Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/SG2HBWSXXA9cYbETy51a9bDxAiI.roa
File:                     SG2HBWSXXA9cYbETy51a9bDxAiI.roa (raw, json)
Hash identifier:          uZ4mVXVRMJFyZ0JRgL1DbDzFHp/VRSnsvok06Pp+iSk=
Subject key identifier:   48:6D:87:05:64:97:5C:0F:5C:61:B1:13:CB:9D:5A:F5:B0:F1:02:22
Certificate issuer:       /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial:       06
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/SG2HBWSXXA9cYbETy51a9bDxAiI.roa
Signing time:             Tue 13 Aug 2024 03:35:52 +0000
ROA not before:           Tue 13 Aug 2024 03:35:52 +0000
ROA not after:            Fri 08 Aug 2025 15:30:25 +0000
asID:                     152611
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               Failed, certificate revoked on Tue 13 Aug 2024 03:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
        Validity
            Not Before: Aug 13 03:35:52 2024 GMT
            Not After : Aug  8 15:30:25 2025 GMT
        Subject: CN=486D870564975C0F5C61B113CB9D5AF5B0F10222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:cd:20:5b:5c:66:b6:2c:fc:2e:32:32:77:
                    9f:a5:ea:85:dd:54:2e:2b:fd:72:d4:13:31:cc:59:
                    7e:c8:42:c6:e9:91:9a:6a:89:39:f8:d2:79:fa:03:
                    17:f4:20:01:e2:9e:3a:47:c0:55:9f:54:4c:18:14:
                    8f:2d:6e:3d:dc:7e:b0:81:44:3c:26:3d:2c:8c:c6:
                    71:db:82:75:96:84:a0:ab:e2:59:2c:99:8f:20:15:
                    c6:a9:b8:33:75:32:97:59:87:8e:7d:8f:4c:3b:b1:
                    5f:14:0a:00:26:b6:7a:75:ba:ec:4e:41:b5:fb:40:
                    5c:8b:66:ca:ae:3b:05:50:58:cc:aa:31:c3:41:ff:
                    26:83:ec:e1:26:3b:35:5f:aa:79:46:c8:3d:3f:e6:
                    f9:a7:9d:00:18:48:42:63:88:c2:1a:c1:d6:17:e4:
                    a2:ec:3f:f3:97:3c:4b:52:f1:7f:3d:86:07:c8:4c:
                    d7:14:81:f4:ff:82:41:b5:d4:11:03:6e:93:25:38:
                    cc:d1:15:34:f4:6e:3d:66:44:cb:2b:59:4d:75:6c:
                    3e:19:e0:2d:35:70:20:2f:28:04:74:9a:9e:60:5a:
                    ea:ec:30:06:2c:f0:fb:64:b9:f2:3c:fc:cd:9f:df:
                    4c:b0:35:01:0e:95:a4:36:ba:42:6d:bb:44:27:a8:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6D:87:05:64:97:5C:0F:5C:61:B1:13:CB:9D:5A:F5:B0:F1:02:22
            X509v3 Authority Key Identifier:
                keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/SG2HBWSXXA9cYbETy51a9bDxAiI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:63:ca:f9:01:8f:bb:89:02:f5:1a:32:96:e1:51:14:60:7e:
         5c:b2:fe:a6:e5:78:ff:c8:86:b0:a7:f3:a9:94:ea:52:55:42:
         da:3f:79:08:65:a2:96:fa:8c:fc:dd:f0:bb:46:68:63:16:13:
         c2:57:f7:aa:5c:4d:4a:89:cf:f9:ee:07:92:89:17:4f:e4:f4:
         70:b3:db:bf:d1:51:ec:0d:3a:7e:13:87:3c:f5:6b:fc:c4:ca:
         c6:53:81:cd:57:43:77:c8:d5:98:fa:a2:eb:ae:e4:92:c4:b8:
         28:b8:12:01:68:a1:13:41:7a:1c:48:2c:c0:87:86:d8:03:17:
         72:5b:b6:48:e2:49:c1:8d:eb:42:b5:52:b8:82:4d:a4:4b:5c:
         f1:9d:96:12:b1:6e:a9:8a:9a:c7:e3:ca:5f:72:b8:2d:31:70:
         2a:fc:1d:5a:5e:f1:ff:a1:47:71:22:9e:fe:10:6b:ec:6e:cc:
         a5:67:89:a1:44:80:2b:84:97:76:ae:e7:52:bb:cd:c4:11:f1:
         a5:40:8d:bd:b1:5f:ca:9e:2e:ea:aa:fa:24:34:29:b3:cd:e2:
         0c:22:55:47:b4:ba:22:5a:50:00:36:3b:f5:64:ff:49:d8:f7:
         8a:9a:e3:a1:9d:b4:5f:c2:45:b5:d1:3c:07:81:cb:20:43:34:
         d5:ff:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:46:51 2025 by rpki-client