Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/CMUQInVylZByYFR_9o6gLwN3zj8.roa
File:                     CMUQInVylZByYFR_9o6gLwN3zj8.roa (raw, json)
Hash identifier:          vIE5sTuEKYhDdcOGyPgJEAZuOLiSEGAcaapryGgoQgY=
Subject key identifier:   08:C5:10:22:75:72:95:90:72:60:54:7F:F6:8E:A0:2F:03:77:CE:3F
Certificate issuer:       /CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
Certificate serial:       0100
Authority key identifier: 55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/CMUQInVylZByYFR_9o6gLwN3zj8.roa
Signing time:             Sun 22 Sep 2024 18:04:02 +0000
ROA not before:           Sun 22 Sep 2024 18:04:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        103.99.138.0/23 maxlen: 32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 05:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
        Validity
            Not Before: Sep 22 18:04:02 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=08C51022757295907260547FF68EA02F0377CE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:ab:52:8d:af:0a:ef:60:f3:f0:3c:1c:8c:
                    cd:5d:f1:1c:c5:30:8b:75:ea:87:2c:e8:75:8b:e4:
                    e3:b8:73:56:5a:d8:2a:a2:f0:19:52:ec:83:48:0d:
                    b2:33:bc:63:c8:29:ad:3b:b7:a9:74:56:df:cc:84:
                    bf:76:e8:5f:da:2b:1b:8f:a2:9e:fc:53:62:4e:3a:
                    cb:4f:67:f7:4a:93:6b:c7:4c:b2:84:ff:76:a0:d7:
                    3d:17:2e:17:20:f6:ea:2c:3f:5f:f3:8a:a2:66:46:
                    5d:20:2d:c3:b5:14:64:7e:99:20:d6:1a:14:42:32:
                    cc:27:66:b3:fc:30:54:31:59:d7:e9:d4:03:57:8d:
                    ec:09:34:e1:54:21:1e:81:d7:78:ee:70:0e:6f:fc:
                    5b:72:a0:ae:cb:da:54:c7:aa:ec:21:ec:a6:73:80:
                    0e:cb:e8:71:f4:55:1f:a6:a3:32:a8:be:00:7e:c8:
                    a9:3c:95:87:7d:2b:3a:5c:23:9c:99:af:a1:84:88:
                    4a:9e:e3:03:71:88:1b:f2:a8:5a:a9:d8:66:5c:e5:
                    06:73:07:9b:a4:81:c5:cd:2d:9b:b0:ae:c9:b6:50:
                    5f:fd:91:e9:05:ed:ce:cd:5e:63:e5:62:cb:a0:6e:
                    02:7d:98:14:b6:cc:24:e3:b1:b1:cb:38:b6:7e:d1:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C5:10:22:75:72:95:90:72:60:54:7F:F6:8E:A0:2F:03:77:CE:3F
            X509v3 Authority Key Identifier:
                keyid:55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/CMUQInVylZByYFR_9o6gLwN3zj8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:ee:8a:55:a7:0c:ce:46:a0:28:10:b3:a1:26:70:70:d6:
         75:3e:65:fd:40:bb:a6:fd:71:d5:0e:db:61:99:fd:74:62:9e:
         2e:ea:fc:b6:df:85:c9:52:86:8f:d8:6c:bf:c3:93:71:78:2b:
         c1:c9:ed:3d:dd:be:ce:d8:d8:fc:7b:4c:6f:34:93:72:bd:d7:
         4a:9f:47:27:bf:71:90:de:9b:78:bd:3d:2e:4c:5b:4f:da:ac:
         f8:b7:af:85:b2:5c:e2:42:4a:b0:4c:d7:47:14:c2:4f:93:bb:
         9e:24:1c:5c:9f:9f:75:37:5f:3d:01:df:be:fc:d5:e8:05:9a:
         fd:48:b5:2a:e1:e2:75:76:4d:c6:84:49:b2:64:f7:6d:c2:0a:
         d9:18:f3:9d:bc:e4:5f:3e:03:87:f3:70:5a:f7:ab:7a:31:98:
         18:28:a7:3a:3a:35:ae:ce:93:d1:2c:db:c3:e3:54:6c:db:c1:
         93:43:85:f5:d6:e3:10:30:fe:3e:37:c1:22:f4:ba:11:0f:ef:
         65:12:e4:40:32:33:18:af:05:34:51:26:ea:79:d2:db:02:c3:
         f5:b4:d9:87:a6:57:03:47:76:4f:60:3d:74:db:d6:85:24:7b:
         98:4b:66:a5:a0:9d:26:15:bb:1d:d3:8a:4f:e4:6e:02:38:fe:
         92:79:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 06:26:21 2024 by rpki-client on console-fra.rpki-client.org