Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/URekvRchP3pirdy4NJ0H22LZryo.roa
File:                     URekvRchP3pirdy4NJ0H22LZryo.roa (raw, json)
Hash identifier:          rYYt+u1OAStUNBSs0/8IPi1as7+unGA5QiBhEg/jxIg=
Subject key identifier:   51:17:A4:BD:17:21:3F:7A:62:AD:DC:B8:34:9D:07:DB:62:D9:AF:2A
Certificate issuer:       /CN=6D1243152906B6566A2B3E19CC468E46DE709D04
Certificate serial:       F0
Authority key identifier: 6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/URekvRchP3pirdy4NJ0H22LZryo.roa
Signing time:             Wed 04 Sep 2024 09:16:39 +0000
ROA not before:           Wed 04 Sep 2024 09:16:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        2401:39e0::/32 maxlen: 64

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1243152906B6566A2B3E19CC468E46DE709D04
        Validity
            Not Before: Sep  4 09:16:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5117A4BD17213F7A62ADDCB8349D07DB62D9AF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:53:30:57:90:40:24:d5:d1:79:96:25:dd:
                    65:ff:d4:75:9a:e0:48:b2:d3:70:28:9c:23:16:f3:
                    73:8e:f3:0e:3b:a6:97:53:8f:11:7d:c1:82:2b:9b:
                    8c:74:12:c5:96:35:5b:db:e5:ac:af:57:4a:c8:c1:
                    33:ab:ba:42:16:94:d4:05:22:42:06:13:87:a0:6b:
                    bc:a6:4c:7a:a1:e1:9c:8f:75:27:6d:e8:83:3e:69:
                    4e:69:07:06:21:67:85:8a:11:e9:47:34:45:19:76:
                    52:23:cd:66:f5:28:9a:9b:5f:90:85:10:57:1a:f8:
                    f5:26:a9:b2:20:1d:dd:b7:96:6e:3c:8b:ee:1a:66:
                    98:35:ce:e2:8d:a4:95:dd:5e:de:f6:a5:85:05:82:
                    d1:05:dd:de:8e:67:47:9d:47:72:92:e6:c3:c6:07:
                    f4:6f:93:f5:57:dd:75:c4:e1:4d:9a:07:77:84:37:
                    40:53:f7:74:9b:4b:89:a6:e9:49:e1:3c:a9:c6:15:
                    9c:e1:43:f9:3d:df:e2:ab:e3:14:ce:50:7d:63:31:
                    85:75:02:33:45:18:fa:6c:54:7b:82:e1:4f:24:94:
                    bd:ec:5c:d5:e1:f4:47:33:14:29:fe:25:e2:ca:c4:
                    f2:67:a3:b9:ad:cf:15:e5:66:c1:bb:60:b5:76:b6:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:A4:BD:17:21:3F:7A:62:AD:DC:B8:34:9D:07:DB:62:D9:AF:2A
            X509v3 Authority Key Identifier:
                keyid:6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/URekvRchP3pirdy4NJ0H22LZryo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:39e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:b5:8e:74:a4:5f:54:e7:09:22:a4:a4:41:d8:50:8a:39:27:
         a2:aa:70:40:e7:d6:ed:8a:ae:df:f4:e3:91:64:d5:7e:d0:72:
         25:7e:c8:1a:c4:57:47:7e:91:b5:23:5c:ec:d7:e0:fe:2d:8d:
         f0:7f:41:fe:ac:e0:a5:82:2b:0f:1e:0d:63:02:d5:23:33:f1:
         f3:25:89:01:26:4e:cb:db:44:81:ee:3d:5e:f5:eb:79:68:5a:
         ee:d4:b0:1d:e9:ec:6d:f3:64:cf:65:7e:ef:7a:41:8d:b0:9e:
         11:11:a0:8c:2d:96:8e:ec:c4:3a:34:6e:92:ea:ed:ef:09:d9:
         6a:1e:c9:2f:97:e4:fb:a2:93:3c:53:17:a7:4a:2b:c7:c9:ef:
         e5:11:ab:44:f4:7f:55:e1:8d:7d:16:d1:00:e1:6c:66:5e:2f:
         88:c2:4b:37:a2:98:d7:18:68:07:2b:23:49:25:04:d2:8c:dc:
         b4:25:58:33:82:16:37:6e:7c:c9:54:04:a6:a5:1d:4f:3f:cf:
         a9:40:91:4c:19:b1:81:ff:62:db:c2:78:49:e1:13:7c:42:c1:
         dc:9e:29:e9:e6:c8:d4:03:93:8d:92:44:f4:a7:c9:57:51:93:
         bf:89:42:12:2e:cc:f0:a1:14:0f:b7:3d:62:8c:d6:6b:a7:a1:
         a9:07:92:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----