Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          i2+PEoMRpNMcs1jTMXwgnNziYmjhT6rs+vcUOndqqX8=
Subject key identifier:   53:D1:3D:1D:19:9E:57:DC:CD:29:BA:14:E9:1B:29:01:2E:CB:4C:3C
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       283B7BD14BB4D7568BD1033FE4109F8782005E4A
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
Signing time:             Tue 17 Sep 2024 17:13:50 +0000
ROA not before:           Tue 17 Sep 2024 17:08:50 +0000
ROA not after:            Tue 16 Sep 2025 17:13:50 +0000
asID:                     945
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 10:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3b:7b:d1:4b:b4:d7:56:8b:d1:03:3f:e4:10:9f:87:82:00:5e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Sep 17 17:08:50 2024 GMT
            Not After : Sep 16 17:13:50 2025 GMT
        Subject: CN=53D13D1D199E57DCCD29BA14E91B29012ECB4C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:ee:da:cc:05:fc:ce:ca:63:8f:46:1f:8b:
                    90:fa:fb:56:21:3e:ac:42:93:f4:b8:f4:3c:b4:10:
                    bc:f7:79:8c:a0:00:63:25:4c:ea:1a:51:e4:52:11:
                    a1:d0:c4:8a:02:57:3f:36:1d:1b:fa:b3:5d:4a:84:
                    a5:90:50:13:1a:fa:85:90:9e:e2:c9:3a:ef:b6:55:
                    29:c0:d9:f7:8b:4f:c4:8f:a8:99:76:16:6c:c6:2c:
                    ef:a1:8a:d6:8f:2e:ab:04:3f:30:1c:5d:2e:2a:c7:
                    f4:0b:f6:0b:80:65:61:ac:ef:1b:c3:5e:be:f4:16:
                    a0:f1:64:86:1f:90:b7:ef:be:96:a5:38:40:d9:a9:
                    ba:11:61:27:be:f8:7b:3c:06:e2:02:70:0c:c9:20:
                    9b:db:2b:d2:87:20:5c:6e:2f:35:25:ff:f6:55:4d:
                    36:e6:84:b2:51:d7:89:6a:5e:67:98:1d:f8:74:a4:
                    c2:4f:c8:e8:94:39:e5:d9:70:ac:5d:82:d0:11:45:
                    49:09:c1:e2:39:94:e4:41:cc:f8:8a:4a:ab:bf:12:
                    ab:42:70:b2:3d:c2:e1:d5:95:53:f9:c1:da:e5:17:
                    78:d4:4c:39:dd:ea:c5:d8:59:ef:c7:3c:57:64:66:
                    ea:89:fa:a4:54:b7:a5:06:42:55:80:ef:0e:72:0c:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:3D:1D:19:9E:57:DC:CD:29:BA:14:E9:1B:29:01:2E:CB:4C:3C
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/32332e3133382e3233322e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:33:64:6e:69:f8:44:e7:22:84:8c:5c:ac:47:4e:eb:bc:
         ae:3b:63:c3:34:36:41:94:03:c7:56:2c:b7:de:07:8f:ba:66:
         7e:a4:e3:92:aa:b9:37:61:68:90:4f:a2:33:e2:d6:34:9b:38:
         50:2d:13:7e:95:1d:59:41:e7:19:a0:ad:fa:62:71:93:6c:01:
         f3:f2:3e:dc:f0:de:4e:e4:04:c0:38:75:91:8f:c1:25:a8:e4:
         ec:cd:e5:76:ef:89:02:c3:52:1f:6a:72:9e:6a:e9:f5:aa:76:
         3a:29:49:6a:9c:47:64:6f:55:8a:1b:be:50:fd:0e:fa:f6:39:
         26:af:19:c6:36:54:ce:95:86:1f:5e:ec:cf:58:dd:2f:25:60:
         69:c8:30:66:e0:91:94:7b:17:a8:e3:91:01:88:9f:79:57:35:
         91:52:99:0a:1c:cd:23:c0:41:d5:12:da:95:06:c1:ae:27:25:
         f4:2f:2e:b7:d7:91:f0:a5:3c:07:e7:a0:28:30:36:57:66:28:
         cc:2f:a2:00:a2:87:87:72:01:d8:89:3a:41:a9:4f:be:eb:11:
         88:40:59:90:6c:bc:a1:52:ef:d1:9e:c5:c6:7c:42:85:17:4c:
         17:c7:42:98:9f:36:99:a0:20:87:05:3c:7b:2f:a5:e2:6c:c2:
         d0:12:d5:bf
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUKDt70Uu011aL0QM/5BCfh4IAXkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2U2MzgxY2YzNWZlYzZjZGFhOGVkYzhmOTAzZTI5NDA4
NmNmNjBiMDU5NGY1NWExN2IwHhcNMjQwOTE3MTcwODUwWhcNMjUwOTE2MTcxMzUw
WjAzMTEwLwYDVQQDEyg1M0QxM0QxRDE5OUU1N0RDQ0QyOUJBMTRFOTFCMjkwMTJF
Q0I0QzNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYfu2swF/M7K
Y49GH4uQ+vtWIT6sQpP0uPQ8tBC893mMoABjJUzqGlHkUhGh0MSKAlc/Nh0b+rNd
SoSlkFATGvqFkJ7iyTrvtlUpwNn3i0/Ej6iZdhZsxizvoYrWjy6rBD8wHF0uKsf0
C/YLgGVhrO8bw16+9Bag8WSGH5C3776WpThA2am6EWEnvvh7PAbiAnAMySCb2yvS
hyBcbi81Jf/2VU025oSyUdeJal5nmB34dKTCT8jolDnl2XCsXYLQEUVJCcHiOZTk
Qcz4ikqrvxKrQnCyPcLh1ZVT+cHa5Rd41Ew53erF2FnvxzxXZGbqifqkVLelBkJV
gO8OcgzLjQIDAQABo4ICUjCCAk4wHQYDVR0OBBYEFFPRPR0ZnlfczSm6FOkbKQEu
y0w8MB8GA1UdIwQYMBaAFLHcsGmWlIbeWIjJvjrk+3wCW96JMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC82L0IxRENCMDY5OTY5NDg2REU1ODg4QzlCRTNBRTRGQjdDMDI1QkRFODkuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTky
ZGQ0OWVmMzIyMy9kMjEwNDMyNy0wOGFiLTRjZmMtODFlZi03NmNhZjkwZWNkNzAv
N2U2MzgxY2YzNWZlYzZjZGFhOGVkYzhmOTAzZTI5NDA4NmNmNjBiMDU5NGY1NWEx
N2IuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvNi8zMjMzMmUzMTMzMzgyZTMyMzMzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeK6DANBgkqhkiG9w0BAQsF
AAOCAQEAEBozZG5p+ETnIoSMXKxHTuu8rjtjwzQ2QZQDx1Yst94Hj7pmfqTjkqq5
N2FokE+iM+LWNJs4UC0TfpUdWUHnGaCt+mJxk2wB8/I+3PDeTuQEwDh1kY/BJajk
7M3ldu+JAsNSH2pynmrp9ap2OilJapxHZG9Vihu+UP0O+vY5Jq8ZxjZUzpWGH17s
z1jdLyVgacgwZuCRlHsXqOORAYifeVc1kVKZChzNI8BB1RLalQbBricl9C8ut9eR
8KU8B+egKDA2V2YozC+iAKKHh3IB2Ik6QalPvusRiEBZkGy8oVLv0Z7FxnxChRdM
F8dCmJ82maAghwU8ey+l4mzC0BLVvw==
-----END CERTIFICATE-----