Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20333238303239.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e20333238303239.roa (raw, json)
Hash identifier:          KewQOCo3ffJDcMSS7enY+i6KYaj6/HnXwhqXRHeA36s=
Subject key identifier:   D0:03:47:A3:E3:37:72:6D:D3:7D:38:99:E4:C1:3E:0B:26:70:A9:34
Certificate issuer:       /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial:       045C72074A24B8D64C512DF68CA62C56BEE09150
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject info access:      rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20333238303239.roa
Signing time:             Fri 05 Jan 2024 14:34:48 +0000
ROA not before:           Fri 05 Jan 2024 14:29:48 +0000
ROA not after:            Fri 03 Jan 2025 14:34:48 +0000
asID:                     328029
IP address blocks:        23.149.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 08:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5c:72:07:4a:24:b8:d6:4c:51:2d:f6:8c:a6:2c:56:be:e0:91:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
        Validity
            Not Before: Jan  5 14:29:48 2024 GMT
            Not After : Jan  3 14:34:48 2025 GMT
        Subject: CN=D00347A3E337726DD37D3899E4C13E0B2670A934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:f9:e7:81:5a:08:65:e0:31:c7:17:af:69:
                    ee:7c:87:b3:39:ec:79:27:76:e1:df:bc:d0:41:93:
                    b6:f2:e7:e4:e9:d9:f4:91:b0:03:fb:28:77:3e:68:
                    04:06:3b:54:0f:10:15:37:77:e2:73:f5:c2:4f:7b:
                    71:ce:1f:34:d9:54:87:f3:18:1d:97:5e:51:e4:7a:
                    ba:45:c7:2c:63:40:5c:75:0e:e4:22:c1:7c:13:62:
                    ce:57:8d:e9:ab:42:00:5c:65:f9:4c:f6:f8:b2:a4:
                    f2:be:0e:fe:b6:5b:21:47:df:63:c9:76:9e:a1:14:
                    45:03:47:a0:14:b9:2a:b3:20:29:72:da:67:fd:8b:
                    a2:e5:18:a2:93:38:1b:b1:cc:02:ea:6c:86:1a:d9:
                    0d:6e:df:64:91:cb:4d:5f:5a:4f:79:ba:80:e1:66:
                    af:7b:a0:32:3b:aa:15:8c:04:c4:0d:fe:44:c8:3f:
                    15:1e:41:5a:27:0c:45:63:29:fd:05:76:77:9b:1d:
                    c4:e3:87:92:4c:75:4a:19:59:52:19:ff:8d:c2:65:
                    84:86:b1:96:18:ef:16:64:0d:f9:25:56:9d:26:92:
                    f7:cd:c8:a5:46:8a:49:db:15:e7:35:b4:66:88:25:
                    e1:1e:2a:5d:f0:88:fd:bf:2a:78:8b:87:bd:2c:1d:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:47:A3:E3:37:72:6D:D3:7D:38:99:E4:C1:3E:0B:26:70:A9:34
            X509v3 Authority Key Identifier:
                keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20333238303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:d3:a2:37:84:9e:7c:53:b5:d5:69:1b:42:bf:ba:45:d6:
