Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/lJTFusVBRZc6asHHn3GdRuiAlEY.roa
File:                     lJTFusVBRZc6asHHn3GdRuiAlEY.roa (raw, json)
Hash identifier:          cLSL0NWaKFxkj3qMEHJ391GgUG6TbBbwjo/Soy7on/4=
Subject key identifier:   94:94:C5:BA:C5:41:45:97:3A:6A:C1:C7:9F:71:9D:46:E8:80:94:46
Certificate issuer:       /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
Certificate serial:       EB
Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/lJTFusVBRZc6asHHn3GdRuiAlEY.roa
Signing time:             Tue 22 Oct 2024 18:01:45 +0000
ROA not before:           Tue 22 Oct 2024 18:01:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     216123
IP address blocks:        2401:5f20:f000::/48 maxlen: 127
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
        Validity
            Not Before: Oct 22 18:01:45 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9494C5BAC54145973A6AC1C79F719D46E8809446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:f0:b8:83:1f:96:c1:66:7f:ca:96:18:38:
                    82:90:e0:64:7e:43:7a:0b:f1:de:c4:08:74:9f:85:
                    c5:08:c7:76:e0:49:6c:72:84:34:11:7e:50:22:6e:
                    88:5d:8a:19:00:a0:6b:3f:dd:1c:2d:35:c6:88:54:
                    41:35:10:7a:dc:e4:b2:13:c6:7b:74:27:15:c8:3b:
                    e0:7b:78:4a:23:54:6b:da:d3:d1:89:a7:74:08:b8:
                    d7:db:67:4d:d1:2e:83:a7:31:d7:bb:f9:8e:a8:60:
                    8e:74:06:46:2e:52:4c:79:30:43:e1:5a:fe:ef:e3:
                    25:86:1c:a1:e0:ae:fe:fc:a7:ee:04:0e:c3:d6:b8:
                    b1:0c:81:17:bc:37:fe:9f:14:7e:6c:be:a6:62:d8:
                    0a:17:2a:c9:66:dd:6b:14:6e:59:98:e8:2b:9a:a2:
                    32:c6:0d:8d:65:39:98:4c:d0:28:17:39:7e:d5:de:
                    9d:57:6d:18:25:d7:21:f7:f1:92:d4:94:e8:7d:bf:
                    a9:07:26:d3:ea:fa:3f:0f:94:e6:cb:db:5e:93:2d:
                    dd:bc:98:72:fc:60:0d:b1:f1:24:b2:79:bf:12:8a:
                    40:e8:86:1c:62:ee:18:a5:ea:6b:6b:eb:60:45:53:
                    aa:58:1a:65:21:f0:4a:8b:31:cb:84:66:c0:70:d6:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:94:C5:BA:C5:41:45:97:3A:6A:C1:C7:9F:71:9D:46:E8:80:94:46
            X509v3 Authority Key Identifier:
                keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/lJTFusVBRZc6asHHn3GdRuiAlEY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5f20:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:59:99:cf:a5:1f:96:72:6f:2e:9b:5e:31:d0:95:b1:33:
         3f:66:55:17:99:5c:d2:b3:5a:a7:a8:ea:58:46:92:7a:5b:6e:
         dc:06:29:ff:ee:e8:1c:e5:b6:ec:63:10:0f:11:8a:92:05:f2:
         38:0f:95:3f:cd:08:b9:3f:1d:b4:c0:5c:85:16:74:0b:3b:96:
         ed:95:d0:5d:10:88:09:da:b6:d6:a0:ab:a5:c2:89:5d:85:a4:
         f4:dd:90:90:79:c5:4a:ec:b3:4e:4b:d2:5d:25:38:f5:d8:2c:
         21:77:70:31:1c:68:de:72:43:69:87:d7:9b:f2:35:41:79:73:
         a9:55:2f:27:9b:c5:9a:59:17:c5:dc:1c:5f:24:85:3c:75:26:
         82:d8:3c:79:a8:0f:15:55:c8:35:55:03:57:e5:07:99:6f:e6:
         16:c2:da:a0:ea:64:cb:cc:c7:c8:65:a1:20:22:b3:97:92:a7:
         d9:13:a6:52:9b:85:53:4c:4d:17:c9:1e:d7:7a:a1:8e:b9:1e:
         b7:34:4b:36:99:da:b7:9e:4c:38:84:84:83:fb:6e:0f:19:67:
         1d:0b:0a:db:0a:30:98:d4:95:36:20:98:05:2e:c3:48:24:da:
         b7:d4:aa:84:3a:33:80:5c:e7:af:1e:22:86:1b:9a:b2:41:1f:
         80:f1:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:51 2025 by rpki-client