Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/RjraVSbkGNUY13dAy2JbPJpwMXM.roa
File:                     RjraVSbkGNUY13dAy2JbPJpwMXM.roa (raw, json)
Hash identifier:          D+ySrU1T/om/He/vxjI1pA4OwpTcEiH4XoLhtyH00WA=
Subject key identifier:   46:3A:DA:55:26:E4:18:D5:18:D7:77:40:CB:62:5B:3C:9A:70:31:73
Certificate issuer:       /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial:       0BF6
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/RjraVSbkGNUY13dAy2JbPJpwMXM.roa
Signing time:             Mon 26 Aug 2024 05:09:46 +0000
ROA not before:           Mon 26 Aug 2024 05:09:46 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     147035
IP address blocks:        103.122.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 07:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3062 (0xbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
        Validity
            Not Before: Aug 26 05:09:46 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=463ADA5526E418D518D77740CB625B3C9A703173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:02:38:f1:89:61:ee:2f:7f:09:69:73:72:
                    82:f7:b2:19:5a:9f:ec:ea:aa:4c:9b:a3:24:5f:2a:
                    4c:db:fc:ff:d6:50:bb:6e:dc:97:d5:47:8a:f1:0b:
                    c2:35:51:d1:bc:20:ed:fe:e8:25:9b:09:81:0a:78:
                    8a:43:a5:9e:bd:93:7d:ab:d6:5a:1d:f6:c0:db:f9:
                    27:09:56:67:d9:bf:22:6d:61:76:b9:29:ba:71:89:
                    9a:0c:da:aa:83:57:27:8d:35:20:aa:63:be:31:38:
                    1c:fb:53:d2:88:8b:c1:dd:1d:0e:d9:f9:0c:10:31:
                    bd:fb:c4:0d:13:2c:26:56:77:f7:3d:12:fa:93:af:
                    25:a5:d9:02:d4:93:a7:71:3c:c1:a8:06:a7:13:12:
                    f1:69:27:31:7a:2b:c7:90:1c:e7:c2:a7:a2:b5:a7:
                    a5:3a:5e:76:0b:d1:ec:03:5d:7c:f7:df:e3:32:67:
                    a2:6b:a2:4a:67:28:81:81:cf:c9:78:18:d2:73:2d:
                    8b:e2:9b:1e:45:c7:29:c8:12:28:c6:fc:2f:fc:bd:
                    10:49:77:8e:8b:91:07:e8:55:ab:d7:7e:ff:8a:d3:
                    ee:60:e2:82:58:82:2f:23:46:4c:65:14:c4:4e:23:
                    72:64:5b:55:fa:64:7c:d3:26:de:61:dc:d3:29:ff:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3A:DA:55:26:E4:18:D5:18:D7:77:40:CB:62:5B:3C:9A:70:31:73
            X509v3 Authority Key Identifier:
                keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/RjraVSbkGNUY13dAy2JbPJpwMXM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:14:73:26:72:5c:48:4e:9e:f2:cb:eb:10:95:b5:dd:59:
         7d:ee:cd:c2:0d:cd:16:12:77:69:ad:77:ca:d6:ff:3e:b5:93:
         1d:48:b2:36:77:46:db:8a:d4:ec:c2:7e:70:5a:f5:44:eb:0a:
         66:9e:62:a4:c7:67:f7:5e:1f:fc:57:53:0c:4e:5c:a2:ed:cd:
         cd:0f:fb:85:87:3b:7b:a2:10:9a:76:2e:77:4b:fc:14:cb:a7:
         e9:5c:18:4b:99:07:82:a2:25:91:57:0e:8d:db:aa:25:e2:2d:
         85:c8:43:bb:e5:66:2b:e3:b1:51:e2:4f:b2:14:b5:79:e7:a9:
         9b:f1:e1:ef:d5:fe:63:4b:08:13:91:f5:6d:01:b8:a9:8e:32:
         0e:73:f7:c1:8b:52:d2:1b:5c:b1:49:87:61:8b:58:7f:52:18:
         08:f6:9a:57:1d:27:24:1c:27:42:71:89:4f:fc:b2:60:d6:b6:
         cf:9b:44:20:9b:b5:b8:95:36:41:bf:bb:40:7a:0e:c4:60:f7:
         55:68:97:ca:ca:ac:47:ff:97:81:d2:c8:0a:8f:34:ad:db:28:
         9f:d5:1e:e3:6a:46:97:24:81:5e:98:e1:5c:cb:13:d8:e2:2a:
         46:a7:0c:42:04:5c:2e:b7:8b:a2:e4:c9:95:99:e4:ae:25:4f:
         c4:29:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----