Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/7/32332e3134392e3233322e302f32342d3234203d3e20333238303239.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e20333238303239.roa (raw, json)
Hash identifier:          lHptpvbJreiIAYOedyqeEpKWRVsIqIXOj0qRzTJil88=
Subject key identifier:   05:0D:B4:5F:3E:FB:28:B5:77:2E:95:64:5D:58:F5:E3:F4:5E:89:E0
Certificate issuer:       /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial:       472EAA19DF087B7E4100768F1F11D4896FEC6004
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access:      rsync://dev.tw/rpki/August/7/32332e3134392e3233322e302f32342d3234203d3e20333238303239.roa
Signing time:             Fri 05 Jan 2024 14:34:32 +0000
ROA not before:           Fri 05 Jan 2024 14:29:32 +0000
ROA not after:            Fri 03 Jan 2025 14:34:32 +0000
asID:                     328029
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 08:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:aa:19:df:08:7b:7e:41:00:76:8f:1f:11:d4:89:6f:ec:60:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
        Validity
            Not Before: Jan  5 14:29:32 2024 GMT
            Not After : Jan  3 14:34:32 2025 GMT
        Subject: CN=050DB45F3EFB28B5772E95645D58F5E3F45E89E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:af:ba:6c:db:f3:a9:01:93:a1:c5:c9:2f:
                    1f:94:f1:c6:3f:13:c8:92:b4:ee:c5:21:0d:5b:08:
                    62:f2:31:aa:7a:65:ac:24:45:7c:2e:95:87:c7:ee:
                    97:86:e8:86:0a:bf:91:46:4c:3c:e7:b4:27:a1:9c:
                    94:d6:30:de:9e:15:4f:bc:0f:83:17:26:f9:79:da:
                    09:fb:04:7e:95:99:e3:55:b7:b4:f4:8a:24:d4:79:
                    e9:85:0f:c4:83:d6:7c:5c:53:75:a1:ea:02:3c:36:
                    55:e3:e1:7d:3e:13:5c:37:ce:43:c5:8a:2b:26:7c:
                    d1:00:96:01:5e:44:1b:8c:fc:d0:df:ae:70:40:ae:
                    3c:3f:9e:4b:b2:ad:f5:ed:da:62:07:e9:3d:4f:8c:
                    84:9e:89:ee:36:4e:06:b8:2e:97:58:33:55:9f:37:
                    02:ce:87:28:d8:46:87:44:3d:1f:a8:df:c2:fd:40:
                    a5:e6:62:30:54:a1:cd:86:78:ea:8e:9f:6e:a0:23:
                    90:7e:d3:bd:51:c0:12:5d:61:50:f8:05:ef:29:1d:
                    2f:79:a1:0b:0a:89:5a:7d:79:1b:0d:ce:0d:07:a8:
                    a8:f0:b4:fd:1b:09:93:45:62:4e:ce:b6:5a:1d:b0:
                    e8:c9:b2:46:31:b0:8b:1f:31:4a:41:8e:99:c2:1b:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0D:B4:5F:3E:FB:28:B5:77:2E:95:64:5D:58:F5:E3:F4:5E:89:E0
            X509v3 Authority Key Identifier:
                keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/7/32332e3134392e3233322e302f32342d3234203d3e20333238303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:dc:53:91:dd:3c:ba:b7:a6:0e:d6:f2:36:40:4e:f5:6c:
         2f:26:46:e8:9c:0c:d8:5f:01:1c:2f:ee:45:a9:32:16:60:f1:
         a7:0f:bd:7c:3a:f6:69:6e:3e:c9:d3:97:c5:b9:c6:da:ea:9b:
         f5:21:e4:98:10:a0:b1:cc:b6:64:fd:66:18:9b:9e:94:b4:52:
         27:3d:68:14:36:5d:43:28:c4:ff:3b:d4:85:31:5e:6f:1e:19:
         3f:a3:d3:ad:82:95:a9:7c:0f:59:48:56:2d:ad:74:25:89:55:
         d6:e3:25:58:c0:83:47:e8:a7:a6:41:95:2b:2a:ef:6e:79:5a:
         e8:12:94:c8:73:71:6a:db:af:f9:90:f0:c9:fd:c4:99:94:54:
         a5:05:32:e3:af:20:67:f4:c0:db:d2:f8:b9:ad:45:0e:bb:2b:
         5a:f4:d5:aa:55:1c:2a:8e:f2:67:27:8b:8a:48:45:96:bf:8a:
         1d:44:5d:51:09:20:31:84:f2:1b:d5:a7:74:dd:e7:b6:c4:26:
         68:d7:a2:b5:fa:aa:6b:e6:dc:30:bf:1b:64:e7:9d:1e:ce:3c:
         12:3c:c5:42:63:cf:50:af:9f:52:79:0b:a0:91:c4:9f:34:bb:
         92:53:18:6a:03:02:cc:3b:b1:78:57:3a:17:22:e1:77:1c:ef:
         96:b9:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----