Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/V5jTDRWGpcjjWW6ZVRtiyfFmZVQ.roa
File:                     V5jTDRWGpcjjWW6ZVRtiyfFmZVQ.roa (raw, json)
Hash identifier:          SFFQHce4rl9qoe49l32WjekFIxJOEF9vYjap6KF8On4=
Subject key identifier:   57:98:D3:0D:15:86:A5:C8:E3:59:6E:99:55:1B:62:C9:F1:66:65:54
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/V5jTDRWGpcjjWW6ZVRtiyfFmZVQ.roa
Signing time:             Thu 15 Sep 2022 02:40:04 +0000
ROA not before:           Thu 15 Sep 2022 02:40:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        210.203.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5798D30D1586A5C8E3596E99551B62C9F1666554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:75:a3:4f:9d:9d:a8:0a:c6:ee:6f:cf:f9:60:
                    ad:42:95:0c:53:2e:f5:9b:92:41:67:a1:77:cb:31:
                    a4:9c:a0:d5:c9:77:c1:98:29:7c:8f:9c:b8:71:37:
                    83:1d:65:cd:d9:24:b3:5d:16:b4:89:84:0d:eb:05:
                    a4:fe:9b:4f:4c:0c:1d:5e:6c:7d:7f:d9:5a:2e:7d:
                    68:49:1b:98:ea:22:a2:cf:e2:3a:19:fe:16:15:01:
                    64:3f:74:0f:14:22:63:64:22:6a:46:c9:8c:c5:d0:
                    58:6f:05:d7:59:ee:7b:b1:f2:18:31:7c:a6:fd:e5:
                    6b:10:99:97:e0:77:db:12:32:db:94:8c:09:3d:e9:
                    c5:d7:af:f3:e6:58:c9:2e:16:61:43:9c:06:2a:ed:
                    ff:1c:19:9f:12:6e:50:2a:69:0f:50:0d:ec:f3:8d:
                    6d:24:c1:ca:e6:93:1c:c2:ea:ab:36:b5:8a:5b:6b:
                    46:ad:92:f9:30:67:01:7e:d9:78:6f:bc:d7:62:2f:
                    49:57:14:38:68:00:04:69:f5:88:f7:6b:e0:91:3a:
                    f2:6e:cc:59:c8:9d:6f:34:6e:d8:ae:6a:bc:ed:6b:
                    27:4e:fa:8e:0c:18:d4:75:37:25:f5:d3:d6:0f:59:
                    d9:b1:f2:57:d6:5e:14:c7:70:75:ef:f8:56:86:3c:
                    14:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:D3:0D:15:86:A5:C8:E3:59:6E:99:55:1B:62:C9:F1:66:65:54
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/V5jTDRWGpcjjWW6ZVRtiyfFmZVQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.203.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:b0:a1:d7:12:f5:3f:e8:e3:e2:1c:8f:ef:36:15:67:01:05:
         d2:f4:c9:e4:e2:dc:d8:9b:ab:c4:3b:1e:98:b7:c9:e8:b5:90:
         4e:dd:28:da:d2:27:9b:14:97:da:c5:81:d3:3f:cc:7d:66:c2:
         0c:ab:ec:0d:f6:de:77:8d:f3:46:59:cf:5a:00:bd:23:82:e6:
         9a:fa:80:95:22:05:9b:9d:81:a9:ea:e5:35:4e:6a:f7:9e:8c:
         46:15:e8:3c:6d:57:e6:a9:a1:00:89:30:78:d6:f2:22:80:7b:
         0e:e2:1b:c6:ac:33:5c:7f:9b:61:ef:4a:4a:f8:a4:94:d8:0c:
         cb:8d:8f:9a:1f:0c:71:1e:83:14:66:4a:76:3e:1b:7d:16:5f:
         93:04:8a:b7:36:8e:ca:0a:fe:e9:06:38:73:95:0a:d0:fc:5b:
         f1:93:9c:b8:be:9a:f9:cb:a2:34:4b:5b:af:3b:08:82:74:98:
         09:7e:2d:81:33:d1:e5:c6:07:b8:47:a5:22:fd:8e:89:8c:cb:
         a9:06:6e:a3:d0:29:41:01:e2:0b:23:4b:85:21:6c:d0:a1:54:
         cd:00:15:12:80:53:22:19:af:15:a5:12:c6:4a:61:22:2d:d4:
         b6:ea:6e:36:73:3b:73:a0:21:be:bb:6c:a6:c4:0c:1c:66:1b:
         6b:2a:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:45 2023 by rpki-client on console-ams.rpki-client.org