Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/gHziapAAVjRKaBEd6Z1ezMc9l-k.roa
File:                     gHziapAAVjRKaBEd6Z1ezMc9l-k.roa (raw, json)
Hash identifier:          Ca5c+XaLhLgclfvO8e85wzhPLsQKjZo+OUB+mLYTN8c=
Subject key identifier:   80:7C:E2:6A:90:00:56:34:4A:68:11:1D:E9:9D:5E:CC:C7:3D:97:E9
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0E63
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/gHziapAAVjRKaBEd6Z1ezMc9l-k.roa
Signing time:             Mon 26 Aug 2024 05:16:59 +0000
ROA not before:           Mon 26 Aug 2024 05:16:59 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        2404:bac0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 06:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3683 (0xe63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Aug 26 05:16:59 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=807CE26A900056344A68111DE99D5ECCC73D97E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9f:1c:25:29:08:fa:83:8c:7e:e6:bd:d2:74:
                    5b:ca:86:60:4b:44:b8:ec:58:dc:af:0f:38:3e:8f:
                    94:3d:cc:fd:1c:b9:d5:de:ab:c3:31:67:81:cc:e9:
                    46:d6:f1:23:62:55:94:af:ab:7a:02:9a:4f:c9:9d:
                    9e:4b:d4:fe:f1:fd:be:f7:d2:f5:1c:88:90:56:f9:
                    f1:c3:b9:44:bf:a7:08:45:cb:d5:71:f2:37:80:0b:
                    9e:48:22:da:15:32:6c:4d:bd:8b:8f:2f:9f:3c:8a:
                    45:14:42:7d:48:b6:88:0f:0a:4b:a4:24:5d:44:57:
                    e1:96:6f:c5:bb:ef:1a:4a:b1:16:18:97:d9:8d:be:
                    aa:b2:e2:db:c6:fe:68:bb:04:b8:61:27:7b:f5:c4:
                    75:b9:26:77:20:29:1c:21:c1:30:11:2b:48:ce:19:
                    80:b8:4a:9d:f6:72:d5:05:d8:0a:cf:f1:b7:8c:41:
                    f7:3f:b4:eb:ec:57:20:00:a0:68:14:28:8a:c2:f2:
                    56:b1:77:ae:f8:cb:4c:57:b1:f1:f1:44:80:02:98:
                    5c:ca:f0:d9:4d:cb:aa:d8:89:a0:b4:41:ac:6b:96:
                    40:08:80:71:a4:78:f0:40:e2:6a:d3:7e:08:b5:a4:
                    64:70:a2:79:61:2b:03:9c:f5:6f:fd:6d:f3:d6:4f:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:E2:6A:90:00:56:34:4A:68:11:1D:E9:9D:5E:CC:C7:3D:97:E9
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/gHziapAAVjRKaBEd6Z1ezMc9l-k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:58:ef:d9:77:8f:ec:1d:4c:01:7d:e7:fa:e1:c1:5a:14:
         19:db:7e:ad:5f:89:4a:c4:25:02:d2:0e:92:3c:10:79:2a:c1:
         eb:53:96:2f:14:72:32:00:5a:77:2b:48:27:c2:5c:90:b6:70:
         df:9f:22:3f:49:50:b3:4f:7a:17:f9:cf:78:36:a2:be:32:4b:
         dc:43:72:ca:1c:18:15:51:cd:e0:53:e6:41:78:c4:9e:3d:30:
         1a:73:c7:34:23:12:6f:b1:b9:9b:5f:a3:38:5d:84:5e:5d:f2:
         bc:d9:03:8b:73:ae:f0:6d:11:33:5b:ca:53:46:e7:60:65:26:
         fa:46:74:ab:b0:76:aa:3d:8b:79:44:b4:12:e2:39:63:19:ad:
         4f:4c:a7:f2:8d:cd:41:08:a8:ad:1a:2b:40:e5:e7:9d:cf:fb:
         4b:4a:27:e4:57:a6:80:90:ae:9d:d3:0f:f5:8b:65:a7:3d:b2:
         fb:fa:a3:80:97:22:d7:51:63:6e:fa:0a:92:c7:c7:aa:11:84:
         12:05:b7:be:4a:70:af:4f:fa:bf:50:78:a8:d5:12:cf:e5:30:
         4c:48:09:27:2e:f6:d7:57:66:5b:3b:39:17:bc:35:7c:c7:f1:
         31:82:12:a7:5b:f8:b6:54:38:41:bc:5f:1d:b1:df:ee:0a:9f:
         18:9c:74:9b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yNDA4MjYw
NTE2NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwN0NFMjZBOTAwMDU2
MzQ0QTY4MTExREU5OUQ1RUNDQzczRDk3RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvnxwlKQj6g4x+5r3SdFvKhmBLRLjsWNyvDzg+j5Q9zP0cudXe
q8MxZ4HM6UbW8SNiVZSvq3oCmk/JnZ5L1P7x/b730vUciJBW+fHDuUS/pwhFy9Vx
8jeAC55IItoVMmxNvYuPL588ikUUQn1ItogPCkukJF1EV+GWb8W77xpKsRYYl9mN
vqqy4tvG/mi7BLhhJ3v1xHW5JncgKRwhwTARK0jOGYC4Sp32ctUF2ArP8beMQfc/
tOvsVyAAoGgUKIrC8laxd674y0xXsfHxRIACmFzK8NlNy6rYiaC0QaxrlkAIgHGk
ePBA4mrTfgi1pGRwonlhKwOc9W/9bfPWTy47AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUgHziapAAVjRKaBEd6Z1ezMc9l+kwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9nSHppYXBBQVZqUkth
QkVkNloxZXpNYzlsLWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAS6wDANBgkqhkiG9w0BAQsFAAOCAQEACzZY79l3j+wdTAF95/rhwVoUGdt+
rV+JSsQlAtIOkjwQeSrB61OWLxRyMgBadytIJ8JckLZw358iP0lQs096F/nPeDai
vjJL3ENyyhwYFVHN4FPmQXjEnj0wGnPHNCMSb7G5m1+jOF2EXl3yvNkDi3Ou8G0R
M1vKU0bnYGUm+kZ0q7B2qj2LeUS0EuI5YxmtT0yn8o3NQQiorRorQOXnnc/7S0on
5FemgJCundMP9Ytlpz2y+/qjgJci11FjbvoKksfHqhGEEgW3vkpwr0/6v1B4qNUS
z+UwTEgJJy7211dmWzs5F7w1fMfxMYISp1v4tlQ4QbxfHbHf7gqfGJx0mw==
-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:27 2024 by rpki-client on console-fra.rpki-client.org