Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/XE_966wNinMk143Kc57l9R_WCDA.roa
File:                     XE_966wNinMk143Kc57l9R_WCDA.roa (raw, json)
Hash identifier:          zjT2aUyhqpSlizrxb/jPm/t26zo2u83t6me0dD+ebv0=
Subject key identifier:   5C:4F:FD:EB:AC:0D:8A:73:24:D7:8D:CA:73:9E:E5:F5:1F:D6:08:30
Certificate issuer:       /CN=6D1243152906B6566A2B3E19CC468E46DE709D04
Certificate serial:       FE
Authority key identifier: 6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/XE_966wNinMk143Kc57l9R_WCDA.roa
Signing time:             Sun 22 Sep 2024 18:10:29 +0000
ROA not before:           Sun 22 Sep 2024 18:10:29 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        103.127.216.0/23 maxlen: 32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 05:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1243152906B6566A2B3E19CC468E46DE709D04
        Validity
            Not Before: Sep 22 18:10:29 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5C4FFDEBAC0D8A7324D78DCA739EE5F51FD60830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:4d:d3:15:35:fd:07:25:39:50:0d:3d:17:
                    23:ba:14:df:7c:07:36:ce:6a:d6:70:64:bf:93:02:
                    d0:f6:71:b3:2a:32:f3:38:42:a4:60:e7:ff:de:fb:
                    cf:bf:60:c9:02:9b:de:94:57:2b:50:f1:47:96:57:
                    7b:90:cd:fd:74:8d:df:61:97:05:6e:ae:ac:3d:f7:
                    c2:01:7c:cc:89:e5:8d:ec:42:22:ff:b1:50:ca:9e:
                    78:bf:fc:4f:41:1a:ca:35:c7:b0:03:07:1b:07:2c:
                    0f:fd:ce:61:4c:73:3a:65:ce:91:02:d0:b1:ac:99:
                    ba:1f:4f:ca:b6:5a:32:e2:82:df:74:6d:81:67:05:
                    79:8d:06:a2:4a:75:02:f4:1a:74:7b:b8:56:6d:3b:
                    18:f5:75:69:1e:63:5f:ac:1a:4f:af:8a:1e:8d:46:
                    02:11:5f:cc:63:1c:c3:8a:23:15:ba:bf:08:ed:ad:
                    0a:f4:c9:e3:4a:ab:22:25:2b:17:20:cc:e5:0d:0c:
                    be:a6:a3:aa:3f:ec:d4:83:1a:03:22:1e:2c:b2:1f:
                    54:9c:f8:a4:b4:f1:f0:a4:b2:84:6c:18:db:13:54:
                    51:3a:b3:9a:7d:55:73:6a:06:d8:c0:52:70:3a:ef:
                    8f:1e:f5:e5:76:bc:8b:c6:ee:c6:21:a4:4e:2b:b9:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4F:FD:EB:AC:0D:8A:73:24:D7:8D:CA:73:9E:E5:F5:1F:D6:08:30
            X509v3 Authority Key Identifier:
                keyid:6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/XE_966wNinMk143Kc57l9R_WCDA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:15:b0:7f:5f:6d:71:86:a5:1c:cc:67:5f:f9:64:29:25:
         a9:b1:64:a1:d5:70:ea:9a:86:e1:2d:71:af:5e:e1:de:d1:56:
         69:ee:e7:e4:14:67:12:5f:60:58:9a:f1:a1:73:ab:04:9c:85:
         e5:14:0d:e6:20:7c:18:46:29:75:33:7a:fd:9f:ec:31:96:7e:
         3b:1b:79:fb:1c:9e:8e:a7:bd:26:5b:64:92:27:dc:65:68:aa:
         44:3d:11:ef:52:a4:05:6a:c0:6e:5b:20:1e:8e:2c:c5:47:d2:
         23:b7:a1:5f:a7:03:1b:c3:f5:db:f8:80:f5:26:e6:55:a1:e3:
         8e:4e:63:5a:fd:c3:7a:67:1e:97:bc:3b:95:20:50:0e:b3:21:
         6a:d6:93:f0:78:e3:63:01:86:16:2b:85:8a:28:ad:0b:4c:5d:
         39:ef:ef:f8:41:b7:3c:7e:cf:99:3a:aa:5d:f1:4f:50:d8:74:
         5a:19:b2:4d:ae:4d:7a:95:2e:cc:ac:be:43:70:78:74:cf:a5:
         f4:39:77:84:e5:a3:ac:a5:35:7a:cb:32:75:e7:95:8f:1d:d6:
         d9:74:30:40:2f:f0:dc:30:97:34:a9:79:70:b3:eb:66:c2:9c:
         18:da:3b:46:04:90:6a:a4:d0:3f:6f:c3:9d:c6:c8:64:c5:67:
         af:68:d6:8a
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQx
MjQzMTUyOTA2QjY1NjZBMkIzRTE5Q0M0NjhFNDZERTcwOUQwNDAeFw0yNDA5MjIx
ODEwMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDNEZGREVCQUMwRDhB
NzMyNEQ3OERDQTczOUVFNUY1MUZENjA4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnvU3TFTX9ByU5UA09FyO6FN98BzbOatZwZL+TAtD2cbMqMvM4
QqRg5//e+8+/YMkCm96UVytQ8UeWV3uQzf10jd9hlwVurqw998IBfMyJ5Y3sQiL/
sVDKnni//E9BGso1x7ADBxsHLA/9zmFMczplzpEC0LGsmbofT8q2WjLigt90bYFn
BXmNBqJKdQL0GnR7uFZtOxj1dWkeY1+sGk+vih6NRgIRX8xjHMOKIxW6vwjtrQr0
yeNKqyIlKxcgzOUNDL6mo6o/7NSDGgMiHiyyH1Sc+KS08fCksoRsGNsTVFE6s5p9
VXNqBtjAUnA6748e9eV2vIvG7sYhpE4rueO5AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUXE/966wNinMk143Kc57l9R/WCDAwHwYDVR0jBBgwFoAUbRJDFSkGtlZqKz4Z
zEaORt5wnQQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVTSEVO
R1hJTi9iUkpERlNrR3RsWnFLejRaekVhT1J0NXduUVEuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL2JSSkRGU2tHdGxacUt6NFp6RWFPUnQ1d25RUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hVU0hFTkdYSU4vWEVfOTY2d05p
bk1rMTQzS2M1N2w5Ul9XQ0RBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWd/2DANBgkqhkiG9w0BAQsFAAOCAQEAdE0VsH9fbXGGpRzMZ1/5ZCkl
qbFkodVw6pqG4S1xr17h3tFWae7n5BRnEl9gWJrxoXOrBJyF5RQN5iB8GEYpdTN6
/Z/sMZZ+Oxt5+xyejqe9JltkkifcZWiqRD0R71KkBWrAblsgHo4sxUfSI7ehX6cD
G8P12/iA9SbmVaHjjk5jWv3Demcel7w7lSBQDrMhataT8HjjYwGGFiuFiiitC0xd
Oe/v+EG3PH7PmTqqXfFPUNh0WhmyTa5NepUuzKy+Q3B4dM+l9Dl3hOWjrKU1essy
deeVjx3W2XQwQC/w3DCXNKl5cLPrZsKcGNo7RgSQaqTQP2/DncbIZMVnr2jWig==
-----END CERTIFICATE-----