fb:
         12:02:a7:92:5b:35:ba:4e:9f:7a:49:fd:a0:3e:fa:02:e8:f0:
         d4:b3:50:42:7e:a6:95:4b:0f:1e:98:ee:ed:0e:66:a3:f0:c3:
         73:37:0f:89:73:b4:e3:ec:c8:25:19:02:17:cd:b1:be:fc:e7:
         a8:be:6c:26:66:cc:42:7b:a3:40:37:14:fa:49:3d:81:19:6b:
         a0:8b:b5:14:e4:da:04:4f:c3:c2:d7:38:6b:5b:8f:4d:48:08:
         6c:1f:e9:c0:71:4b:ef:07:ff:e9:7e:a9:27:ae:9d:16:99:fe:
         8b:13:65:93:dc:5f:8f:2e:ed:f8:ac:07:5a:52:89:e3:e7:f9:
         a6:04:0e:1e:6c:b8:08:15:a2:54:8b:6e:45:b3:6c:7e:c7:4b:
         70:b1:f2:82:f7:bc:2a:c6:bc:e2:21:dd:c6:32:54:11:20:13:
         05:2d:89:c7:08:dc:54:e1:49:08:c4:7a:4e:83:ae:39:89:ff:
         17:d1:65:9e:95:1f:4b:e1:c9:9f:6f:86:0a:d8:5c:0f:42:5f:
         67:6b:18:6f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDExNjA1NzI1RDYxOTZC
RjU4MEI3OUJDNzg5MjM3NkVGRUU4Nzg4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwCYlO/rrGK+rsc2k2ogaXnGTjFeFNo76yabNR47tDofNNgruy
oFleKFWKLIvE3Nf5Dg++HbZBfCAkBtRQTCBhntvf75nIRM/D7FRYOph0j4r8Sl1v
sTeqqjqAdxFoh4tfouVpqEfFs1tOwiZmuqbTr1FNuycjcVLx552z5exT7SS4zi1K
zfUVI9hzo4hV0CHUiDIoBWhCLkKiUwCuHs6/8tvL3JlJkeDb+lQANed15x9D0OFj
zqkjJOdnq9Ibue/UbbW6bvC8IySB8Z5rLuAZY1p6bZeene5hGzgA6N49WityXxaL
Ii16MCrcm7AFx1Cy85J8SxtAQjaIxvhSv2bJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUEWBXJdYZa/WAt5vHiSN27+6HiIUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRVdCWEpkWVphX1dBdDV2
SGlTTjI3LTZIaUlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AXxsjDANBgkqhkiG9w0BAQsFAAOCAQEAglqXKJVGzIXhSIvT33KNkOM/DfyGpm0N
d6QUgXhVsPIcfYUdQKGwZHQ5q+NAyPtded9u/0j7EgKnkls1uk6fekn9oD76Aujw
1LNQQn6mlUsPHpju7Q5mo/DDczcPiXO04+zIJRkCF82xvvznqL5sJmbMQnujQDcU
+kk9gRlroIu1FOTaBE/Dwtc4a1uPTUgIbB/pwHFL7wf/6X6pJ66dFpn+ixNlk9xf
jy7t+KwHWlKJ4+f5pgQOHmy4CBWiVItuRbNsfsdLcLHygve8Ksa84iHdxjJUESAT
BS2JxwjcVOFJCMR6ToOuOYn/F9FlnpUfS+HJn2+GCthcD0JfZ2sYbw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:10 2025 by rpki-client