Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/RLxfPysi_xF-veDeR9l980jhuvw.roa
File:                     RLxfPysi_xF-veDeR9l980jhuvw.roa (raw, json)
Hash identifier:          cHicUFWgmF1S7l47VEnI2EVsDvhj7YGfn/2sFbUvV9A=
Subject key identifier:   44:BC:5F:3F:2B:22:FF:11:7E:BD:E0:DE:47:D9:7D:F3:48:E1:BA:FC
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0D76
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/RLxfPysi_xF-veDeR9l980jhuvw.roa
Signing time:             Mon 26 Aug 2024 05:34:58 +0000
ROA not before:           Mon 26 Aug 2024 05:34:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        121.50.147.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 26 05:34:58 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44BC5F3F2B22FF117EBDE0DE47D97DF348E1BAFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:f0:9d:b7:0f:f6:77:8d:88:bb:9d:b0:76:
                    89:cd:03:86:a2:59:41:72:a1:4e:a3:0f:18:36:e2:
                    8b:52:b6:5f:06:d5:f3:56:cb:2b:da:31:1c:d3:48:
                    96:46:fc:e7:5b:1a:62:a2:00:83:35:92:04:f9:f7:
                    ec:6f:60:dd:f2:12:d7:06:0c:f9:f7:e6:f8:e8:d1:
                    88:e8:bb:a1:6d:db:22:69:2a:2e:75:3d:31:56:12:
                    e9:84:c6:59:b1:17:72:cc:d1:e4:3d:61:45:b4:03:
                    cf:f7:1d:d6:d1:54:25:d5:29:31:27:75:c1:85:c3:
                    5b:c9:a3:39:7d:e9:e3:f7:71:17:4d:5b:5c:97:77:
                    7a:85:b3:58:c9:84:b4:c3:7b:39:ec:fe:2f:1b:c6:
                    88:de:05:1d:89:3b:7a:9c:6f:42:7b:f5:2c:c2:aa:
                    7d:bb:fd:c7:f6:6f:90:d1:be:43:3e:13:b4:09:1f:
                    91:50:4b:c5:47:b3:12:77:6a:09:e0:f5:0d:c9:13:
                    30:0a:fb:b9:9d:5b:00:e3:de:7c:fc:f1:b1:57:b6:
                    71:3f:c6:df:13:e7:ad:8c:e4:50:71:31:54:39:08:
                    1e:bb:6f:1d:41:fe:02:05:fa:6f:88:93:d4:24:f3:
                    14:44:c2:ff:2a:b5:4d:3c:6c:96:35:e7:91:a7:20:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BC:5F:3F:2B:22:FF:11:7E:BD:E0:DE:47:D9:7D:F3:48:E1:BA:FC
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/RLxfPysi_xF-veDeR9l980jhuvw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b9:be:1e:9b:37:88:1c:ef:2a:be:51:72:d7:5d:68:0b:df:
         1e:d6:33:c3:68:3a:1f:de:b6:b4:63:a3:ed:18:54:51:a9:41:
         ec:74:60:20:f1:7f:35:78:35:d2:5f:21:81:8f:db:e7:92:eb:
         a3:7e:59:73:06:c8:f0:65:95:75:f8:62:a6:fc:8b:ae:d7:41:
         0c:14:a3:b1:f9:32:be:8b:a6:c4:34:cd:35:77:73:04:16:dc:
         a0:40:1a:35:26:6c:b6:cc:e0:b3:3e:b7:3e:77:0a:27:e9:11:
         48:c9:a1:89:ef:e1:3c:93:70:36:b7:74:0e:ee:25:30:e9:85:
         19:cb:0d:a3:1e:2c:fe:5b:81:cc:c4:dc:7c:19:f0:3a:e0:ea:
         82:fd:c9:e3:5b:06:20:5e:4f:4a:30:78:83:fe:d5:2e:78:a2:
         be:27:e9:4e:e5:0c:dc:7d:ca:2f:5c:82:42:41:c3:e6:09:34:
         5d:0e:af:62:52:a5:6c:da:41:8d:9f:d0:c7:f2:df:1b:29:31:
         1d:65:93:0e:81:39:34:d8:6e:1b:4b:08:62:11:d7:fb:a5:7b:
         1b:52:ee:2f:8a:5b:48:94:1d:1a:3f:55:54:d9:7b:d2:ba:3d:
         42:bd:fb:2b:96:7e:12:4f:a6:b4:6b:75:21:12:0e:04:16:e9:
         92:98:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:36 2025 by rpki-client