Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/RtmA2XCag6bmkL9ng8eMxuTsXQU.roa
File:                     RtmA2XCag6bmkL9ng8eMxuTsXQU.roa (raw, json)
Hash identifier:          EqvlS4voovfCxr+7YaGXlyCAqhCzM/dp3jUYNIo0fHo=
Subject key identifier:   46:D9:80:D9:70:9A:83:A6:E6:90:BF:67:83:C7:8C:C6:E4:EC:5D:05
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       0550
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/RtmA2XCag6bmkL9ng8eMxuTsXQU.roa
Signing time:             Mon 26 Aug 2024 05:09:28 +0000
ROA not before:           Mon 26 Aug 2024 05:09:28 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     60614
IP address blocks:        103.156.184.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 09:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Aug 26 05:09:28 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=46D980D9709A83A6E690BF6783C78CC6E4EC5D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:62:4d:50:04:f3:4f:86:08:6d:e5:63:67:
                    f1:21:b2:bb:ce:ad:81:00:26:4f:bc:24:53:78:36:
                    34:f5:fd:0f:16:5e:fe:64:56:28:ef:38:01:95:75:
                    b2:bb:2e:1a:e9:ef:94:1b:f5:47:b4:54:3d:2d:aa:
                    a5:19:e5:37:54:1d:47:ea:e9:1b:ea:a3:85:82:20:
                    8f:64:50:c1:0d:72:5c:e5:7a:ca:f9:98:54:0f:2f:
                    82:e6:77:a8:e2:7e:51:04:41:c1:72:58:5e:15:94:
                    12:de:f8:cd:e8:36:4d:73:50:c8:26:46:5a:12:c9:
                    1b:f6:a6:a1:12:f1:33:fd:14:06:58:1d:33:cf:85:
                    f9:36:0a:21:e8:73:8b:37:7b:21:83:61:6e:52:ab:
                    d3:74:1b:bb:a3:04:62:20:30:2b:61:05:7e:f7:2e:
                    d5:22:88:50:a9:29:98:15:f0:3c:ca:db:da:27:76:
                    06:a1:7f:96:26:4f:cb:85:62:05:d2:86:d8:0c:2a:
                    37:d6:ea:5d:e6:be:46:94:5d:c3:7f:63:32:03:75:
                    8d:6a:8a:78:9c:2e:35:31:9e:b6:21:e1:87:ef:cc:
                    c6:f4:ee:e0:ca:84:ae:1b:2b:10:29:e3:f3:1a:73:
                    ce:bd:3c:37:8e:ef:d9:86:5e:ac:dc:3a:2e:c0:fe:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:80:D9:70:9A:83:A6:E6:90:BF:67:83:C7:8C:C6:E4:EC:5D:05
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/RtmA2XCag6bmkL9ng8eMxuTsXQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:29:fe:06:d9:4a:83:7b:6c:2b:fe:4d:27:1d:73:c3:77:
         a5:e8:1c:ae:1b:eb:1a:c5:e9:9d:92:50:b0:eb:df:29:48:2d:
         13:9d:ad:44:3d:4d:0b:2d:61:1d:e5:0c:b8:28:10:34:5a:9b:
         13:02:35:7d:fb:dc:d6:7e:c0:16:cb:b4:92:cb:21:d8:99:71:
         9c:a3:c7:3f:af:f3:80:e2:99:ee:4e:73:60:eb:2c:6e:ed:a2:
         8d:15:ef:79:38:72:7a:17:35:4f:61:6f:84:54:2d:e9:0b:26:
         81:de:48:4d:9a:e7:14:90:8d:07:ef:69:bf:39:1c:80:02:75:
         88:f8:43:97:5f:a3:3b:39:af:c5:6b:8a:6c:d4:dc:53:d2:4d:
         39:59:14:a2:d8:92:df:2f:c3:9d:5c:be:a6:f3:23:52:b5:02:
         76:ac:26:67:47:4a:68:26:b3:86:9f:76:c2:e7:1c:b1:3a:28:
         9b:3b:6a:45:2f:64:5b:6c:c0:77:9f:76:70:99:a7:54:62:2a:
         98:3c:30:cc:c4:50:27:dc:fd:a2:a1:b1:4b:10:c8:80:c5:ea:
         98:f7:af:a8:18:9b:4d:93:1d:c3:64:ea:d7:83:29:d2:60:9d:
         b4:03:52:c6:97:9e:ba:ac:eb:47:43:ba:b8:7a:0b:f5:6b:0e:
         c9:3c:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 10:35:15 2024 by rpki-client on console-fra.rpki-client.org