Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/7Bu9250I6-ykcKtONUcoCStosQI.roa
File:                     7Bu9250I6-ykcKtONUcoCStosQI.roa (raw, json)
Hash identifier:          9il0PH94urLxnDf94+JO/EjcY2GBCI7LD40+sBqHnUg=
Subject key identifier:   EC:1B:BD:DB:9D:08:EB:EC:A4:70:AB:4E:35:47:28:09:2B:68:B1:02
Certificate issuer:       /CN=4B46CE8F8031BAB75364DA5BD981E888504FB411
Certificate serial:       03
Authority key identifier: 4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/7Bu9250I6-ykcKtONUcoCStosQI.roa
Signing time:             Wed 09 Oct 2024 11:14:13 +0000
ROA not before:           Wed 09 Oct 2024 11:14:13 +0000
ROA not after:            Wed 08 Oct 2025 15:30:28 +0000
asID:                     38047
IP address blocks:        160.187.200.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 06:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B46CE8F8031BAB75364DA5BD981E888504FB411
        Validity
            Not Before: Oct  9 11:14:13 2024 GMT
            Not After : Oct  8 15:30:28 2025 GMT
        Subject: CN=EC1BBDDB9D08EBECA470AB4E354728092B68B102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:f7:20:95:1b:c3:1b:ea:44:9a:91:93:31:
                    7d:6f:78:58:56:66:ca:c8:fe:59:40:62:59:ce:ed:
                    df:7a:fb:5b:80:57:88:e9:2a:22:46:a4:37:de:d4:
                    61:64:6a:fa:c5:ed:c5:25:78:b5:ec:5d:c3:9b:61:
                    0d:c6:ea:0b:d6:84:45:34:eb:12:9e:bd:63:c8:9b:
                    13:0b:6c:29:82:f6:0c:40:fe:49:3d:ad:ea:21:47:
                    2d:d1:f1:d8:9e:1a:96:91:c9:d7:92:59:c3:bb:b3:
                    23:b1:f0:17:11:65:6f:30:a3:5c:1e:f6:d6:16:84:
                    e4:94:bd:a2:56:94:8e:95:35:3e:da:27:21:46:a2:
                    47:5a:d1:06:f3:d7:8e:ed:58:3d:34:41:5f:6a:fd:
                    77:8f:ba:68:a7:80:07:b9:dc:83:b4:78:29:f3:9b:
                    96:a1:d0:dc:ab:2a:c5:cf:bf:5e:f3:4c:52:79:65:
                    b9:2c:a0:15:ef:1e:df:c4:5f:8d:2e:73:3d:22:83:
                    69:54:15:43:2d:f7:2f:a0:31:16:ca:8a:8d:52:e6:
                    4f:ac:73:ab:cd:7d:48:b2:0c:b7:db:bc:18:9f:ef:
                    1c:d8:f6:a0:01:2e:31:41:f9:60:2f:d6:87:be:2c:
                    fb:63:a9:71:17:29:a4:48:f3:3a:cb:8b:59:20:52:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:BD:DB:9D:08:EB:EC:A4:70:AB:4E:35:47:28:09:2B:68:B1:02
            X509v3 Authority Key Identifier:
                keyid:4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/7Bu9250I6-ykcKtONUcoCStosQI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:76:b7:79:69:d6:02:df:20:7c:ba:8a:f5:7f:67:e5:98:c9:
         f9:55:1a:c2:98:18:94:15:bf:72:45:a5:ae:6c:d3:85:da:bb:
         77:ec:0e:93:7c:98:d1:c3:bb:b4:11:c8:cf:03:20:85:3e:ca:
         33:1f:d0:92:4d:00:c5:0e:5e:94:21:5a:c0:24:56:27:1b:98:
         a2:84:f7:43:94:38:0f:27:5e:e8:b9:d7:00:aa:3b:93:8a:99:
         1a:69:e9:0f:ac:96:05:d1:78:ce:8a:dc:1e:08:6c:ae:63:8a:
         c3:d2:77:6f:62:1a:96:ae:51:28:de:b4:7e:6d:e6:0b:2b:17:
         0c:e9:34:3d:bb:7d:95:57:3f:34:ac:40:5e:5a:2c:a6:78:f0:
         06:68:3d:37:d7:e4:5f:34:86:80:49:35:30:dc:fc:a3:c9:f1:
         1c:1e:6e:27:55:06:e9:8b:26:65:12:1e:2c:54:51:c4:bb:fb:
         3f:c7:09:96:de:e3:75:21:63:81:13:09:b5:91:a8:f1:82:9c:
         23:3f:64:a7:dc:46:16:d1:7b:80:a6:49:13:93:7f:58:65:ef:
         29:f8:3c:66:d8:d0:1d:1b:50:74:56:13:37:c3:87:96:d7:c8:
         0b:32:2b:c2:c3:a8:d3:7c:f9:10:d4:b6:0c:e1:5c:59:59:75:
         9d:59:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 07:37:51 2024 by rpki-client on console-ams.rpki-client.org