Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/JDTIPrPktTmgKaZWJzajHf8jUhQ.roa
File:                     JDTIPrPktTmgKaZWJzajHf8jUhQ.roa (raw, json)
Hash identifier:          uzla0MFB+QTkvBkn2ff3hjxa22irLXxknk0Xbdz9ZrE=
Subject key identifier:   24:34:C8:3E:B3:E4:B5:39:A0:29:A6:56:27:36:A3:1D:FF:23:52:14
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JDTIPrPktTmgKaZWJzajHf8jUhQ.roa
Signing time:             Thu 15 Sep 2022 02:40:15 +0000
ROA not before:           Thu 15 Sep 2022 02:40:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131591
IP address blocks:        103.231.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2434C83EB3E4B539A029A6562736A31DFF235214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:f5:49:00:6a:26:d3:1c:f0:7f:ae:61:46:
                    cb:16:b1:0e:5b:1c:66:fa:2f:a6:25:f0:19:a3:b7:
                    76:d2:8a:1e:86:3c:92:63:e7:dc:48:6a:58:42:5b:
                    6b:be:c4:fc:d4:ac:21:1f:ed:13:56:0b:7f:98:22:
                    7a:a3:8e:99:5b:30:7b:4b:29:e1:1d:9c:db:cb:1d:
                    b9:a8:b3:b2:57:b5:24:74:b9:ba:08:c4:ea:a3:ea:
                    c6:60:b5:c6:c9:e4:79:fd:be:6d:36:c0:98:a4:f5:
                    90:be:83:1f:1d:60:76:43:fb:90:95:49:cc:df:a0:
                    10:f2:b2:95:26:dc:f3:cd:c3:1d:a3:18:e7:b0:a9:
                    65:70:09:02:33:ec:9a:67:db:37:27:0a:a2:a5:18:
                    b2:00:15:37:97:8b:78:fd:ce:8a:c8:82:a1:14:62:
                    24:a6:cd:da:61:0e:c2:be:90:aa:fc:82:7f:8b:a3:
                    a5:f4:0f:33:83:4d:3a:5d:35:d4:5d:e5:73:83:53:
                    72:39:1a:90:04:56:5b:5b:b3:7b:d8:59:15:23:47:
                    13:73:43:d1:fd:85:ef:36:3c:d1:14:5e:32:07:ef:
                    3a:f3:59:e8:6e:dd:98:fe:dc:d6:ad:10:b0:38:f4:
                    3a:eb:66:0d:3f:5a:57:87:f6:39:6e:70:74:bc:2a:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:34:C8:3E:B3:E4:B5:39:A0:29:A6:56:27:36:A3:1D:FF:23:52:14
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/JDTIPrPktTmgKaZWJzajHf8jUhQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:ac:33:85:54:81:bd:6e:77:1a:bb:fb:9a:6a:0e:7a:70:
         2f:9e:e4:3f:95:87:90:21:47:a5:60:e4:50:1f:59:a6:a0:48:
         ba:35:0f:f9:c5:57:c2:b8:14:cc:8f:9f:4e:51:05:b1:a8:15:
         11:75:fa:80:51:e4:b8:4f:bd:b3:c8:88:d5:57:43:7c:5b:fa:
         0a:27:ec:70:1b:dc:ff:39:61:bc:b1:8f:5c:c2:0b:bd:7e:d2:
         4c:ad:c8:54:6b:5d:0d:92:9e:fd:b1:fb:0c:6f:73:e6:ea:b0:
         2d:93:ff:01:95:37:22:e4:5f:5e:60:c9:59:4d:5e:b7:18:b2:
         9d:ac:3c:50:4c:b6:c2:6d:eb:d6:cd:20:3b:60:6d:ee:65:db:
         42:88:d6:cd:23:56:11:2d:f9:1e:41:6d:ef:31:52:5a:94:0c:
         b2:a6:45:fa:a4:a2:26:10:fb:8d:01:10:01:b4:d0:44:9a:e9:
         88:f1:60:8a:1b:52:c5:3d:5a:74:14:70:9e:cd:e3:23:13:05:
         a7:64:8e:df:d9:94:9f:bf:79:ec:21:4e:59:33:0c:3c:ca:42:
         ab:ac:58:ab:22:84:5b:e9:13:2e:7b:c6:2a:f3:fd:3f:68:58:
         41:94:5b:80:63:72:c7:85:8e:5b:65:8c:9c:60:24:22:bb:01:
         10:0c:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org