Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/JVkA3Gcp-Q741BtXA-HPQW_iSC4.roa
File:                     JVkA3Gcp-Q741BtXA-HPQW_iSC4.roa (raw, json)
Hash identifier:          l5qzbYndeHW3MKuQIgl2FS5ECAAw6oLq3N6MMdTlGnc=
Subject key identifier:   25:59:00:DC:67:29:F9:0E:F8:D4:1B:57:03:E1:CF:41:6F:E2:48:2E
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1004
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/JVkA3Gcp-Q741BtXA-HPQW_iSC4.roa
Signing time:             Fri 01 Sep 2023 09:20:44 +0000
ROA not before:           Fri 01 Sep 2023 09:20:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     64496
IP address blocks:        103.125.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 02:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4100 (0x1004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Sep  1 09:20:44 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=255900DC6729F90EF8D41B5703E1CF416FE2482E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:57:cf:74:72:0a:aa:55:a4:c9:08:bc:28:
                    e7:e7:f9:65:34:0d:df:4d:58:c9:5b:ee:25:ad:a4:
                    c6:ff:63:ad:53:c2:03:25:36:a4:72:4d:49:73:ee:
                    ca:74:77:bf:56:74:1e:bf:3e:a0:55:41:46:42:96:
                    73:40:c1:17:fb:38:24:3a:d5:15:af:ce:5b:99:ca:
                    e2:82:c8:3c:8b:f4:c5:78:20:79:00:bf:04:23:51:
                    23:35:2d:91:9c:89:44:f6:a4:47:c6:b1:b4:bd:39:
                    04:2b:c7:cf:69:4a:5e:22:3d:88:1d:97:10:5f:25:
                    54:15:82:c2:72:e6:4d:be:44:4c:31:4c:c0:22:4b:
                    b5:0e:f0:b2:be:8e:e2:41:14:5f:a5:fc:79:63:a2:
                    c3:b5:3b:73:9b:ba:30:97:fe:c8:28:98:46:65:7f:
                    86:95:ae:c4:74:c0:32:4f:73:8e:6a:2e:5d:2f:dd:
                    88:01:f9:74:08:22:73:8e:11:d1:38:67:e4:74:45:
                    a5:2e:2d:df:6d:54:66:a3:d3:15:46:a9:b9:a7:d2:
                    ec:52:a5:ce:ef:55:ee:63:b4:85:dc:70:a0:7d:8f:
                    f6:3a:b5:66:08:f8:df:cc:3a:8c:ca:20:66:17:f0:
                    e6:c4:c5:7c:8e:8f:73:a1:6e:e5:4a:34:40:f1:18:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:59:00:DC:67:29:F9:0E:F8:D4:1B:57:03:E1:CF:41:6F:E2:48:2E
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/JVkA3Gcp-Q741BtXA-HPQW_iSC4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:ef:55:26:b1:13:48:ba:5b:91:6a:cc:30:0c:ee:9c:5e:
         c7:28:3a:f3:40:ca:cb:3e:62:43:6b:76:6e:77:c1:d6:3b:16:
         6e:1a:cd:b4:4e:36:6b:a0:7a:2f:39:57:88:d1:f4:66:e5:63:
         2e:65:89:10:c1:c6:fa:c9:28:ee:42:9c:2f:d0:37:71:80:78:
         a6:88:f8:9d:5d:dd:1b:a2:06:74:a8:95:20:c5:77:1e:57:34:
         2d:21:58:a8:21:0e:28:c1:a2:e9:1a:64:37:46:df:d3:28:75:
         21:f2:c4:23:df:0e:77:69:ec:a8:4a:3e:45:21:e9:13:02:40:
         eb:e1:61:1a:c8:50:7d:e5:b8:f2:ab:6b:d9:b7:80:4e:fd:61:
         37:cf:20:8d:11:a1:b9:c4:df:ef:e3:3c:ff:7b:86:6e:7a:73:
         b2:96:d4:35:d6:a3:77:9b:4e:28:16:ca:5d:f9:87:ed:dd:b9:
         64:2a:a5:41:b0:1a:58:90:24:d0:52:de:df:9a:e5:3e:69:25:
         55:5d:fa:ac:43:5f:13:a3:3d:e2:1b:da:f7:a4:f1:b8:ef:46:
         f3:0a:d2:ce:65:50:e1:31:8e:32:62:f3:fd:0c:0e:5d:c7:ec:
         86:2a:e8:52:ad:94:10:34:e5:5d:dd:f7:72:81:9f:bf:79:d9:
         8d:f6:62:62
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUx
ODEwODU5MDJGODk2Mjk0NjAyRDhCMTIxQzFFMkUyMkI1OENFNzAeFw0yMzA5MDEw
OTIwNDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI1NTkwMERDNjcyOUY5
MEVGOEQ0MUI1NzAzRTFDRjQxNkZFMjQ4MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8C1fPdHIKqlWkyQi8KOfn+WU0Dd9NWMlb7iWtpMb/Y61TwgMl
NqRyTUlz7sp0d79WdB6/PqBVQUZClnNAwRf7OCQ61RWvzluZyuKCyDyL9MV4IHkA
vwQjUSM1LZGciUT2pEfGsbS9OQQrx89pSl4iPYgdlxBfJVQVgsJy5k2+REwxTMAi
S7UO8LK+juJBFF+l/HljosO1O3ObujCX/sgomEZlf4aVrsR0wDJPc45qLl0v3YgB
+XQIInOOEdE4Z+R0RaUuLd9tVGaj0xVGqbmn0uxSpc7vVe5jtIXccKB9j/Y6tWYI
+N/MOozKIGYX8ObExXyOj3OhbuVKNEDxGEc3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUJVkA3Gcp+Q741BtXA+HPQW/iSC4wHwYDVR0jBBgwFoAUbhgQhZAviWKUYC2L
EhweLiK1jOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUxZVElD
Uy9iaGdRaFpBdmlXS1VZQzJMRWh3ZUxpSzFqT2MuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2JoZ1FoWkF2aVdLVVlDMkxFaHdlTGlLMWpPYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01MWVRJQ1MvSlZrQTNHY3AtUTc0MUJ0
WEEtSFBRV19pU0M0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd94zANBgkqhkiG9w0BAQsFAAOCAQEALsDvVSaxE0i6W5FqzDAM7pxexyg680DK
yz5iQ2t2bnfB1jsWbhrNtE42a6B6LzlXiNH0ZuVjLmWJEMHG+sko7kKcL9A3cYB4
poj4nV3dG6IGdKiVIMV3Hlc0LSFYqCEOKMGi6RpkN0bf0yh1IfLEI98Od2nsqEo+
RSHpEwJA6+FhGshQfeW48qtr2beATv1hN88gjRGhucTf7+M8/3uGbnpzspbUNdaj
d5tOKBbKXfmH7d25ZCqlQbAaWJAk0FLe35rlPmklVV36rENfE6M94hva96TxuO9G
8wrSzmVQ4TGOMmLz/QwOXcfshiroUq2UEDTlXd33coGfv3nZjfZiYg==
-----END CERTIFICATE-----
Generated at Tue Feb 27 05:57:20 2024 by rpki-client on console-ams.rpki-client.org