Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/-5enSMzdHajTGs6-Iq9q3Acj4jo.roa
File:                     -5enSMzdHajTGs6-Iq9q3Acj4jo.roa (raw, json)
Hash identifier:          qfwWoAe+yZa7GiAs00/+vOIF5FP5jUqMeL2wXpoFmhU=
Subject key identifier:   FB:97:A7:48:CC:DD:1D:A8:D3:1A:CE:BE:22:AF:6A:DC:07:23:E2:3A
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-5enSMzdHajTGs6-Iq9q3Acj4jo.roa
Signing time:             Thu 15 Sep 2022 02:47:58 +0000
ROA not before:           Thu 15 Sep 2022 02:47:58 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     198949
IP address blocks:        210.61.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:47:58 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FB97A748CCDD1DA8D31ACEBE22AF6ADC0723E23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:bf:d6:6d:a2:8c:ae:98:c4:f7:53:60:68:
                    46:40:7e:4b:cf:b2:c6:71:5a:bd:70:3a:29:7e:15:
                    32:b4:a2:4e:67:f5:0b:8c:82:45:5c:65:6c:d9:22:
                    f0:1a:b9:ba:f6:2b:84:de:52:18:39:a1:ea:f7:8d:
                    95:4a:58:fc:6d:06:42:ef:c5:b6:eb:17:5f:0e:0e:
                    65:17:a2:26:2e:00:97:47:19:90:5c:54:83:15:4a:
                    b1:96:21:4b:2a:90:a3:86:2a:04:3c:6e:c0:d5:cb:
                    f8:aa:62:62:9b:93:f2:e6:12:46:90:5b:4c:0b:9b:
                    8d:74:78:4d:ef:59:79:9b:1b:ed:b8:9e:f5:e6:61:
                    87:47:24:ab:f1:c2:db:f7:62:ab:97:d6:40:21:5a:
                    64:ec:a9:43:56:67:aa:bc:1a:98:89:c3:72:58:00:
                    3f:ef:7c:1f:ab:6c:fe:4f:d1:1b:ce:bf:7e:42:b8:
                    9b:da:56:79:cb:5e:92:25:b2:a4:89:d7:1a:a4:93:
                    f0:6a:57:00:94:2f:e1:52:fc:34:4d:75:2c:d5:90:
                    db:db:bc:d9:dd:cb:01:8f:92:fc:80:d8:bb:3e:36:
                    ad:7b:06:ab:6f:d9:f7:1f:4b:cf:db:48:e7:1a:b2:
                    4e:77:bb:20:40:f8:4e:ab:0c:13:40:3f:6e:da:2e:
                    5e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:A7:48:CC:DD:1D:A8:D3:1A:CE:BE:22:AF:6A:DC:07:23:E2:3A
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/-5enSMzdHajTGs6-Iq9q3Acj4jo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.61.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:19:bd:2e:bc:e4:26:3c:63:df:bb:65:0b:8e:a1:62:30:
         34:dd:b4:ca:5c:c9:88:bc:ee:ce:9f:51:79:a7:bc:37:4b:72:
         4b:43:b7:b8:94:47:aa:ca:26:eb:5a:cd:f6:a2:35:95:9e:8a:
         b8:58:23:1e:47:2d:0e:d8:46:00:68:77:21:e0:8e:2a:31:f8:
         02:24:d9:f1:95:cd:3e:75:c8:7a:1b:dd:07:0a:72:7d:dd:d8:
         32:78:f4:f5:de:4b:18:f4:79:2e:2e:30:ed:36:8d:2b:60:ed:
         ac:e4:30:ad:7a:b4:b7:f9:48:1d:61:00:22:18:51:b8:32:ce:
         74:ce:3a:71:4c:b1:a7:1f:49:fa:ad:1e:5a:92:9f:c0:31:9c:
         56:d3:50:a5:ab:2f:de:d5:4c:0b:bb:b5:71:2e:bf:1b:49:ff:
         70:a0:63:7d:90:d1:7e:a5:34:b8:48:a8:51:be:90:9d:a3:56:
         f7:14:f2:44:6f:b2:8d:30:c8:43:b3:f8:36:88:df:2d:c4:d1:
         eb:01:58:90:17:3a:0a:f5:d4:fc:55:54:b4:e5:15:53:cc:33:
         4f:02:f0:ad:13:e3:3e:2e:9a:14:9e:e0:8a:fd:98:95:cc:c2:
         70:5e:56:14:45:fa:b8:1c:d1:16:85:f3:8a:ed:25:2b:15:c8:
         1c:2e:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org