Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WcGukO61czpEhAEloaf4D8Ook30.roa
File:                     WcGukO61czpEhAEloaf4D8Ook30.roa (raw, json)
Hash identifier:          ekHanHBgB1gQ/J7W/41BhpFkOt7GIVVbVhJn9SsLASo=
Subject key identifier:   59:C1:AE:90:EE:B5:73:3A:44:84:01:25:A1:A7:F8:0F:C3:A8:93:7D
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0D87
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WcGukO61czpEhAEloaf4D8Ook30.roa
Signing time:             Mon 26 Aug 2024 05:35:02 +0000
ROA not before:           Mon 26 Aug 2024 05:35:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        121.50.151.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3463 (0xd87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 26 05:35:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=59C1AE90EEB5733A44840125A1A7F80FC3A8937D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:e7:c9:b5:bd:ae:56:fa:92:a2:20:d4:cb:
                    04:02:7d:13:8c:3d:0d:f9:45:9f:fd:9d:05:d8:14:
                    68:78:0f:6d:4f:39:fb:d8:b5:99:35:cc:bf:43:02:
                    24:70:44:9e:37:fb:46:6e:d7:8d:5f:1b:54:49:84:
                    22:86:8f:97:8a:e5:fa:3e:09:30:11:db:c2:d8:cc:
                    f8:a8:05:51:fc:0a:e0:24:20:00:4f:26:17:e9:a1:
                    9b:a9:ea:3c:ff:55:43:f9:a1:b8:44:6c:ac:ff:35:
                    cc:79:98:71:54:e4:02:6b:7f:e0:55:3a:76:80:5d:
                    1f:b5:8b:bb:d2:d5:1c:a0:df:91:e7:11:c8:38:57:
                    db:96:10:82:eb:ff:f0:53:b8:71:ab:92:ba:42:75:
                    ad:bd:e7:84:f9:84:5e:5d:96:d5:7c:cf:ca:dc:e6:
                    7e:74:60:c3:83:3d:97:42:96:84:29:7a:48:82:f0:
                    9b:96:ef:69:36:b5:69:39:d1:9a:93:4a:f4:f4:67:
                    99:a4:92:e6:92:21:5b:a0:4e:54:c2:08:10:38:c7:
                    61:5c:83:6a:8c:8d:64:ca:5a:c6:0a:23:bc:ce:fe:
                    f9:33:61:58:49:95:e0:17:67:53:0f:bc:d8:a5:77:
                    40:e3:54:fb:3a:ce:be:a5:aa:f1:11:b4:72:5d:00:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C1:AE:90:EE:B5:73:3A:44:84:01:25:A1:A7:F8:0F:C3:A8:93:7D
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WcGukO61czpEhAEloaf4D8Ook30.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:00:c9:82:4a:54:5d:ed:e5:94:ed:6b:c9:0e:b0:34:07:02:
         23:74:7b:d1:c4:53:12:f5:71:5e:6e:dc:e1:b1:f7:3d:39:5d:
         67:a9:65:d2:ab:8c:a7:ec:91:1e:3d:e8:e2:43:b3:c5:46:bd:
         ef:e4:cf:32:da:3c:62:78:de:72:05:ff:ed:85:cc:72:79:12:
         66:2b:07:b5:0e:6b:b9:c1:b7:72:e4:ee:4b:d9:b6:39:97:3c:
         24:a6:e3:eb:3e:15:39:fc:cd:75:e1:b4:c8:a0:5f:3b:c2:be:
         7c:3c:90:7c:00:1e:49:2f:42:e6:81:79:a9:68:59:3a:8f:a5:
         c6:6e:11:2b:3b:9b:9a:ef:b0:a3:d3:3d:40:52:fe:38:eb:18:
         96:7c:0c:68:69:37:06:13:38:ce:e9:ff:62:51:0e:fd:5b:51:
         b0:f8:ec:00:2c:2b:c6:ac:b2:c4:fc:da:41:0c:1f:21:ac:7a:
         f3:3a:81:48:73:a7:0f:32:d4:58:d8:1a:4a:db:04:f4:19:fa:
         97:2b:f3:56:77:b8:85:15:a0:8e:aa:70:79:b1:35:19:ca:64:
         a8:5a:af:d6:3f:7f:b7:0a:f7:cf:d7:31:4a:4d:3b:1f:11:50:
         d6:c8:4d:eb:17:9e:4b:4f:75:63:72:78:5e:b7:96:36:89:74:
         74:b5:2b:09
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNDA4MjYw
NTM1MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5QzFBRTkwRUVCNTcz
M0E0NDg0MDEyNUExQTdGODBGQzNBODkzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtDefJtb2uVvqSoiDUywQCfROMPQ35RZ/9nQXYFGh4D21POfvY
tZk1zL9DAiRwRJ43+0Zu141fG1RJhCKGj5eK5fo+CTAR28LYzPioBVH8CuAkIABP
JhfpoZup6jz/VUP5obhEbKz/Ncx5mHFU5AJrf+BVOnaAXR+1i7vS1Ryg35HnEcg4
V9uWEILr//BTuHGrkrpCda2954T5hF5dltV8z8rc5n50YMODPZdCloQpekiC8JuW
72k2tWk50ZqTSvT0Z5mkkuaSIVugTlTCCBA4x2Fcg2qMjWTKWsYKI7zO/vkzYVhJ
leAXZ1MPvNild0DjVPs6zr6lqvERtHJdANs3AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUWcGukO61czpEhAEloaf4D8Ook30wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1djR3VrTzYxY3pw
RWhBRWxvYWY0RDhPb2szMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpcwDQYJKoZIhvcNAQELBQADggEBAJIAyYJKVF3t5ZTta8kOsDQHAiN0
e9HEUxL1cV5u3OGx9z05XWepZdKrjKfskR496OJDs8VGve/kzzLaPGJ43nIF/+2F
zHJ5EmYrB7UOa7nBt3Lk7kvZtjmXPCSm4+s+FTn8zXXhtMigXzvCvnw8kHwAHkkv
QuaBealoWTqPpcZuESs7m5rvsKPTPUBS/jjrGJZ8DGhpNwYTOM7p/2JRDv1bUbD4
7AAsK8asssT82kEMHyGsevM6gUhzpw8y1FjYGkrbBPQZ+pcr81Z3uIUVoI6qcHmx
NRnKZKhar9Y/f7cK98/XMUpNOx8RUNbITesXnktPdWNyeF63ljaJdHS1Kwk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:13 2025 by rpki-client