Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/kcYhCGPpHWljuc0fVGXHvYyIrAY.roa
File:                     kcYhCGPpHWljuc0fVGXHvYyIrAY.roa (raw, json)
Hash identifier:          YYn9ziRI2MsWMmKZPMbd3i+m1itvx45R0kYnmwtTcaM=
Subject key identifier:   91:C6:21:08:63:E9:1D:69:63:B9:CD:1F:54:65:C7:BD:8C:88:AC:06
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       1033
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/kcYhCGPpHWljuc0fVGXHvYyIrAY.roa
Signing time:             Fri 01 Sep 2023 09:19:47 +0000
ROA not before:           Fri 01 Sep 2023 09:19:47 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     48024
IP address blocks:        2404:2a40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 12:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4147 (0x1033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Sep  1 09:19:47 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=91C6210863E91D6963B9CD1F5465C7BD8C88AC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:b8:82:29:d7:d0:64:22:31:73:20:ce:bf:
                    ff:ca:f4:b3:07:d4:18:ca:35:69:5b:a5:94:aa:4e:
                    14:ed:e5:8c:18:5b:5c:16:97:6e:86:79:16:8e:b8:
                    51:42:dd:bc:68:9a:52:79:5e:32:a8:76:79:1f:ea:
                    7f:81:54:3f:6a:5d:79:92:f1:65:8b:72:8e:33:76:
                    ca:f6:b4:7d:21:91:08:9b:1f:63:0c:6a:6c:a0:c2:
                    f0:49:fd:b2:43:71:06:26:28:b8:8e:f3:b6:35:67:
                    c2:6e:4d:a2:48:cc:9e:86:76:bb:1d:1b:23:d0:f0:
                    90:8d:ba:16:a9:8c:97:3b:70:6d:16:8a:7a:aa:ba:
                    23:4a:0b:8d:f0:16:4b:26:8e:f5:58:b0:36:a0:a8:
                    cb:5b:74:41:96:a1:d9:c0:97:bc:57:de:1e:31:8c:
                    ca:05:d3:15:1e:52:d8:df:2e:c4:0c:22:04:9b:72:
                    70:b5:60:b1:c8:27:4a:92:9c:af:ef:3e:e3:79:e9:
                    ce:8c:bd:e7:93:0c:de:85:0f:39:41:d4:73:2b:58:
                    60:3f:74:40:e1:b3:a1:52:dd:45:8a:e0:08:be:67:
                    58:9e:83:02:0d:25:7e:7a:b3:76:90:cf:b8:33:31:
                    c5:7f:58:a9:e7:bf:f8:9a:49:c0:e4:38:6b:ac:5a:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:21:08:63:E9:1D:69:63:B9:CD:1F:54:65:C7:BD:8C:88:AC:06
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/kcYhCGPpHWljuc0fVGXHvYyIrAY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:7b:f4:23:76:2d:02:53:ab:b0:73:92:8c:15:66:71:73:
         d8:5e:d4:2f:7e:1b:8a:58:d7:36:4d:58:b4:76:8a:2f:ee:b1:
         5b:07:9b:a5:40:b7:34:73:59:a7:ca:0b:6b:43:7d:cd:6d:d4:
         1a:a4:35:3d:c7:ed:26:70:82:90:0e:a7:6d:c5:ce:ba:12:4f:
         86:65:db:a3:ff:d5:8b:24:5f:20:ef:0e:f4:7a:0b:e9:9a:db:
         ab:70:0a:5d:4b:6e:c1:32:e4:aa:56:97:de:9f:46:0f:63:c9:
         e8:cd:34:12:46:b3:74:ce:24:a1:60:b7:f9:4d:70:69:46:3d:
         94:c8:bf:e9:20:e7:ff:5a:1a:2f:ad:fe:34:63:c6:e9:38:eb:
         da:26:f2:05:3e:29:c1:5b:73:cb:e4:47:ee:b4:74:ac:f3:74:
         e3:ef:76:d3:30:be:6d:c6:e0:09:dd:63:8c:bf:8e:0e:7e:4a:
         7f:70:05:3c:22:d5:bc:af:f3:b5:88:fb:08:ba:bf:d5:15:63:
         84:33:71:f2:75:be:b2:aa:e2:1f:76:0e:8d:7f:a0:70:71:f0:
         40:65:67:b2:88:d8:43:89:58:66:55:33:4d:f7:8a:59:bf:f0:
         cf:c7:6a:46:9e:58:ed:36:35:94:59:26:bc:3a:2e:73:e3:1e:
         a2:f9:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org