Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/8/3134392e3131322e35332e302f32342d3234203d3e20393435.roa
File:                     3134392e3131322e35332e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          Zdt07/YYoEmRaeeCzZP9WJmz6H5zK7EKdjkcv7V1SHY=
Subject key identifier:   99:9E:E2:D8:6F:4E:93:50:53:57:3F:D5:F3:5E:73:2A:0C:5A:5E:0F
Certificate issuer:       /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial:       19674A8D2F72F4FDA8A6DFFF942BD5F958BC6330
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject info access:      rsync://dev.tw/rpki/August/8/3134392e3131322e35332e302f32342d3234203d3e20393435.roa
Signing time:             Tue 13 Feb 2024 20:59:09 +0000
ROA not before:           Tue 13 Feb 2024 20:54:09 +0000
ROA not after:            Tue 11 Feb 2025 20:59:09 +0000
asID:                     945
IP address blocks:        149.112.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:67:4a:8d:2f:72:f4:fd:a8:a6:df:ff:94:2b:d5:f9:58:bc:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
        Validity
            Not Before: Feb 13 20:54:09 2024 GMT
            Not After : Feb 11 20:59:09 2025 GMT
        Subject: CN=999EE2D86F4E935053573FD5F35E732A0C5A5E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2a:46:d5:9d:fc:4b:20:26:e3:49:e3:c9:02:
                    aa:15:da:d8:40:b4:b5:85:47:b1:eb:70:57:9a:f4:
                    94:2c:50:e3:3b:64:60:20:9f:aa:ee:6b:d8:ee:51:
                    eb:e4:83:c7:67:31:55:85:48:6e:9d:29:56:e6:d9:
                    e9:74:83:52:d2:20:b6:b7:70:3f:b0:51:6e:2a:34:
                    23:52:bd:7f:e0:08:77:92:84:37:6b:9a:7c:4d:31:
                    f6:2e:2e:27:5d:9b:d8:f8:0c:7f:9c:0e:eb:a7:8e:
                    e6:e7:54:5e:dd:69:32:d8:0a:81:50:25:c6:07:cb:
                    43:6a:0b:f1:32:aa:f6:60:f1:70:1f:a6:45:e9:e0:
                    a6:01:60:c0:5c:db:9e:49:16:d7:8d:b6:87:28:8c:
                    e5:35:29:d5:16:0c:66:47:2f:a8:e0:81:0b:9c:80:
                    1d:d7:7c:db:b3:59:55:1b:b0:59:db:36:2f:f1:ab:
                    0a:1f:41:34:48:32:07:ff:bc:be:cc:2a:62:d5:d9:
                    51:3b:5d:dd:e9:3e:48:75:33:c7:b7:8d:5c:1d:52:
                    09:8a:6a:51:35:68:6c:44:b3:0b:da:4e:89:ad:65:
                    83:ff:d1:59:6f:72:21:1e:66:a1:6a:73:80:b7:52:
                    8c:e4:ea:4f:e9:3a:69:10:ed:55:96:06:2b:07:d6:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9E:E2:D8:6F:4E:93:50:53:57:3F:D5:F3:5E:73:2A:0C:5A:5E:0F
            X509v3 Authority Key Identifier:
                keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/8/3134392e3131322e35332e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:fc:c9:b4:f5:c2:50:25:fb:cc:88:e6:b8:f3:65:5d:ce:
         48:ce:71:f5:84:fa:43:32:01:f9:e6:89:b6:d4:bc:0b:87:a1:
         74:c3:92:53:f4:85:a6:67:78:fe:78:97:7e:38:8f:13:6d:7f:
         00:36:b8:e4:97:89:c6:6b:d2:44:fc:8f:cf:1d:03:44:ec:0f:
         6f:76:aa:e0:1f:58:66:4c:eb:f9:83:f2:0d:86:ce:bb:9c:b8:
         44:44:0b:90:c8:7b:fe:4b:1a:5c:cc:c9:64:e0:d2:05:74:39:
         44:45:d5:c3:87:73:e7:8a:40:d5:cb:bb:16:81:81:fc:5f:18:
         95:13:b6:c7:3c:e8:9d:ad:b2:62:5f:d6:eb:f4:39:84:fa:cd:
         66:33:97:d9:7d:80:41:41:ad:d3:a9:3d:47:79:90:49:52:0d:
         95:c3:56:20:2d:87:09:66:5d:3e:68:30:ac:40:df:dc:89:18:
         42:0b:76:92:05:e4:3a:36:7e:24:44:bc:0a:3a:b6:49:31:2c:
         e1:f1:b0:0b:a4:79:ab:ba:5f:ea:45:ba:61:cc:19:f3:d1:66:
         f7:67:3b:37:a8:51:96:b7:29:2b:23:98:95:68:66:b3:32:5c:
         01:3d:8f:c6:d9:3b:32:ee:1e:e6:ab:87:66:93:52:86:da:14:
         2c:43:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----