Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/mNudibbqTKhUGMu98lHM3tLCSoQ.roa
File:                     mNudibbqTKhUGMu98lHM3tLCSoQ.roa (raw, json)
Hash identifier:          CObTNwQlRFnKawZ19bgitSUf6DkU2rSm2qdN0FSf9lw=
Subject key identifier:   98:DB:9D:89:B6:EA:4C:A8:54:18:CB:BD:F2:51:CC:DE:D2:C2:4A:84
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       11BF
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/mNudibbqTKhUGMu98lHM3tLCSoQ.roa
Signing time:             Mon 26 Aug 2024 05:11:06 +0000
ROA not before:           Mon 26 Aug 2024 05:11:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18049
IP address blocks:        223.26.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 06:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4543 (0x11bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Aug 26 05:11:06 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=98DB9D89B6EA4CA85418CBBDF251CCDED2C24A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:3a:3c:0a:0e:ce:b6:02:e0:e9:3e:78:06:
                    93:09:60:bc:82:3e:e6:75:54:68:00:ca:13:ab:2a:
                    d1:50:10:94:4b:5a:4f:bd:4c:6d:d5:03:f2:b0:ca:
                    bb:cc:df:05:b7:1c:f9:d5:da:1d:98:2f:95:a9:c7:
                    c3:7e:1a:7b:e2:7a:9a:78:f7:b3:89:d1:d9:22:75:
                    34:7c:b0:b2:7d:02:9a:f2:5e:03:9c:a6:80:4a:02:
                    c0:89:49:89:1e:78:a7:c4:1e:88:97:e0:a2:4d:86:
                    35:d4:c1:5e:b5:dc:9e:cd:eb:ca:b3:49:56:43:ae:
                    b6:53:a6:00:48:bf:d8:90:36:1e:56:84:b1:cf:51:
                    f9:df:47:3e:d9:5e:92:3b:00:14:14:83:24:91:7f:
                    f3:84:e9:25:4f:79:26:6c:f1:7a:bb:d9:5f:6b:ad:
                    2a:a6:2f:ab:2f:f4:88:44:4c:98:73:a1:ba:14:c3:
                    7e:8c:33:a6:b4:24:ba:d0:53:17:a3:11:6e:8b:99:
                    3d:0f:08:ff:47:41:4d:02:a0:98:3e:33:bf:8c:92:
                    82:f4:ed:2e:01:b8:93:25:18:d4:87:ce:17:23:20:
                    ee:06:4f:f5:0b:b5:71:4f:e5:74:69:4b:f7:e4:f0:
                    47:54:5e:a2:17:a2:a9:55:e5:07:08:17:69:b9:18:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DB:9D:89:B6:EA:4C:A8:54:18:CB:BD:F2:51:CC:DE:D2:C2:4A:84
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/mNudibbqTKhUGMu98lHM3tLCSoQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:bc:51:87:78:44:31:58:07:a8:d9:97:b6:5e:5a:ae:03:
         e4:60:78:ec:d7:c1:69:3c:02:71:26:62:c4:3d:b8:12:c8:26:
         9e:b2:35:d7:46:e0:e7:b4:64:f2:47:7d:d3:e9:52:a4:18:b4:
         16:94:d2:6f:50:c9:db:4c:44:59:1d:19:ec:ea:6c:09:42:56:
         34:20:f5:15:53:d3:f1:96:97:fe:be:32:0a:79:d6:83:ab:bd:
         e7:04:ab:74:a6:99:b0:a0:d2:59:49:1c:20:37:5b:ad:93:17:
         7b:14:50:66:c6:c7:f6:60:d7:36:d0:2c:ef:6f:68:6d:7b:d2:
         1b:05:6b:22:95:d4:ec:66:ab:1f:01:45:61:d1:96:43:0d:e3:
         ec:21:81:8a:4c:e8:41:0c:c0:a3:93:4e:90:90:1b:c3:33:76:
         6a:48:a0:cd:45:7f:36:a8:51:89:8a:69:56:b0:b8:f6:fb:ed:
         42:5b:0e:19:2e:62:26:32:d0:3d:4a:a2:c3:de:7b:4a:50:88:
         62:e9:c7:69:d9:8b:b1:d2:38:f8:1e:a5:30:bf:02:3c:3f:75:
         c3:cc:d2:fb:89:3a:b6:df:99:55:52:86:b5:fc:a4:d2:a7:7d:
         6f:d4:e0:6b:71:87:5b:54:49:79:58:1f:e0:33:5d:ac:b5:03:
         ba:56:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----