Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q5ZGVIocBrLwrt6L-oaWZiJFojE.roa
File:                     q5ZGVIocBrLwrt6L-oaWZiJFojE.roa (raw, json)
Hash identifier:          Ar1iMDo9MD9D1gVpnXIkRKKN7ZMQ58NgCj4xAi2MfNg=
Subject key identifier:   AB:96:46:54:8A:1C:06:B2:F0:AE:DE:8B:FA:86:96:66:22:45:A2:31
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       1228
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q5ZGVIocBrLwrt6L-oaWZiJFojE.roa
Signing time:             Mon 26 Aug 2024 05:24:45 +0000
ROA not before:           Mon 26 Aug 2024 05:24:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        175.96.0.0/14 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Aug 26 05:24:45 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AB9646548A1C06B2F0AEDE8BFA8696662245A231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:c7:bf:ab:02:90:92:f7:8c:6b:bd:17:06:
                    81:7c:e3:35:00:7d:66:89:6d:39:9f:e2:87:d8:ae:
                    71:67:8a:b3:88:9d:f5:e1:02:a1:bb:ad:c0:74:67:
                    a2:60:81:e7:a8:5e:0b:01:b6:d1:d5:18:77:0e:c9:
                    c9:4f:a0:83:a1:f7:14:6e:d2:1c:10:8e:11:34:3f:
                    74:54:85:41:cf:e1:3d:eb:a1:70:d4:fc:96:95:dd:
                    09:76:a7:40:71:c4:14:3d:fe:25:b6:eb:f6:f5:8b:
                    c3:f8:2a:a3:40:d2:07:a8:0e:86:e7:99:c9:a5:59:
                    a8:5e:c1:7d:f4:65:7e:e2:76:df:88:42:84:21:bf:
                    9c:b9:22:0a:27:9d:0a:4c:43:c8:17:14:4a:44:e5:
                    f6:99:5b:96:81:6b:28:11:52:2b:b5:35:4c:eb:8a:
                    49:a3:3b:9c:73:db:36:88:b7:fb:b4:e9:c1:43:46:
                    61:f9:e8:3c:f1:2e:6e:b2:e5:5c:ce:b3:ff:8d:bd:
                    1b:5c:89:a3:2d:9b:88:0f:2f:c4:74:62:cd:31:f6:
                    d1:e0:51:74:16:14:e9:e0:3c:8c:aa:d4:e3:f4:2c:
                    96:fd:08:7c:3e:b9:89:d8:71:d4:5e:9c:c7:7d:ac:
                    eb:f1:6d:3b:bc:10:1d:9e:2d:da:e8:4d:a2:2f:f3:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:46:54:8A:1C:06:B2:F0:AE:DE:8B:FA:86:96:66:22:45:A2:31
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q5ZGVIocBrLwrt6L-oaWZiJFojE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:ab:4c:28:54:dc:ac:59:ff:49:3f:4c:8f:15:1a:d7:da:
         94:12:f0:07:a2:f2:d5:15:65:89:14:a7:58:65:de:74:56:02:
         41:aa:67:b5:50:71:ec:85:18:ad:11:36:3f:20:9c:b7:ea:e6:
         aa:82:1e:c9:db:21:5e:9d:84:b0:0f:0f:6e:3b:6b:36:46:7f:
         6d:c3:d6:69:32:5b:df:d9:ac:9c:2b:5c:58:33:27:bd:6a:3c:
         18:f8:e0:a3:2d:ed:b2:9e:43:59:e7:b5:cb:51:fa:04:41:f6:
         e7:ff:89:f0:e7:64:06:55:02:bc:b7:3d:02:57:c6:7a:af:e8:
         d7:1a:cc:67:16:13:94:6b:1e:ec:32:1c:0d:07:17:b9:54:94:
         90:96:8f:0b:6d:70:a6:de:1a:5c:96:79:9d:23:10:2b:2e:14:
         e0:81:05:61:99:54:45:9e:dd:e2:c8:07:ff:0b:d0:bc:dd:2e:
         19:5e:3e:2c:a9:5c:1b:f9:dd:21:25:02:c7:60:7a:27:16:62:
         10:8e:50:ee:0b:c2:dc:bb:b6:d0:35:d7:83:07:27:db:aa:d5:
         69:d7:f1:cc:12:8f:9c:d3:be:d5:c6:88:7b:b0:c2:0c:53:f6:
         6b:b1:5c:88:54:34:a7:29:dd:c4:ac:6f:57:d9:59:db:4d:c8:
         f1:5d:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:21 2025 by rpki-client