Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/R776xdb-jZoVwE4Jw7JWbQfy7k0.roa
File:                     R776xdb-jZoVwE4Jw7JWbQfy7k0.roa (raw, json)
Hash identifier:          Wk5LBeQ/itvik1ni9pVX22QUWAexIFCpiAXhUyfLFD4=
Subject key identifier:   47:BE:FA:C5:D6:FE:8D:9A:15:C0:4E:09:C3:B2:56:6D:07:F2:EE:4D
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1075
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/R776xdb-jZoVwE4Jw7JWbQfy7k0.roa
Signing time:             Tue 06 Feb 2024 17:55:47 +0000
ROA not before:           Tue 06 Feb 2024 17:55:47 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     64496
IP address blocks:        103.125.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 02:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4213 (0x1075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb  6 17:55:47 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=47BEFAC5D6FE8D9A15C04E09C3B2566D07F2EE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:e7:54:51:59:e4:3d:88:23:63:1d:a8:b5:
                    e8:8b:df:ff:c0:bf:47:86:63:76:95:ec:9b:37:f4:
                    ce:e7:7b:a7:c5:d7:d2:42:28:69:9b:0c:75:fc:53:
                    25:cc:ba:c0:23:ab:8d:73:28:9b:de:fb:86:b5:80:
                    5c:11:9b:cf:eb:6e:8c:04:06:bf:3f:ea:19:ab:01:
                    ef:bd:e8:b1:5d:aa:0c:cb:1d:a5:67:33:2a:a8:9b:
                    3c:ea:9b:0b:b3:26:a1:a6:6f:c3:c0:94:40:55:a9:
                    38:ec:c9:0a:00:8c:15:56:ab:c4:e0:3f:9a:38:75:
                    22:c1:5c:d2:17:6d:ca:e3:f1:9f:9b:6c:1d:21:2e:
                    bb:37:82:7a:ff:9c:ee:21:8e:a7:95:d6:00:e2:bf:
                    f8:ec:69:ef:3e:7e:ae:53:c6:d6:d7:16:0a:11:e8:
                    92:17:11:9d:43:11:d8:bf:82:d5:23:1b:08:10:b8:
                    4f:74:d6:5e:e4:cd:13:c5:e0:aa:7f:6c:0f:69:9a:
                    8b:5b:74:eb:01:57:11:84:d5:5f:b8:45:2b:5e:9c:
                    06:c4:00:f1:5a:d7:ef:9e:74:ba:5f:1e:e4:cd:cc:
                    47:d3:4d:0f:f2:c6:ac:ce:3b:e7:f5:1c:84:70:89:
                    1e:3d:f9:12:3c:90:aa:f6:fa:d5:0c:6e:31:61:66:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:FA:C5:D6:FE:8D:9A:15:C0:4E:09:C3:B2:56:6D:07:F2:EE:4D
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/R776xdb-jZoVwE4Jw7JWbQfy7k0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:cb:60:bd:23:37:be:e8:34:ed:58:37:ee:8b:c3:ba:26:31:
         51:77:4c:d7:c9:df:bb:11:5d:bc:9b:c1:ee:49:b6:7f:cc:35:
         80:f1:62:a6:df:9c:45:8e:69:94:b9:3a:ad:91:28:db:cc:45:
         4c:f1:b0:23:8d:25:8d:37:ef:b6:94:c0:cd:e8:ec:09:48:d5:
         f8:28:ea:bd:5c:5d:36:a5:4c:e7:95:05:ee:22:8b:d3:fb:e1:
         67:18:27:5b:dd:6b:72:e4:b4:4b:ca:4e:1e:11:83:9b:09:ab:
         3b:bf:da:8a:38:30:7a:f0:6e:97:04:02:18:bb:af:ce:c4:e2:
         b8:3a:fb:d8:77:16:8c:3e:66:74:f9:ff:cb:d4:fc:22:07:91:
         b4:44:5c:a9:4d:2b:97:72:f9:eb:13:c3:e0:c6:df:c1:65:1f:
         40:3b:1b:39:fd:6f:cf:05:3e:a9:06:e2:45:ee:ce:55:1f:b4:
         7f:c8:f0:b9:39:07:07:db:2a:97:73:41:a6:e4:63:d9:7c:60:
         d2:cf:51:79:9f:2b:fe:ad:60:8c:1e:ec:38:23:26:dd:57:80:
         22:46:d9:b1:77:31:27:ca:fa:45:83:79:59:a3:e4:52:db:10:
         34:5f:f8:d0:c3:e9:8f:e2:bf:f1:8d:17:bf:cd:69:3d:a3:34:
         37:25:14:68
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUx
ODEwODU5MDJGODk2Mjk0NjAyRDhCMTIxQzFFMkUyMkI1OENFNzAeFw0yNDAyMDYx
NzU1NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ3QkVGQUM1RDZGRThE
OUExNUMwNEUwOUMzQjI1NjZEMDdGMkVFNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM8+dUUVnkPYgjYx2oteiL3//Av0eGY3aV7Js39M7ne6fF19JC
KGmbDHX8UyXMusAjq41zKJve+4a1gFwRm8/rbowEBr8/6hmrAe+96LFdqgzLHaVn
MyqomzzqmwuzJqGmb8PAlEBVqTjsyQoAjBVWq8TgP5o4dSLBXNIXbcrj8Z+bbB0h
Lrs3gnr/nO4hjqeV1gDiv/jsae8+fq5TxtbXFgoR6JIXEZ1DEdi/gtUjGwgQuE90
1l7kzRPF4Kp/bA9pmotbdOsBVxGE1V+4RStenAbEAPFa1++edLpfHuTNzEfTTQ/y
xqzOO+f1HIRwiR49+RI8kKr2+tUMbjFhZhtXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUR776xdb+jZoVwE4Jw7JWbQfy7k0wHwYDVR0jBBgwFoAUbhgQhZAviWKUYC2L
EhweLiK1jOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUxZVElD
Uy9iaGdRaFpBdmlXS1VZQzJMRWh3ZUxpSzFqT2MuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2JoZ1FoWkF2aVdLVVlDMkxFaHdlTGlLMWpPYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01MWVRJQ1MvUjc3NnhkYi1qWm9Wd0U0
Snc3SldiUWZ5N2swLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd94TANBgkqhkiG9w0BAQsFAAOCAQEAyMtgvSM3vug07Vg37ovDuiYxUXdM18nf
uxFdvJvB7km2f8w1gPFipt+cRY5plLk6rZEo28xFTPGwI40ljTfvtpTAzejsCUjV
+CjqvVxdNqVM55UF7iKL0/vhZxgnW91rcuS0S8pOHhGDmwmrO7/aijgwevBulwQC
GLuvzsTiuDr72HcWjD5mdPn/y9T8IgeRtERcqU0rl3L56xPD4MbfwWUfQDsbOf1v
zwU+qQbiRe7OVR+0f8jwuTkHB9sql3NBpuRj2Xxg0s9ReZ8r/q1gjB7sOCMm3VeA
IkbZsXcxJ8r6RYN5WaPkUtsQNF/40MPpj+K/8Y0Xv81pPaM0NyUUaA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 05:57:20 2024 by rpki-client on console-ams.rpki-client.org