         41:71:3f:69:9a:a0:73:47:e1:d5:d2:72:e3:96:eb:26:c3:a9:
         11:31:57:1f:d8:0e:6d:71:cc:89:71:76:fd:f3:d8:e7:bf:b2:
         d6:7b:7f:32:eb:f2:92:85:19:09:0e:88:27:02:d0:e1:d6:b6:
         6e:82:b8:f5:5a:fc:b5:00:96:31:3f:b2:a6:e1:35:cd:c8:ab:
         6e:4e:e9:3a:b7:98:78:ec:50:6d:14:ff:42:ba:9e:c0:6c:c1:
         6f:8e:6f:a7:42:b8:96:05:3b:eb:29:da:03:2d:ea:da:ba:08:
         b4:30:d0:ec:7e:16:1e:8e:42:4b:6f:9a:ec:94:67:81:fe:0e:
         82:9e:f9:92:3a:1b:09:aa:cf:78:c7:41:b2:7c:4b:b3:22:bb:
         26:6c:bc:9a:9a:2c:8d:81:7a:d5:83:6e:a5:6a:15:eb:68:73:
         d7:e7:ee:ff:03:dc:e2:98:65:18:7b:82:01:82:58:93:94:45:
         30:ba:e5:a0:3d:5d:49:20:16:d1:81:a7:34:ae:28:da:b5:8b:
         ba:78:29:41:1c:67:d2:ff:e5:1f:6a:90:bb:63:1a:49:6a:e3:
         74:8a:ec:cd:7b:53:e1:55:99:7b:c5:9f:df:57:e4:fe:e0:a5:
         41:6c:14:f5
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUBFxyB0okuNZMUS32jKYsVr7gkVAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNkN2M0NTY2YWQ4OGZmYjc0NWNkN2M2MzQ1Y2YwNzY3
ZGIxNTEzMzYzNmNkNTQ1MDQwHhcNMjQwMTA1MTQyOTQ4WhcNMjUwMTAzMTQzNDQ4
WjAzMTEwLwYDVQQDEyhEMDAzNDdBM0UzMzc3MjZERDM3RDM4OTlFNEMxM0UwQjI2
NzBBOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG7554FaCGXg
MccXr2nufIezOex5J3bh37zQQZO28ufk6dn0kbAD+yh3PmgEBjtUDxAVN3fic/XC
T3txzh802VSH8xgdl15R5Hq6RccsY0BcdQ7kIsF8E2LOV43pq0IAXGX5TPb4sqTy
vg7+tlshR99jyXaeoRRFA0egFLkqsyApctpn/Yui5RiikzgbscwC6myGGtkNbt9k
kctNX1pPebqA4Wave6AyO6oVjATEDf5EyD8VHkFaJwxFYyn9BXZ3mx3E44eSTHVK
GVlSGf+NwmWEhrGWGO8WZA35JVadJpL3zcilRopJ2xXnNbRmiCXhHipd8Ij9vyp4
i4e9LB2YRQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFNADR6PjN3Jt0304meTBPgsm
cKk0MB8GA1UdIwQYMBaAFEfHINgJGKdpws/YQnwzTq5kg2VdMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC84LzQ3QzcyMEQ4MDkxOEE3NjlDMkNGRDg0MjdDMzM0RUFFNjQ4MzY1NUQuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFi
ZTIwNDkzM2FlNS9kOGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRjY2VkM2Yv
YTNkN2M0NTY2YWQ4OGZmYjc0NWNkN2M2MzQ1Y2YwNzY3ZGIxNTEzMzYzNmNkNTQ1
MDQuY2VyMHUGCCsGAQUFBwELBGkwZzBlBggrBgEFBQcwC4ZZcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvOC8zMjMzMmUzMTM0MzkyZTMyMzQzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzIzODMwMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeV+DANBgkqhkiG
9w0BAQsFAAOCAQEAcNPTojeEnnxTtdVpG0K/ukXWQXE/aZqgc0fh1dJy45brJsOp
ETFXH9gObXHMiXF2/fPY57+y1nt/MuvykoUZCQ6IJwLQ4da2boK49Vr8tQCWMT+y
puE1zcirbk7pOreYeOxQbRT/QrqewGzBb45vp0K4lgU76ynaAy3q2roItDDQ7H4W
Ho5CS2+a7JRngf4Ogp75kjobCarPeMdBsnxLsyK7Jmy8mposjYF61YNupWoV62hz
1+fu/wPc4phlGHuCAYJYk5RFMLrloD1dSSAW0YGnNK4o2rWLungpQRxn0v/lH2qQ
u2MaSWrjdIrszXtT4VWZe8Wf31fk/uClQWwU9Q==
-----END CERTIFICATE-----