Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/5kRa9yFi6f735i1AtxWifRrmSWI.roa
File:                     5kRa9yFi6f735i1AtxWifRrmSWI.roa (raw, json)
Hash identifier:          bxHaiJJ0GTrGVx4572gw+KpBDOcdzlkEJym9HvoLsBA=
Subject key identifier:   E6:44:5A:F7:21:62:E9:FE:F7:E6:2D:40:B7:15:A2:7D:1A:E6:49:62
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       1553
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5kRa9yFi6f735i1AtxWifRrmSWI.roa
Signing time:             Tue 11 Feb 2025 23:44:32 +0000
ROA not before:           Tue 11 Feb 2025 23:44:32 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     36040
IP address blocks:        2001:b032:c0ff:1::/64 maxlen: 64
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 01:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5459 (0x1553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 11 23:44:32 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E6445AF72162E9FEF7E62D40B715A27D1AE64962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:5c:89:ef:22:4d:a3:ab:ba:7b:f9:9b:00:
                    df:60:a4:63:ad:0e:78:b7:ee:4e:59:18:ec:ca:2c:
                    00:b5:34:c7:2f:a9:95:ce:ca:09:8b:22:93:e3:20:
                    da:00:5e:bd:b4:f4:21:df:56:55:ed:40:60:94:d4:
                    ee:47:c5:31:46:b2:f3:3c:cc:ee:66:5f:ed:7e:93:
                    86:70:36:10:8f:65:77:68:d3:d5:16:2e:43:75:7f:
                    79:01:50:f5:dd:7a:a1:a2:07:8e:a5:d1:04:a5:0c:
                    cb:84:b6:9f:9a:ea:01:02:b1:cb:4b:f2:4a:a9:5c:
                    ac:d9:71:3a:d8:72:69:4b:34:f1:d3:f1:d0:f0:18:
                    a8:81:6e:57:84:e1:18:6d:0a:32:7d:c6:10:ea:bd:
                    d8:82:7f:aa:09:ba:bd:e8:df:86:52:4a:c3:41:33:
                    a5:65:ad:8a:fc:41:85:71:0d:1e:6b:22:66:b4:07:
                    a5:14:d5:c1:35:dd:93:ba:03:b8:96:0b:2d:cc:bf:
                    56:9d:b9:5a:3e:8a:d1:9c:0c:4d:44:d1:a8:da:f1:
                    b9:7c:c8:57:c8:5c:3d:b4:63:f3:e0:68:c4:4b:ce:
                    62:23:65:da:c4:ff:31:7d:c5:b0:e6:d7:c5:9a:8b:
                    ed:76:74:cc:84:7d:ff:2f:5e:af:e3:f8:62:a5:f7:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:5A:F7:21:62:E9:FE:F7:E6:2D:40:B7:15:A2:7D:1A:E6:49:62
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/5kRa9yFi6f735i1AtxWifRrmSWI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b032:c0ff:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         57:df:5e:c5:df:20:e0:34:48:50:88:dc:fd:b9:55:61:f5:6c:
         1a:95:ef:b3:33:cc:02:de:04:a8:e2:e5:b0:44:3d:44:2f:61:
         3c:7e:ce:4e:df:1a:fe:c6:f1:b6:c8:f6:72:20:37:93:2a:f5:
         66:83:c7:e8:ac:86:9b:e5:4e:23:ca:9d:05:c1:b2:f0:cd:56:
         89:5b:8f:1f:81:63:08:e2:e3:e1:9b:ef:9b:05:e8:85:d1:11:
         30:07:ca:7c:98:68:a7:4d:f2:3f:0b:16:5d:7f:38:33:79:30:
         24:b5:a9:4b:7b:c2:23:7a:0c:b4:d0:ae:55:c1:9d:d0:78:2f:
         64:1c:fe:79:9c:e2:c7:07:e4:6b:62:37:93:0b:22:ee:3d:65:
         67:11:c5:60:c7:0c:fb:b4:9f:3b:94:e6:9e:16:7f:e4:e4:c3:
         21:07:72:5e:67:76:fa:8e:f4:66:cc:53:68:3a:e7:4c:05:db:
         61:e8:33:98:04:d3:fe:e7:41:3e:de:61:da:79:c8:de:0a:e7:
         2e:0e:a1:64:b0:5f:9e:13:04:8e:a9:bf:cb:9c:ea:88:56:db:
         47:a9:47:6c:8a:f0:20:c1:2d:74:52:23:28:1d:87:0c:97:df:
         ac:42:ee:36:f2:24:80:2e:c9:91:de:54:36:b4:c5:78:68:a7:
         21:c2:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:33:56 2025 by rpki-client