Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jAKckMjiOSrlpIcBry4J8o0eEcw.roa
File:                     jAKckMjiOSrlpIcBry4J8o0eEcw.roa (raw, json)
Hash identifier:          uKN81WJTopnUV9zmJ5nq4zG4t7xWqjmn0fuaMt70zc0=
Subject key identifier:   8C:02:9C:90:C8:E2:39:2A:E5:A4:87:01:AF:2E:09:F2:8D:1E:11:CC
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0D7F
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jAKckMjiOSrlpIcBry4J8o0eEcw.roa
Signing time:             Mon 26 Aug 2024 05:35:00 +0000
ROA not before:           Mon 26 Aug 2024 05:35:00 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24168
IP address blocks:        121.50.150.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3455 (0xd7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Aug 26 05:35:00 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8C029C90C8E2392AE5A48701AF2E09F28D1E11CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:b4:4c:0c:44:63:9d:60:c4:e0:3b:8b:6a:
                    15:92:e9:8c:d9:ba:fc:40:18:57:14:05:9b:81:94:
                    de:1c:34:27:03:8f:1f:ed:28:f5:f2:77:b7:af:5f:
                    f9:56:f8:09:d0:9a:cb:8a:77:ff:e5:96:0d:51:ce:
                    f7:62:8a:1f:06:11:8f:b2:9c:51:36:cd:43:f2:da:
                    10:92:b0:d2:95:a6:94:d9:13:68:57:fb:5f:40:88:
                    5d:39:4b:48:d7:c4:c3:e2:72:f7:c4:44:00:06:1d:
                    2e:e9:22:8f:88:1b:e5:c4:68:76:a6:73:c6:bf:85:
                    92:8d:ca:3c:90:38:46:0e:67:d4:78:d3:62:48:fb:
                    30:33:49:b0:b9:f8:a3:92:37:df:9c:ca:46:28:0b:
                    8b:b7:56:84:86:40:6a:59:41:b5:05:8c:6e:49:c5:
                    8d:65:b7:7a:98:c8:2d:d5:4d:6a:4f:a6:0c:a3:21:
                    bb:b5:aa:97:4b:59:34:b8:e8:14:2c:ce:f0:3e:b3:
                    2b:2c:ac:9b:50:75:d3:c0:c4:81:47:1f:81:51:e2:
                    ee:cb:04:6c:49:5a:13:17:d1:8f:65:0e:a4:ee:e4:
                    c9:da:d6:be:77:a0:25:64:66:7b:72:49:dc:49:90:
                    89:99:3f:da:f4:01:05:78:6a:eb:e8:4a:63:e9:9b:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:02:9C:90:C8:E2:39:2A:E5:A4:87:01:AF:2E:09:F2:8D:1E:11:CC
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jAKckMjiOSrlpIcBry4J8o0eEcw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:88:77:cf:3d:bc:92:8d:3b:af:2d:c7:22:8b:65:ed:d5:d1:
         45:77:73:68:5a:28:bb:4a:3d:93:df:17:51:32:b2:b9:4d:a7:
         aa:39:ef:55:21:43:b3:56:a2:37:8f:3a:9d:6d:73:6d:2d:a1:
         79:45:80:ee:a7:e3:2e:3b:62:08:b6:5b:7a:d6:8f:5a:9c:16:
         22:38:ea:2c:7d:13:7d:03:7e:db:59:b4:4f:cf:03:b5:fe:7d:
         93:f8:1a:66:82:a1:d7:1c:01:b3:2f:be:6d:67:08:99:03:64:
         ad:4f:89:7a:08:68:2b:00:d9:81:e8:dc:da:01:91:bd:8c:a5:
         65:03:88:cb:e7:95:78:22:e8:f6:c2:f1:15:76:f9:8c:46:47:
         0a:c2:bd:47:68:3f:a6:cd:eb:44:4d:7c:25:66:86:bf:1f:3b:
         41:50:6d:10:72:d2:02:32:cf:b5:2d:de:0e:a6:73:d3:ed:5a:
         54:ad:bb:3e:4e:99:1d:68:de:6f:9b:11:b4:34:5d:4b:60:ba:
         e5:b2:51:d7:05:d2:57:c1:a6:4b:c6:b8:e6:6d:f9:6e:98:9e:
         e6:94:d3:4b:74:ec:1d:4b:51:16:24:e5:b0:eb:2e:ba:8d:1e:
         bb:c7:c5:32:00:27:05:0f:24:d8:f7:17:e2:95:2e:98:ea:0f:
         a6:ac:c1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:08 2025 by rpki-client