Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/BpWKvgJ_E-cvsuKxCkpBd_yP7t0.roa
File:                     BpWKvgJ_E-cvsuKxCkpBd_yP7t0.roa (raw, json)
Hash identifier:          vQ0mPhX+I4rKxtpZO/QC55IV3HX+pmuixtg4FH6F1nY=
Subject key identifier:   06:95:8A:BE:02:7F:13:E7:2F:B2:E2:B1:0A:4A:41:77:FC:8F:EE:DD
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1001
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/BpWKvgJ_E-cvsuKxCkpBd_yP7t0.roa
Signing time:             Fri 01 Sep 2023 09:20:43 +0000
ROA not before:           Fri 01 Sep 2023 09:20:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     14618
IP address blocks:        103.125.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 02:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4097 (0x1001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Sep  1 09:20:43 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=06958ABE027F13E72FB2E2B10A4A4177FC8FEEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:4e:e1:6d:7e:a7:ef:f7:4c:c0:11:c1:28:
                    9f:cd:30:8b:a1:dc:6c:85:85:86:07:29:91:b3:e3:
                    20:b2:7d:1e:5f:6e:d6:fc:73:60:f4:9c:52:6b:cd:
                    1b:7d:4c:28:e5:f1:4c:f8:d5:04:00:3d:bd:04:79:
                    d2:a5:ad:b9:18:c8:09:cd:4b:f0:61:4a:11:d7:33:
                    66:80:35:9b:a1:9d:fb:06:a6:48:1e:a3:e5:2c:ff:
                    eb:d8:b1:c2:45:35:c6:92:e2:cd:68:c5:56:8a:f4:
                    a1:68:08:69:18:3c:96:8b:e0:68:c5:24:6b:70:02:
                    d2:50:64:1e:3c:da:7c:d8:9c:ee:6f:0c:95:d5:ea:
                    53:3c:c5:74:c5:7a:ec:06:e7:c4:86:85:66:d7:3b:
                    ed:0f:01:73:32:8a:9f:07:65:57:95:67:4f:53:99:
                    18:2b:62:24:38:3f:1e:d2:9d:cf:ce:b9:10:c2:05:
                    ae:31:e0:f2:88:f8:09:53:20:3b:88:1c:43:c8:9b:
                    5d:06:42:20:de:89:a2:89:1a:f4:a9:8f:b9:2d:bd:
                    3a:4f:58:53:6c:35:1d:98:24:c5:03:b8:b5:87:17:
                    c9:95:f9:a8:13:a3:69:15:79:94:78:69:92:84:ba:
                    c1:9b:a3:46:ee:01:64:58:47:27:dd:d8:41:3d:25:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:8A:BE:02:7F:13:E7:2F:B2:E2:B1:0A:4A:41:77:FC:8F:EE:DD
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/BpWKvgJ_E-cvsuKxCkpBd_yP7t0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:27:1e:61:e2:c8:cd:05:78:c7:d4:4f:15:0a:91:a4:60:96:
         52:6d:2f:73:63:dd:44:13:cb:67:3e:71:87:96:dd:1d:c8:fb:
         5b:e7:65:58:4f:3a:2e:d1:e2:12:6f:5b:b5:eb:85:93:8a:dd:
         17:ff:e5:24:6b:1e:79:ce:42:f4:19:b9:fd:44:77:cb:e3:87:
         9a:cc:d6:c4:5d:42:b2:b0:6e:47:b9:2b:14:d0:88:94:53:91:
         e5:fd:af:0d:60:d3:68:a4:c6:42:4f:dc:3b:63:10:2c:34:53:
         c8:57:1c:19:e4:cf:4c:f6:33:6f:0d:27:61:12:65:3c:b1:fd:
         28:36:cf:58:e5:49:a7:47:b6:46:78:19:a2:7b:dc:cc:6f:22:
         61:04:b5:99:49:e9:42:78:10:9b:c9:34:48:5f:d2:54:ae:c4:
         86:00:86:09:50:b1:ea:a2:7b:73:39:57:4d:ac:2b:47:c3:9c:
         a6:b4:95:5e:c3:4a:91:42:5a:ab:e2:77:e1:6e:6f:7d:18:20:
         36:9a:79:95:d2:60:e4:a4:7b:c8:cc:7d:ed:8b:51:f2:b5:87:
         a6:9e:72:56:a7:7c:8c:e1:6f:55:6e:81:e7:82:06:5e:1a:ac:
         8a:7e:08:4a:f6:ac:2c:21:c1:c2:b0:a0:c0:5c:6a:ef:07:63:
         84:88:26:da
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUx
ODEwODU5MDJGODk2Mjk0NjAyRDhCMTIxQzFFMkUyMkI1OENFNzAeFw0yMzA5MDEw
OTIwNDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2OTU4QUJFMDI3RjEz
RTcyRkIyRTJCMTBBNEE0MTc3RkM4RkVFREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg4U7hbX6n7/dMwBHBKJ/NMIuh3GyFhYYHKZGz4yCyfR5fbtb8
c2D0nFJrzRt9TCjl8Uz41QQAPb0EedKlrbkYyAnNS/BhShHXM2aANZuhnfsGpkge
o+Us/+vYscJFNcaS4s1oxVaK9KFoCGkYPJaL4GjFJGtwAtJQZB482nzYnO5vDJXV
6lM8xXTFeuwG58SGhWbXO+0PAXMyip8HZVeVZ09TmRgrYiQ4Px7Snc/OuRDCBa4x
4PKI+AlTIDuIHEPIm10GQiDeiaKJGvSpj7ktvTpPWFNsNR2YJMUDuLWHF8mV+agT
o2kVeZR4aZKEusGbo0buAWRYRyfd2EE9JYDtAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUBpWKvgJ/E+cvsuKxCkpBd/yP7t0wHwYDVR0jBBgwFoAUbhgQhZAviWKUYC2L
EhweLiK1jOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUxZVElD
Uy9iaGdRaFpBdmlXS1VZQzJMRWh3ZUxpSzFqT2MuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2JoZ1FoWkF2aVdLVVlDMkxFaHdlTGlLMWpPYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01MWVRJQ1MvQnBXS3ZnSl9FLWN2c3VL
eENrcEJkX3lQN3QwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd94zANBgkqhkiG9w0BAQsFAAOCAQEAYyceYeLIzQV4x9RPFQqRpGCWUm0vc2Pd
RBPLZz5xh5bdHcj7W+dlWE86LtHiEm9bteuFk4rdF//lJGseec5C9Bm5/UR3y+OH
mszWxF1CsrBuR7krFNCIlFOR5f2vDWDTaKTGQk/cO2MQLDRTyFccGeTPTPYzbw0n
YRJlPLH9KDbPWOVJp0e2RngZonvczG8iYQS1mUnpQngQm8k0SF/SVK7EhgCGCVCx
6qJ7czlXTawrR8OcprSVXsNKkUJaq+J34W5vfRggNpp5ldJg5KR7yMx97YtR8rWH
pp5yVqd8jOFvVW6B54IGXhqsin4ISvasLCHBwrCgwFxq7wdjhIgm2g==
-----END CERTIFICATE-----
Generated at Tue Feb 27 05:57:20 2024 by rpki-client on console-ams.rpki-client.org