Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/yLGIThA4fGCBCPoeIWt-rTJg_aQ.roa
File:                     yLGIThA4fGCBCPoeIWt-rTJg_aQ.roa (raw, json)
Hash identifier:          a4q0zU/OTNB/52OwlibYa+pDHeTG4QooWz7cRT81KKA=
Subject key identifier:   C8:B1:88:4E:10:38:7C:60:81:08:FA:1E:21:6B:7E:AD:32:60:FD:A4
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0CE5
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/yLGIThA4fGCBCPoeIWt-rTJg_aQ.roa
Signing time:             Mon 26 Aug 2024 05:27:05 +0000
ROA not before:           Mon 26 Aug 2024 05:27:05 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24157
IP address blocks:        2401:7080::/32 maxlen: 48
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 13:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Aug 26 05:27:05 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=C8B1884E10387C608108FA1E216B7EAD3260FDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:13:8d:cb:33:18:e4:21:48:b6:40:e3:7f:
                    44:d2:08:d5:8b:4f:cf:f7:23:ff:83:cb:a6:e2:20:
                    b5:45:aa:11:b3:b3:16:cf:af:b1:da:c8:38:f9:e7:
                    f0:06:5d:91:20:ed:c8:f6:e9:97:43:b4:9b:fe:10:
                    dd:62:d6:76:ae:8e:81:f8:01:c4:be:de:8c:cb:0a:
                    d7:c9:4d:d7:62:f5:14:35:de:00:13:66:72:b7:30:
                    80:ca:35:b3:f7:89:cc:d7:2b:8e:9a:bf:7d:22:d8:
                    a5:10:b1:0b:e7:fe:dc:13:69:c7:be:f2:ff:08:7b:
                    64:7a:97:59:7b:d8:2d:8c:e8:85:b6:2d:c3:89:aa:
                    e2:f8:63:d7:08:1a:17:69:f5:ae:4f:9c:e9:51:2e:
                    c3:e3:8b:52:5c:d3:35:a2:4e:c3:3b:91:8e:c9:0c:
                    29:e8:cd:54:c3:2f:f9:1f:86:f4:78:f6:e4:4f:b4:
                    b2:35:67:20:52:ce:3e:a8:32:2e:f8:d3:cb:f9:94:
                    a0:33:79:d3:b7:70:ac:8d:e2:5e:0d:02:d5:be:63:
                    b8:53:83:e4:ae:f0:ee:23:d1:33:6a:df:56:45:1f:
                    c6:66:49:38:ab:9b:02:97:40:55:9d:56:c9:9c:04:
                    e6:7e:0f:d1:9d:3e:b6:17:13:9a:c2:74:5f:43:98:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:88:4E:10:38:7C:60:81:08:FA:1E:21:6B:7E:AD:32:60:FD:A4
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/yLGIThA4fGCBCPoeIWt-rTJg_aQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:e1:0f:14:47:46:11:4a:c9:7f:a0:9e:71:b7:cb:33:6c:1d:
         82:ed:09:ef:b3:98:b6:61:ae:e0:08:5f:93:1f:e6:d9:47:69:
         b7:97:6f:d9:f8:d7:85:46:b8:b0:0d:90:d5:0a:94:c4:71:8c:
         f4:4f:42:d5:0f:5c:6e:cb:6a:a0:cb:8f:cc:21:11:d6:0b:53:
         8a:4a:fc:51:10:bb:87:b1:99:f7:cf:a9:e5:90:2b:75:9b:29:
         da:35:3e:ac:83:08:d5:6a:1f:0a:13:1c:09:28:a4:12:18:90:
         c0:be:56:a1:4d:9f:7a:5b:a5:df:9e:a6:a2:1b:43:91:df:c5:
         96:f3:84:23:46:e9:42:5c:b7:1c:95:2a:c9:0f:35:f7:4e:58:
         54:a7:a0:41:9a:5f:83:c3:7a:12:62:96:c7:f7:76:71:c5:61:
         4e:01:89:46:89:e8:4a:25:62:80:88:df:9d:5b:6e:54:f6:00:
         fd:29:95:28:f6:f0:cb:d6:5e:36:2b:b1:74:92:97:8e:39:12:
         6c:79:83:47:55:0b:68:c7:3d:72:e6:4e:a7:6a:df:c2:6e:fb:
         e4:4c:10:8b:36:f9:e7:4c:6b:1d:a9:6a:bf:ad:f7:e8:4f:5c:
         44:c7:7f:8c:73:51:18:42:23:6f:d3:0f:7c:95:93:8f:6a:28:
         0d:3c:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:44 2025 by rpki-client