Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/blXQXHgUfYv2bJzc0qN3OLPkP4c.roa
File:                     blXQXHgUfYv2bJzc0qN3OLPkP4c.roa (raw, json)
Hash identifier:          tBayD8051NjYjF628XhYAwgRF+xYKKEegmkWLZeRfAg=
Subject key identifier:   6E:55:D0:5C:78:14:7D:8B:F6:6C:9C:DC:D2:A3:77:38:B3:E4:3F:87
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1079
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/blXQXHgUfYv2bJzc0qN3OLPkP4c.roa
Signing time:             Tue 06 Feb 2024 17:56:50 +0000
ROA not before:           Tue 06 Feb 2024 17:56:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     14618
IP address blocks:        103.125.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 02:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4217 (0x1079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb  6 17:56:50 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6E55D05C78147D8BF66C9CDCD2A37738B3E43F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:8d:da:76:31:67:92:f4:2e:98:67:82:e7:
                    7a:03:79:a8:78:89:64:ee:63:bd:95:a7:a3:e9:41:
                    b4:4d:57:0f:61:2b:9b:64:2b:a7:e6:68:b6:46:af:
                    a5:e7:34:63:d8:85:0d:67:22:a7:4a:43:59:c3:46:
                    15:b0:73:e3:a3:c6:28:78:87:27:23:35:be:b5:45:
                    0e:21:2b:9c:97:6a:0b:3b:12:c7:20:91:9b:73:a4:
                    f7:24:a4:db:84:a5:ce:02:3b:fb:18:d4:96:d7:e9:
                    e0:dc:d9:c5:58:4d:3c:6f:b8:bf:c2:e6:db:56:7c:
                    25:ba:04:fc:5d:2f:01:b1:b2:f0:21:5d:e2:26:0f:
                    61:ed:99:42:80:e0:03:39:ad:e6:2b:a1:dd:5a:5e:
                    12:9d:c7:6d:7f:67:84:12:ed:8f:ea:7c:32:16:16:
                    da:88:ac:a3:a2:4d:ef:c0:e0:5a:e2:b7:43:e4:0c:
                    35:43:65:f8:60:cf:44:fb:2f:15:5e:81:86:ff:f2:
                    e7:54:71:93:b3:13:0f:22:99:78:a6:8a:23:33:b2:
                    f2:ee:5c:0a:62:e5:b7:29:be:3d:51:5b:ff:47:4f:
                    cc:cd:ac:5d:ad:81:58:a8:94:18:31:94:3e:12:cb:
                    09:c7:4d:61:d5:9f:bb:59:7b:aa:28:b6:b0:56:21:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:55:D0:5C:78:14:7D:8B:F6:6C:9C:DC:D2:A3:77:38:B3:E4:3F:87
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/blXQXHgUfYv2bJzc0qN3OLPkP4c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:ef:35:77:fd:a2:25:80:70:3a:e3:1f:e3:f2:7c:1d:1a:
         1f:e7:8c:03:c9:6e:28:2f:57:7d:49:70:c8:8c:59:02:ac:7f:
         ed:a3:40:02:54:ee:0e:ee:9b:97:43:40:d1:42:b4:01:51:8e:
         55:16:5f:fb:85:22:90:ad:a8:f8:80:49:40:d6:bc:e8:b4:fa:
         84:3e:43:05:56:68:06:d4:1c:9c:df:ea:40:88:d1:86:f4:6e:
         5a:e8:25:62:67:96:36:74:73:71:4d:55:03:51:df:b5:34:e0:
         68:76:93:9d:2d:84:4a:12:67:b8:0d:9e:63:5c:18:62:bf:68:
         e0:62:79:02:2a:17:b0:a0:9f:78:89:16:a6:04:f0:b5:b2:af:
         d3:74:16:f8:98:20:58:71:77:06:a9:c6:d1:f0:69:91:45:e1:
         2f:aa:3f:b4:be:b6:0f:5c:04:75:0b:8c:a6:74:98:a8:b7:2c:
         b1:ff:85:f7:d2:65:9e:a0:e2:bc:45:9c:82:99:88:9b:f7:c6:
         28:c6:f3:98:b0:8c:df:d9:48:07:68:50:3b:f0:d1:93:5f:23:
         eb:96:1c:25:57:82:39:5b:2b:49:12:4c:00:d3:ea:38:10:a9:
         91:e4:e0:9b:60:5b:31:a2:ad:57:a3:22:80:90:b9:7f:43:6d:
         c5:e8:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org