Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/3wFaqu5tEcMlF483ciBIFV0Sj9w.roa
File:                     3wFaqu5tEcMlF483ciBIFV0Sj9w.roa (raw, json)
Hash identifier:          0gFDE4d9+xp+lHJBuL4avFpnccPrhoTTPXxe/B/I2QQ=
Subject key identifier:   DF:01:5A:AA:EE:6D:11:C3:25:17:8F:37:72:20:48:15:5D:12:8F:DC
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1071
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/3wFaqu5tEcMlF483ciBIFV0Sj9w.roa
Signing time:             Tue 06 Feb 2024 09:41:09 +0000
ROA not before:           Tue 06 Feb 2024 09:41:09 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     14618
IP address blocks:        103.125.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 02:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4209 (0x1071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb  6 09:41:09 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DF015AAAEE6D11C325178F37722048155D128FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:5d:2b:9d:81:57:e7:0c:74:7b:1d:51:c6:
                    90:c9:68:99:f5:0a:1b:f6:39:d8:02:74:bf:73:06:
                    68:71:e1:c9:54:e5:b7:1b:9b:20:2f:4e:ec:91:88:
                    3b:61:28:57:a9:46:6c:6d:c5:26:7b:f4:49:cb:f9:
                    74:da:1f:16:33:f5:6b:31:1f:c0:af:4c:48:d4:07:
                    d4:a3:9f:20:b4:ca:0e:f2:a2:77:65:2e:22:c0:6f:
                    bf:09:4d:9d:71:46:ee:13:66:af:0b:f3:8c:19:8b:
                    e8:ba:b9:59:33:7f:87:b5:06:1c:a6:ab:08:62:7b:
                    36:4f:c4:ce:da:c3:04:63:d6:0a:23:18:12:07:25:
                    1f:f8:69:1e:e3:01:5c:d4:cc:34:f1:6e:08:db:19:
                    21:f2:f3:82:3b:23:73:55:14:80:95:fe:80:d9:b4:
                    9e:09:6a:7c:c7:4d:13:47:d8:25:7a:d3:6c:07:0a:
                    e7:b8:fc:95:59:40:34:07:df:f3:87:b3:19:25:d7:
                    48:88:83:e3:f1:68:23:39:7a:d6:31:76:5a:b1:4d:
                    c0:0a:59:58:fd:47:e9:71:c7:8b:64:e3:ba:51:aa:
                    ee:7e:82:46:88:ee:f4:65:3a:ba:bb:31:67:13:96:
                    20:a4:fc:e9:8b:c2:51:df:2b:73:89:4b:dd:c3:1e:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:5A:AA:EE:6D:11:C3:25:17:8F:37:72:20:48:15:5D:12:8F:DC
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/3wFaqu5tEcMlF483ciBIFV0Sj9w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:5c:e9:cd:e2:e9:28:8f:2e:14:cb:71:de:e2:8d:d3:44:
         59:f3:de:12:da:c1:c0:11:3e:15:ad:93:b8:95:92:01:32:01:
         be:55:76:ab:59:08:a8:60:fb:91:a1:fb:48:d4:54:4c:68:90:
         f2:67:34:8a:4e:ce:fd:0b:05:4e:8f:15:15:48:77:4d:1a:4b:
         a6:76:04:ec:d5:a3:f6:2a:ae:59:8c:6c:fc:80:7f:96:17:4c:
         a1:4b:57:38:d8:c8:35:cf:38:21:a1:62:4c:1b:f7:49:ea:24:
         ba:2d:06:b6:4d:bc:4a:1c:59:e7:c1:81:f3:5f:ed:d8:17:57:
         b5:21:9a:78:ac:4b:e4:d3:9b:d5:46:bc:d6:8d:ae:d9:07:60:
         48:78:db:47:a6:fa:2e:f9:cf:7b:65:e5:30:8a:72:12:68:2a:
         3e:4c:d3:0b:b0:60:83:24:60:f6:99:18:a7:b7:8c:4c:ea:97:
         13:e4:b4:fb:8d:0d:ed:46:d6:a5:4e:e3:77:f7:5b:52:a2:80:
         5f:ab:66:d3:de:11:07:5c:e3:6a:09:38:47:d2:2a:63:09:9e:
         1b:75:d9:97:7a:01:d1:37:ef:d2:9e:24:ec:6f:78:b6:51:e3:
         7d:87:84:58:c0:b6:db:ca:b2:bf:b9:cb:ab:57:15:6b:e4:75:
         36:ef:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org