Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20313937353337.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          DQvddFbL6PKyke0AiW2kuUeFEUhRw1p3DtMdO41bG0U=
Subject key identifier:   34:65:77:E7:32:6D:7A:99:7A:90:EC:67:11:CE:DE:A3:0C:CF:76:3B
Certificate issuer:       /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial:       693F5CBAEADE8A8E083DB0F290EA03F5D6BA952E
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject info access:      rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20313937353337.roa
Signing time:             Sat 09 Mar 2024 08:34:23 +0000
ROA not before:           Sat 09 Mar 2024 08:29:23 +0000
ROA not after:            Sat 08 Mar 2025 08:34:23 +0000
asID:                     197537
IP address blocks:        23.149.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 18:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3f:5c:ba:ea:de:8a:8e:08:3d:b0:f2:90:ea:03:f5:d6:ba:95:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
        Validity
            Not Before: Mar  9 08:29:23 2024 GMT
            Not After : Mar  8 08:34:23 2025 GMT
        Subject: CN=346577E7326D7A997A90EC6711CEDEA30CCF763B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:d5:01:6b:9f:01:69:f5:3c:ef:de:26:ce:
                    0e:c3:8b:c7:f5:07:23:2d:33:ca:1f:65:df:21:6c:
                    ea:4d:4c:c8:2f:18:35:18:bb:f0:c6:de:c9:be:c1:
                    60:32:e5:06:f1:75:36:dc:f5:9b:f5:28:89:81:34:
                    fb:9f:cf:64:1f:e3:d4:dc:d1:1c:ae:63:70:cf:ea:
                    87:fd:e3:96:2c:1a:1d:33:24:1f:9e:cf:0b:93:7d:
                    4a:fd:7a:80:af:0a:87:7e:c9:d5:0f:51:a8:5e:3a:
                    b7:96:cd:4b:40:0f:9b:36:3d:99:20:d2:0f:8f:3c:
                    3d:3c:8f:03:fd:59:a5:fe:2a:b1:08:68:ee:fe:86:
                    e6:ae:70:77:4d:11:a0:e6:fd:df:8c:0e:03:d3:d9:
                    f0:33:96:ba:1a:62:57:59:18:72:ea:c3:e5:0e:b5:
                    81:93:75:82:11:87:b6:1d:d8:e7:3a:e1:e2:3a:93:
                    61:49:78:42:57:f5:53:b0:18:bc:4a:b4:9d:be:d0:
                    14:65:17:20:49:48:d5:06:db:1a:45:f8:ed:5a:92:
                    6e:06:6a:40:31:4d:cd:e4:87:54:5b:0a:9e:d1:df:
                    33:9a:c6:d6:11:42:5d:85:ee:b8:4d:1c:34:48:b1:
                    f6:60:1b:a6:b2:04:32:a3:f7:fc:4b:82:71:2f:a2:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:65:77:E7:32:6D:7A:99:7A:90:EC:67:11:CE:DE:A3:0C:CF:76:3B
            X509v3 Authority Key Identifier:
                keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:f3:83:22:b3:e3:09:20:0e:42:40:8d:bc:63:ab:ba:41:
         83:88:5e:dc:00:e5:c7:e5:fe:43:92:84:14:40:8e:e5:5e:3a:
         65:ca:bc:f3:2a:f5:6c:ce:01:4d:96:dd:87:57:ce:10:b5:b8:
         7d:e2:17:59:89:ab:2c:1f:3e:d7:33:6b:50:1e:8e:a4:5a:55:
         f7:3c:a6:11:8e:2f:b8:e5:d6:82:88:6a:f1:8d:2d:dc:f8:d3:
         ec:2e:ec:4a:b0:af:74:ab:a6:ba:34:59:67:98:8b:b0:68:fa:
         d2:46:56:84:38:ed:b9:e3:10:66:87:40:b2:7a:17:8f:8c:e3:
         4f:a3:40:b4:a4:56:6b:a5:39:0e:80:eb:8c:21:bb:58:de:fd:
         21:05:51:43:78:a0:c4:a6:43:ed:1c:d3:7e:58:a6:5f:27:96:
         97:52:5d:0d:5f:b6:17:90:7c:25:66:5d:f1:fb:fe:e6:71:23:
         94:d9:53:bd:30:cd:6f:86:0f:1d:51:ec:3d:d7:e3:9a:1e:5d:
         9c:b2:0d:72:fe:ec:64:bc:55:1a:bb:da:c4:ad:e8:09:20:fc:
         08:52:3e:21:30:6e:92:af:e9:a5:ec:a1:4e:03:51:55:e2:08:
         68:db:ae:7a:28:dc:64:19:2b:54:a5:6b:d8:89:eb:07:9a:a6:
         66:de:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----