Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/I_-EFzUqcenES_hYPQ8bhH9NelY.roa
File:                     I_-EFzUqcenES_hYPQ8bhH9NelY.roa (raw, json)
Hash identifier:          Q7YDtcf5Ig+0xff5FVizxd3cSfMVqr1wA2BPG0V3/rk=
Subject key identifier:   23:FF:84:17:35:2A:71:E9:C4:4B:F8:58:3D:0F:1B:84:7F:4D:7A:56
Certificate issuer:       /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Certificate serial:       42
Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/I_-EFzUqcenES_hYPQ8bhH9NelY.roa
Signing time:             Fri 13 Sep 2024 12:08:04 +0000
ROA not before:           Fri 13 Sep 2024 12:08:04 +0000
ROA not after:            Thu 28 Aug 2025 15:30:19 +0000
asID:                     152613
IP address blocks:        2401:bf60:4ff9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 14:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
        Validity
            Not Before: Sep 13 12:08:04 2024 GMT
            Not After : Aug 28 15:30:19 2025 GMT
        Subject: CN=23FF8417352A71E9C44BF8583D0F1B847F4D7A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:71:2a:e1:c2:55:0a:fb:22:97:5e:b2:14:
                    21:f4:a2:a0:56:5a:96:21:53:e9:42:52:c2:84:1d:
                    2b:10:be:e2:05:cc:7a:38:33:e8:2c:59:4f:c0:03:
                    7b:74:35:c8:95:7d:92:e0:d6:ba:f5:15:6b:39:8e:
                    c1:79:53:e8:ce:a3:f7:9e:3f:b4:ee:51:fd:d7:1f:
                    c4:8a:9c:84:df:0e:a8:1a:79:9a:d8:93:ca:60:33:
                    bc:cd:c4:28:c9:c1:f9:6e:8d:7e:c0:3a:5d:f5:3e:
                    cc:21:e2:8c:2e:47:3a:0c:4f:7f:4e:bc:b6:6f:17:
                    c0:d0:76:9d:32:84:60:73:f0:81:6c:43:0a:9d:6c:
                    33:0e:d9:ce:6b:d8:21:03:65:07:ca:ff:16:53:a0:
                    89:ea:ea:e4:95:88:db:84:8d:52:e6:9b:0c:47:52:
                    7b:db:0c:44:3e:83:3a:1d:df:09:25:a2:6f:78:fd:
                    76:3f:5e:8c:ab:22:75:0a:5a:67:c9:7d:4d:cd:82:
                    ac:63:69:0b:3b:c5:79:97:df:44:25:33:75:fa:5b:
                    3f:8a:42:44:29:2a:92:e0:3a:29:e2:91:55:77:cf:
                    ef:ec:bb:d9:ff:8e:e6:23:05:35:aa:ca:b7:60:3e:
                    60:85:d4:91:28:f6:15:14:92:bb:2b:7e:25:a0:30:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:84:17:35:2A:71:E9:C4:4B:F8:58:3D:0F:1B:84:7F:4D:7A:56
            X509v3 Authority Key Identifier:
                keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/I_-EFzUqcenES_hYPQ8bhH9NelY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf60:4ff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:d4:84:3f:65:c8:f6:21:fa:6e:f4:a1:30:b6:a1:e5:bb:
         20:33:9d:16:76:e3:4a:bf:eb:3e:63:17:d8:cc:a0:6d:f4:dd:
         b1:49:4e:68:df:a4:3d:c7:03:66:6d:a3:25:f3:09:d2:e6:f2:
         b3:1e:9f:22:7e:d4:1e:10:d3:6c:0b:98:2a:95:d9:34:37:7a:
         28:3a:a7:57:1c:1a:96:a6:fe:f2:1e:85:cd:aa:e3:88:4e:ca:
         00:ac:b9:45:7e:68:67:57:ec:17:be:9e:10:e3:00:51:e3:53:
         c0:71:28:8d:a2:b1:b4:cf:45:41:da:ef:c7:aa:df:e4:fa:20:
         96:56:71:8f:d5:dc:15:5a:ad:8f:01:39:84:7a:6b:83:ab:11:
         d3:d5:9e:40:40:da:58:62:87:d9:f9:16:a8:fc:df:57:8d:95:
         2d:13:59:80:27:a6:ff:76:9e:48:5a:49:e6:8e:62:fd:1b:19:
         4e:ad:25:3f:3b:47:51:df:e1:e2:cb:c6:e1:ad:8d:2a:f2:a0:
         31:65:ae:0b:5b:76:1f:94:10:39:5c:4d:70:46:06:f5:db:c7:
         02:93:f4:81:a7:97:c7:76:0e:a9:b3:a9:0a:fd:7d:ff:99:4c:
         3e:3a:51:a7:00:bf:c5:56:ff:0e:02:9b:c8:f5:3b:30:c1:4a:
         64:08:1f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 16:54:31 2024 by rpki-client on console-ams.rpki-client.org