Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/1beL4g16FphyZJvdXZKaIJ_Pvqs.roa
File:                     1beL4g16FphyZJvdXZKaIJ_Pvqs.roa (raw, json)
Hash identifier:          Eon/VG0wa92jTK2OtLFXJGExDUPQlukka7ex13N1QSo=
Subject key identifier:   D5:B7:8B:E2:0D:7A:16:98:72:64:9B:DD:5D:92:9A:20:9F:CF:BE:AB
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0DA0
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/1beL4g16FphyZJvdXZKaIJ_Pvqs.roa
Signing time:             Wed 18 Sep 2024 04:55:52 +0000
ROA not before:           Wed 18 Sep 2024 04:55:52 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24168
IP address blocks:        103.30.47.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3488 (0xda0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 18 04:55:52 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D5B78BE20D7A169872649BDD5D929A209FCFBEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:e0:54:0f:78:1d:ac:69:f3:40:2d:fa:bb:
                    b9:cc:08:3b:b8:1c:4c:44:01:8a:d4:af:36:bb:08:
                    2f:67:f0:47:7e:cb:e4:cd:63:08:97:ac:9a:8b:46:
                    2e:0c:99:69:1f:12:cd:d2:0b:10:db:b1:cf:3c:3a:
                    8f:8c:89:dd:bb:fc:f0:e5:e7:a2:ad:78:e7:3e:46:
                    13:77:3a:26:54:ee:08:e9:d3:63:41:14:d8:e8:17:
                    b8:8c:e7:0c:51:4f:05:36:cf:75:4a:71:ce:5d:17:
                    45:40:fc:96:11:a6:24:5a:74:a3:5e:e9:f9:46:96:
                    31:8f:51:da:af:b5:b6:c7:a0:2a:25:b2:d5:f4:66:
                    ac:52:2c:a8:04:98:35:2a:60:e7:0b:54:60:95:6c:
                    8c:3b:fe:cc:fe:0e:7d:6f:05:3e:10:2f:bf:d8:54:
                    ca:5a:0f:51:bb:95:a4:a9:92:a1:3b:0c:c0:d2:59:
                    fe:5c:8f:93:11:fb:81:cc:44:1d:1d:d9:0f:85:be:
                    65:ac:83:ad:77:a6:6d:33:da:85:7d:87:b3:3f:c8:
                    85:65:93:35:74:fc:84:5b:94:c0:c5:50:13:db:57:
                    76:04:0c:15:ad:8f:0e:51:44:ce:2b:75:26:73:73:
                    a2:e1:42:2e:e2:3b:a8:ef:01:a1:42:a3:d0:82:50:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B7:8B:E2:0D:7A:16:98:72:64:9B:DD:5D:92:9A:20:9F:CF:BE:AB
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/1beL4g16FphyZJvdXZKaIJ_Pvqs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:da:8a:08:64:16:dd:c2:56:24:0a:57:73:db:20:e3:49:7c:
         53:eb:ae:21:bf:e2:c8:16:44:6b:6d:64:82:f9:46:9f:86:8b:
         3c:21:70:47:48:57:89:ed:63:8d:1d:46:d6:c4:36:21:c5:ac:
         79:44:1e:aa:59:8b:0a:67:b8:8a:ba:d5:e2:9a:74:4e:2a:21:
         0c:4e:b3:28:8f:82:1c:b9:19:2c:a4:1a:1c:30:5c:70:d9:73:
         76:b9:d0:8b:40:e6:5f:71:99:eb:0c:37:c5:ff:5c:c3:9a:e4:
         a9:4e:f5:10:0c:24:6a:0b:9d:59:58:00:db:07:b1:08:b3:88:
         9e:ea:ed:26:2b:80:a5:21:c2:9c:d5:ff:5b:43:75:ff:1c:e9:
         f2:73:d9:fe:f3:eb:36:90:2b:d2:87:d1:64:ac:7e:1e:2a:da:
         26:29:34:a6:2d:8b:d6:94:db:e7:a0:f6:ab:2e:c0:b2:b7:0f:
         69:a2:98:be:c3:78:6e:a6:04:f3:02:d4:5b:b2:bd:3b:20:a0:
         0e:3b:34:f5:a5:4a:25:f4:84:5b:57:1f:a8:59:8e:62:65:c8:
         8f:90:e6:41:a6:2c:e2:d7:76:4b:84:72:08:87:26:96:48:77:
         42:94:87:bc:0c:49:12:bb:06:c2:9d:f9:cc:a4:e3:56:a1:29:
         db:e5:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:30 2025 by rpki-client