Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/9v_i0In7wioF2L-WyKl4PQel0NA.roa
File:                     9v_i0In7wioF2L-WyKl4PQel0NA.roa (raw, json)
Hash identifier:          wpd4LLJoQZt7mgHMek6716NhzNxc13ujXYDghZbON1A=
Subject key identifier:   F6:FF:E2:D0:89:FB:C2:2A:05:D8:BF:96:C8:A9:78:3D:07:A5:D0:D0
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       1583
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9v_i0In7wioF2L-WyKl4PQel0NA.roa
Signing time:             Tue 11 Feb 2025 23:44:43 +0000
ROA not before:           Tue 11 Feb 2025 23:44:43 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     142005
IP address blocks:        210.242.83.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 01:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5507 (0x1583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 11 23:44:43 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F6FFE2D089FBC22A05D8BF96C8A9783D07A5D0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:76:a3:82:7c:fa:7b:3a:cd:c9:b7:0b:83:
                    46:91:a8:97:4c:d9:62:50:11:29:6d:b3:a0:c0:39:
                    83:58:7c:0a:45:37:07:3d:28:73:89:32:a3:70:c4:
                    c4:26:a8:a7:b9:7c:00:eb:f4:b6:28:9e:8d:39:5b:
                    e1:6a:b5:bc:dc:ee:50:64:ca:0d:87:0a:b0:0b:b7:
                    3c:ba:68:fc:70:b6:09:d1:60:94:69:99:73:aa:75:
                    4c:6b:1f:26:5d:fe:c4:1e:7e:b7:d1:f8:d9:ef:be:
                    bc:01:ea:99:54:ad:3d:ea:2b:60:e4:fd:e0:7b:6f:
                    e3:aa:8f:6e:1e:33:99:bd:3c:5b:2d:7e:25:8c:d0:
                    9b:16:b4:3b:09:e7:7e:67:c9:b0:1b:60:43:c5:e5:
                    69:f8:14:d8:f8:33:ab:dc:a7:ce:2e:80:7d:19:fe:
                    24:40:36:42:67:29:ca:60:ef:5c:d6:98:f4:4c:d5:
                    e0:0f:21:56:7e:42:d4:26:92:d0:02:1d:36:42:15:
                    b2:44:d7:b1:ea:9e:5a:7f:59:2b:c4:3c:a3:37:54:
                    b8:fb:c6:31:79:32:32:fd:6a:c4:4e:72:b2:4c:5b:
                    7c:df:d5:7b:9e:15:76:52:fa:fc:4f:4c:ec:35:be:
                    2b:d3:9e:6f:c9:7c:07:e3:48:e6:cf:e1:06:ab:9a:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:E2:D0:89:FB:C2:2A:05:D8:BF:96:C8:A9:78:3D:07:A5:D0:D0
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/9v_i0In7wioF2L-WyKl4PQel0NA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.242.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:30:26:3b:a6:2e:b3:85:bb:03:a3:a7:61:d0:4b:d6:59:
         01:34:63:7f:bb:54:4f:55:6a:54:78:67:54:58:5c:05:e2:fb:
         2e:f7:2f:18:c7:cb:4b:66:c6:3b:2c:03:e6:d9:7d:62:e8:2e:
         4d:85:d9:df:91:c8:c3:ad:06:da:b6:81:fa:1c:d2:b9:c2:0b:
         7b:e9:8f:df:59:57:3c:38:58:c5:5e:7e:b7:2b:d4:47:be:1e:
         4c:ab:27:e8:08:f3:ba:86:94:d4:e7:60:94:73:d0:6f:0c:f4:
         e4:a4:a2:41:b7:d2:69:12:88:b9:d3:22:93:42:f5:9c:52:a8:
         69:23:93:2d:4e:e8:7d:3c:d6:33:d0:3b:cc:51:70:92:d1:e9:
         8c:e2:e6:50:73:81:7c:89:63:24:bf:63:50:11:2a:f1:45:e5:
         a8:bb:65:df:62:8a:e6:c6:57:c4:93:6b:56:ce:73:da:c5:3a:
         ef:f8:56:69:70:4f:f0:1d:f8:b1:92:02:5b:34:b6:c5:ab:88:
         f3:72:b6:b4:34:c9:40:06:83:c9:01:f5:e3:28:54:f3:9c:b7:
         73:87:6a:b0:e6:5a:07:7b:3b:01:e6:7e:10:64:bb:14:6b:f9:
         97:46:6c:d8:44:0e:95:ff:3d:67:f7:08:52:94:45:62:09:e9:
         8d:a2:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:12:09 2025 by rpki-client