Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TYWk9sA-kVPmnIw8f_N3ezgnz-c.roa
File:                     TYWk9sA-kVPmnIw8f_N3ezgnz-c.roa (raw, json)
Hash identifier:          pjzHldr9Zp1rTlIh2oBpUuxTE9DVRpPqfkhXHz559MY=
Subject key identifier:   4D:85:A4:F6:C0:3E:91:53:E6:9C:8C:3C:7F:F3:77:7B:38:27:CF:E7
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14CB
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TYWk9sA-kVPmnIw8f_N3ezgnz-c.roa
Signing time:             Mon 10 Feb 2025 14:35:17 +0000
ROA not before:           Mon 10 Feb 2025 14:35:17 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7500
IP address blocks:        2001:b000:19e::/64 maxlen: 64
Validation:               Failed, certificate revoked on Tue 11 Feb 2025 23:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5323 (0x14cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:17 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4D85A4F6C03E9153E69C8C3C7FF3777B3827CFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:7f:46:3d:b1:1d:30:a1:77:03:44:f2:ca:
                    3e:7e:b3:81:34:87:6f:35:d5:00:da:2b:31:b0:a4:
                    b9:08:e7:fd:40:5d:fd:be:20:98:1b:2d:13:a7:e6:
                    5b:74:b1:29:ef:0e:ba:d4:a8:dd:d4:42:70:c8:f0:
                    48:6a:2f:6e:51:bc:d7:51:db:47:90:0f:9c:4b:6f:
                    12:fd:1e:85:e2:9b:7c:5c:54:1b:ae:79:50:2c:05:
                    d9:07:e2:b0:73:42:59:e4:ed:ba:34:e7:0a:21:1d:
                    7d:c7:79:47:a7:8b:a0:13:42:ed:10:ea:3d:56:58:
                    70:8a:56:4e:b1:ed:d0:e4:80:ce:05:f7:f4:f0:0c:
                    de:1e:cc:e2:49:de:34:47:7f:a1:a7:42:67:25:18:
                    52:a6:e0:c2:09:aa:c6:ea:bd:63:a1:89:4e:a9:9a:
                    eb:52:2b:6c:9a:15:77:a8:f5:40:7a:e8:9c:cf:eb:
                    1b:53:c7:d3:bf:58:36:e6:6f:97:74:06:aa:59:52:
                    db:9e:4e:b1:bd:92:45:4f:fa:35:b0:15:b4:bc:af:
                    0b:84:59:37:59:bc:71:b6:fa:a4:c4:5b:b4:4b:d2:
                    1c:30:74:d0:09:fb:24:32:e0:1d:ee:62:ee:38:87:
                    fa:fc:d3:e3:bc:98:ff:b6:26:17:80:05:a3:a1:b3:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:85:A4:F6:C0:3E:91:53:E6:9C:8C:3C:7F:F3:77:7B:38:27:CF:E7
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TYWk9sA-kVPmnIw8f_N3ezgnz-c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:19e::/64

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:39:ef:a2:2a:3a:f4:8d:16:44:db:07:b0:71:b3:b0:12:
         b0:cc:f7:d3:b1:81:3f:9b:92:8d:fa:5f:61:15:ad:18:1a:06:
         cb:08:fd:f2:6e:77:dd:c6:db:13:ed:4f:ce:4d:4f:c0:fa:68:
         49:7d:16:ed:4f:1d:e0:77:15:2c:e0:97:5c:e2:e7:24:8c:28:
         ef:f5:6a:71:bd:3b:ae:ff:9b:48:fb:00:09:2e:0a:96:98:93:
         d9:b1:5b:56:8f:8f:3c:b8:5c:0d:5c:8b:36:80:d9:43:ef:56:
         96:59:51:ee:eb:94:4e:8b:7b:55:1e:98:b6:34:f3:e3:bf:87:
         29:6e:e8:80:01:f2:cb:9a:8a:e9:41:ba:70:b8:ef:50:7c:76:
         16:39:5d:5b:89:31:74:9d:94:0f:34:9d:91:6e:94:ca:8f:f8:
         5d:c6:3c:24:58:d8:ad:c9:69:49:e3:3d:3c:08:88:49:53:17:
         1e:39:71:b2:ba:f2:68:15:58:6d:24:f5:f3:67:45:38:5a:32:
         b7:76:6f:fb:41:0b:63:1a:2b:e0:5d:72:9b:08:a8:1b:0e:69:
         42:60:b5:aa:d8:21:90:39:03:0d:36:3d:8b:fb:73:9b:a8:2b:
         fa:60:78:ca:b3:9f:09:cc:eb:c9:51:b2:14:5f:4c:18:b7:3f:
         f6:9e:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 22:55:37 2025 by rpki-client