Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/W5-hL4R5qERRipekynxPDxXUyN0.roa
File:                     W5-hL4R5qERRipekynxPDxXUyN0.roa (raw, json)
Hash identifier:          n8Au7iQUH+Ff3aKvgfeTKxnktPMfoYIEsbPeAHXw0ow=
Subject key identifier:   5B:9F:A1:2F:84:79:A8:44:51:8A:97:A4:CA:7C:4F:0F:15:D4:C8:DD
Certificate issuer:       /CN=9654330DD1FA2ED60FCD69F26F2138CA2C8BEC73
Certificate serial:       01C2
Authority key identifier: 96:54:33:0D:D1:FA:2E:D6:0F:CD:69:F2:6F:21:38:CA:2C:8B:EC:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/llQzDdH6LtYPzWnybyE4yiyL7HM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/W5-hL4R5qERRipekynxPDxXUyN0.roa
Signing time:             Mon 26 Aug 2024 05:27:53 +0000
ROA not before:           Mon 26 Aug 2024 05:27:53 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7483
IP address blocks:        103.24.52.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9654330DD1FA2ED60FCD69F26F2138CA2C8BEC73
        Validity
            Not Before: Aug 26 05:27:53 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5B9FA12F8479A844518A97A4CA7C4F0F15D4C8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:32:94:cb:a0:04:c4:66:38:47:ab:65:19:
                    43:dc:b0:f1:46:6f:4d:f0:26:0f:9f:54:c5:5a:1d:
                    a0:44:87:44:28:83:23:bf:ea:90:11:6e:45:3c:55:
                    76:c9:19:a4:c6:68:40:c3:6d:f4:cb:ab:79:07:c8:
                    2d:5c:c7:20:89:f2:76:96:ed:7b:07:37:98:04:ab:
                    7f:28:ea:81:f7:b9:04:c7:d7:a3:f6:66:d5:13:e9:
                    2c:63:08:86:5f:b3:65:78:21:3f:1b:d0:f4:a7:2f:
                    e6:bd:29:25:6b:db:fc:57:e6:ee:3c:42:41:44:69:
                    31:41:96:68:e6:df:19:0a:e9:71:05:ae:e4:ff:1c:
                    b6:4d:e1:cf:85:e3:e5:34:cc:32:cb:ec:ef:43:12:
                    d5:25:aa:18:d9:9c:b2:4c:f1:8e:4d:b7:d0:8a:b0:
                    f1:d5:6e:de:56:44:2e:c0:78:b5:a6:6f:93:07:f7:
                    ec:8a:0c:29:00:3f:0c:b6:70:dd:64:dc:b7:9d:fd:
                    be:d8:b7:1a:78:7c:f8:8b:64:ea:8c:13:be:bd:b6:
                    7d:8a:f0:7e:98:33:4f:09:6c:80:01:e3:ce:d2:16:
                    37:b0:bd:45:4b:fd:0f:85:b1:36:f1:18:3d:b5:10:
                    9f:d1:e7:1f:c4:86:10:1d:2c:bf:d4:b9:ad:7a:ce:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:A1:2F:84:79:A8:44:51:8A:97:A4:CA:7C:4F:0F:15:D4:C8:DD
            X509v3 Authority Key Identifier:
                keyid:96:54:33:0D:D1:FA:2E:D6:0F:CD:69:F2:6F:21:38:CA:2C:8B:EC:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/llQzDdH6LtYPzWnybyE4yiyL7HM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/llQzDdH6LtYPzWnybyE4yiyL7HM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/W5-hL4R5qERRipekynxPDxXUyN0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:ba:a7:a7:88:28:bf:5b:e7:a9:94:95:dc:40:8f:45:24:15:
         63:ae:70:06:10:0a:cf:f9:54:27:01:cb:8c:ca:d4:98:f8:33:
         5d:3f:1e:55:8f:f5:ed:a2:86:d6:03:67:03:bd:f0:1d:ae:c3:
         d5:1b:52:3f:63:09:d8:4f:3f:fb:05:de:5d:0b:d8:2c:9c:45:
         d9:68:1c:61:35:06:89:0a:ca:14:5c:e2:19:0b:2f:4c:aa:16:
         dc:97:01:ef:f6:0d:e3:88:90:1e:bc:fc:d9:a7:be:49:cb:ba:
         67:7d:7f:e0:ef:c5:a6:d4:be:f5:c1:49:5d:4a:ca:62:ee:27:
         a3:de:c6:07:d7:1e:16:19:60:d8:da:8a:a3:87:f9:bc:5d:5f:
         a0:e5:03:22:95:07:39:94:74:af:22:98:bb:f1:c7:ef:ef:7a:
         45:f8:7e:29:04:65:a0:06:69:0b:60:42:2a:64:3c:06:be:f5:
         9d:c7:77:b6:e4:3d:b6:06:bd:4e:27:54:d0:22:c7:8e:a9:a9:
         88:99:40:dc:89:a2:b4:3b:5a:34:cb:08:e8:1f:f5:1d:34:1e:
         36:fd:be:e1:b4:ad:8f:83:aa:02:90:8d:37:37:37:0c:79:e2:
         e5:49:34:9f:00:3a:c2:eb:0d:07:28:f4:9a:b4:df:6a:49:2c:
         97:c3:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:02 2025 by rpki-client