Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/7n-zgGf3x_tdaIBl4uVqqmvpCmw.roa
File:                     7n-zgGf3x_tdaIBl4uVqqmvpCmw.roa (raw, json)
Hash identifier:          b2rrUxelgYTHzvX3FIuVVR/u6iazLE2SL0iD0mmSAoU=
Subject key identifier:   EE:7F:B3:80:67:F7:C7:FB:5D:68:80:65:E2:E5:6A:AA:6B:E9:0A:6C
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0C7A
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/7n-zgGf3x_tdaIBl4uVqqmvpCmw.roa
Signing time:             Mon 26 Aug 2024 05:26:34 +0000
ROA not before:           Mon 26 Aug 2024 05:26:34 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18182
IP address blocks:        27.105.0.0/16 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3194 (0xc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Aug 26 05:26:34 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EE7FB38067F7C7FB5D688065E2E56AAA6BE90A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:03:a3:f5:f6:20:b9:bc:02:8e:d3:06:ae:
                    c9:99:c8:e1:c8:e4:20:15:26:93:d4:2a:33:2a:39:
                    61:39:4c:41:cb:7b:19:e8:9d:d4:0b:62:ab:c3:d4:
                    8a:33:26:be:3c:be:07:b1:9f:8f:1b:d9:67:d0:a9:
                    c4:43:0b:e8:e4:1f:78:8b:41:cd:f0:f0:37:5f:08:
                    ad:e0:db:d1:0c:38:21:1e:fc:99:51:f0:41:ff:91:
                    03:05:6e:4a:fe:ef:58:31:67:9b:2a:68:fe:4d:fd:
                    66:8a:a5:4b:96:16:65:ab:1d:30:2d:d5:a8:88:90:
                    1f:f2:30:d4:e8:2c:0b:83:9e:21:ec:0e:74:2e:8c:
                    5c:db:1c:17:d5:71:c6:29:80:0f:b5:50:24:d4:d0:
                    0a:35:68:87:cf:13:4c:14:00:6e:d0:c2:6e:90:4f:
                    ac:a8:d1:74:f6:d4:52:29:d9:83:d5:ed:d2:ad:bd:
                    86:07:80:02:4e:40:f2:05:13:b1:05:b8:06:4e:a3:
                    0c:fa:fb:02:a1:8f:ab:0b:db:02:b9:47:7d:dd:dc:
                    ea:2e:99:b9:62:66:3f:96:b2:88:37:c4:67:12:1c:
                    37:55:89:b3:53:3a:8c:96:e9:c7:68:90:d3:b6:25:
                    ba:01:57:8c:05:7e:45:5b:5f:aa:61:35:9d:ab:f6:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:B3:80:67:F7:C7:FB:5D:68:80:65:E2:E5:6A:AA:6B:E9:0A:6C
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/7n-zgGf3x_tdaIBl4uVqqmvpCmw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:2c:d9:4a:9c:15:07:35:dc:76:ca:07:8c:da:1e:67:d9:
         08:a6:2b:8b:4b:0a:ea:ad:5e:2c:b7:8e:bc:80:4a:36:45:42:
         73:77:8c:49:e2:0d:60:7b:85:1b:7d:10:a3:c9:75:e1:5f:3b:
         34:7a:1b:7c:2d:27:13:5e:95:3b:cb:35:43:90:47:c4:d8:8c:
         bf:4f:15:69:0e:08:98:37:73:27:87:84:b5:de:16:bc:41:bb:
         96:46:d8:27:52:37:dd:96:91:ee:93:82:2a:63:68:4f:4d:0a:
         13:93:b9:17:fc:29:01:4b:68:49:f3:08:2a:ec:c0:66:60:fa:
         ff:35:d9:09:40:f4:e5:ba:fd:9b:c7:72:e5:fa:69:77:d0:82:
         86:db:fb:f9:2e:a8:55:6d:99:03:1c:64:38:b5:ce:cc:1c:6a:
         ff:bf:60:72:a1:b8:5e:9d:09:03:14:7f:a8:9c:76:7a:4b:43:
         e7:d7:b0:38:b4:47:f7:df:16:f9:91:a9:c7:e5:50:ba:a0:79:
         bd:2a:5d:d6:c3:73:a1:f0:fe:2b:19:25:ed:56:ef:23:9f:bf:
         b4:04:b1:2c:6d:14:c2:9a:d6:11:4f:66:15:56:5d:92:ed:90:
         88:62:67:1e:df:f8:f1:ce:b2:d3:ed:56:53:57:55:eb:98:f3:
         83:ff:f6:a8
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNDA4MjYw
NTI2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFN0ZCMzgwNjdGN0M3
RkI1RDY4ODA2NUUyRTU2QUFBNkJFOTBBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGeAOj9fYgubwCjtMGrsmZyOHI5CAVJpPUKjMqOWE5TEHLexno
ndQLYqvD1IozJr48vgexn48b2WfQqcRDC+jkH3iLQc3w8DdfCK3g29EMOCEe/JlR
8EH/kQMFbkr+71gxZ5sqaP5N/WaKpUuWFmWrHTAt1aiIkB/yMNToLAuDniHsDnQu
jFzbHBfVccYpgA+1UCTU0Ao1aIfPE0wUAG7Qwm6QT6yo0XT21FIp2YPV7dKtvYYH
gAJOQPIFE7EFuAZOowz6+wKhj6sL2wK5R33d3OoumbliZj+Wsog3xGcSHDdVibNT
OoyW6cdokNO2JboBV4wFfkVbX6phNZ2r9n49AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU7n+zgGf3x/tdaIBl4uVqqmvpCmwwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5
B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv
ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC83bi16Z0dmM3hfdGRhSUJsNHVW
cXFtdnBDbXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAG2kw
DQYJKoZIhvcNAQELBQADggEBADJfLNlKnBUHNdx2ygeM2h5n2QimK4tLCuqtXiy3
jryASjZFQnN3jEniDWB7hRt9EKPJdeFfOzR6G3wtJxNelTvLNUOQR8TYjL9PFWkO
CJg3cyeHhLXeFrxBu5ZG2CdSN92Wke6TgipjaE9NChOTuRf8KQFLaEnzCCrswGZg
+v812QlA9OW6/ZvHcuX6aXfQgobb+/kuqFVtmQMcZDi1zswcav+/YHKhuF6dCQMU
f6icdnpLQ+fXsDi0R/ffFvmRqcflULqgeb0qXdbDc6Hw/isZJe1W7yOfv7QEsSxt
FMKa1hFPZhVWXZLtkIhiZx7f+PHOstPtVlNXVeuY84P/9qg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:38 2025 by rpki-client