Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/46DcYN_v8fyC0nxbyZkXccFemFk.roa
File:                     46DcYN_v8fyC0nxbyZkXccFemFk.roa (raw, json)
Hash identifier:          9ag0ezvUNoguDpSJH+PX83Ioq8J5QuaTi5u5UMyE7iM=
Subject key identifier:   E3:A0:DC:60:DF:EF:F1:FC:82:D2:7C:5B:C9:99:17:71:C1:5E:98:59
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0C65
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/46DcYN_v8fyC0nxbyZkXccFemFk.roa
Signing time:             Thu 15 Sep 2022 02:50:51 +0000
ROA not before:           Thu 15 Sep 2022 02:50:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18178
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 15 02:50:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E3A0DC60DFEFF1FC82D27C5BC9991771C15E9859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:9c:ef:38:cc:6b:a6:54:86:90:14:ea:bd:
                    5d:95:83:3d:7f:41:56:3a:56:ae:2f:9b:d0:cb:27:
                    a4:e6:87:82:1e:56:23:5f:92:43:e4:d9:8f:42:ae:
                    cd:e2:cc:93:01:22:9a:35:c4:83:13:23:4a:08:48:
                    0c:f9:27:37:34:0d:88:cd:63:01:4f:b6:25:e4:55:
                    29:e9:6b:32:d8:2e:72:0d:15:6e:8d:7f:10:1f:d9:
                    46:4a:38:3e:77:57:a2:99:ac:28:1f:48:cc:b7:2d:
                    7e:1e:08:6c:d7:cf:e3:f8:b2:8b:bf:6b:dc:ad:56:
                    bf:71:bb:6e:93:38:19:db:29:5f:83:fd:7c:bc:ec:
                    78:d1:df:91:8a:0c:b7:f8:67:24:87:e6:ef:ce:53:
                    2a:13:39:3b:68:7e:ed:97:af:8e:69:9a:80:f3:3f:
                    6f:e9:e5:49:b5:a5:9f:bc:44:bd:3a:cc:6a:57:a6:
                    dd:f3:a3:a1:16:b8:65:04:c7:bb:8e:2c:53:83:fb:
                    49:2c:af:ab:68:9e:a1:a0:11:30:a5:31:79:3d:f2:
                    8b:81:61:80:72:a7:44:78:5a:e7:fb:02:69:ee:02:
                    f8:13:2f:0a:dc:bd:a7:1d:08:82:48:cc:56:90:0d:
                    6b:aa:56:f0:d5:67:fc:be:fc:31:09:41:c4:e6:07:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:DC:60:DF:EF:F1:FC:82:D2:7C:5B:C9:99:17:71:C1:5E:98:59
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/46DcYN_v8fyC0nxbyZkXccFemFk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:ee:e9:a6:fc:19:21:9f:df:72:ba:9c:2d:ab:2a:d7:76:
         7d:b9:da:27:c3:1c:37:8a:7c:4c:3b:b5:22:76:d9:ca:50:d6:
         eb:a6:c7:c6:2f:18:ac:65:8e:b5:7a:a4:fe:0e:19:90:97:68:
         e7:7d:fe:e5:d5:1c:76:09:b6:b2:f0:1c:72:09:a9:f0:eb:be:
         2b:da:ee:fc:6a:7b:c3:b4:c1:8c:67:58:d6:14:e1:5e:7d:9e:
         45:b2:0f:8e:90:4c:f8:7d:9d:ce:f3:be:6f:d6:ec:c2:3e:e1:
         84:1b:be:44:37:33:b0:3b:6a:a8:67:ad:f5:5e:f1:38:56:61:
         d0:b5:27:87:d0:91:96:42:f8:d0:ab:82:b3:9d:f4:4a:e1:ff:
         45:8a:ad:81:03:1a:80:cd:bf:ea:4f:2b:f3:b2:8a:ea:6c:dd:
         4d:e2:41:b1:28:b2:eb:9e:c3:9d:db:fe:7e:3a:2b:79:f7:8a:
         60:90:54:25:29:da:20:af:b0:7a:41:2b:39:8b:69:77:11:15:
         13:7c:8a:7f:9e:0c:7f:b6:b9:29:87:1a:3a:9b:cc:db:f8:98:
         d8:93:8a:ea:9b:dc:32:b3:b7:ef:cc:01:98:65:43:ea:58:14:
         95:cc:ef:3c:d6:5e:ec:05:e7:52:39:be:52:e7:e8:4f:e3:35:
         a1:ca:ea:a7
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMjA5MTUw
MjUwNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUzQTBEQzYwREZFRkYx
RkM4MkQyN0M1QkM5OTkxNzcxQzE1RTk4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWzpzvOMxrplSGkBTqvV2Vgz1/QVY6Vq4vm9DLJ6Tmh4IeViNf
kkPk2Y9Crs3izJMBIpo1xIMTI0oISAz5Jzc0DYjNYwFPtiXkVSnpazLYLnINFW6N
fxAf2UZKOD53V6KZrCgfSMy3LX4eCGzXz+P4sou/a9ytVr9xu26TOBnbKV+D/Xy8
7HjR35GKDLf4ZySH5u/OUyoTOTtofu2Xr45pmoDzP2/p5Um1pZ+8RL06zGpXpt3z
o6EWuGUEx7uOLFOD+0ksr6tonqGgETClMXk98ouBYYByp0R4Wuf7AmnuAvgTLwrc
vacdCIJIzFaQDWuqVvDVZ/y+/DEJQcTmB77LAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU46DcYN/v8fyC0nxbyZkXccFemFkwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC80NkRjWU5fdjhmeUMw
bnhieVprWGNjRmVtRmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQBpfe7ppvwZIZ/fcrqcLasq13Z9udon
wxw3inxMO7UidtnKUNbrpsfGLxisZY61eqT+DhmQl2jnff7l1Rx2Cbay8BxyCanw
674r2u78anvDtMGMZ1jWFOFefZ5Fsg+OkEz4fZ3O875v1uzCPuGEG75ENzOwO2qo
Z631XvE4VmHQtSeH0JGWQvjQq4KznfRK4f9Fiq2BAxqAzb/qTyvzsorqbN1N4kGx
KLLrnsOd2/5+Oit594pgkFQlKdogr7B6QSs5i2l3ERUTfIp/ngx/trkphxo6m8zb
+JjYk4rqm9wys7fvzAGYZUPqWBSVzO881l7sBedSOb5S5+hP4zWhyuqn
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org