Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/26hI26WRLwfhWm_TkN2ELrRFNnU.roa
File:                     26hI26WRLwfhWm_TkN2ELrRFNnU.roa (raw, json)
Hash identifier:          DBGdxTkRGEO9PVBBg42gBj00JOUajXEt4KEyNDdqA1U=
Subject key identifier:   DB:A8:48:DB:A5:91:2F:07:E1:5A:6F:D3:90:DD:84:2E:B4:45:36:75
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/26hI26WRLwfhWm_TkN2ELrRFNnU.roa
Signing time:             Thu 15 Sep 2022 02:43:13 +0000
ROA not before:           Thu 15 Sep 2022 02:43:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131627
IP address blocks:        45.64.228.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DBA848DBA5912F07E15A6FD390DD842EB4453675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:11:31:41:5c:06:1b:b8:6f:97:d2:70:2b:
                    92:13:e6:5e:86:ee:c5:3f:af:dc:3b:a9:b4:fb:9f:
                    3f:0d:dc:bc:6c:48:00:db:97:20:f0:df:55:14:84:
                    26:72:1f:06:86:8b:3e:89:02:04:00:63:f2:93:61:
                    99:c5:27:77:87:7d:0f:fa:8b:af:73:67:0c:e6:47:
                    f0:f6:78:df:3d:df:21:09:93:ca:54:5e:f7:92:f3:
                    6b:ec:f1:5c:cd:fc:e7:2a:e7:64:68:22:f2:4a:0f:
                    62:00:ae:66:e6:00:39:16:65:84:7d:c1:1c:13:9a:
                    50:a0:84:b6:7b:99:b8:19:57:50:2a:f7:08:58:32:
                    09:87:72:0f:c5:c1:3d:5d:1d:c8:32:fc:85:03:b6:
                    ac:90:f5:d8:85:17:55:4f:be:60:7f:42:df:a8:2e:
                    92:86:e7:fa:d8:52:0d:33:74:e6:c9:2c:e8:9c:5a:
                    8c:2d:46:83:a3:f0:46:22:8d:01:fd:5c:5e:b4:3b:
                    3f:88:71:b4:d8:e3:ab:58:0d:76:26:ef:05:47:0b:
                    22:45:5d:ac:2d:aa:f3:59:07:ca:ba:09:78:dd:70:
                    5a:d9:db:c5:1a:a4:cf:c5:3b:20:b9:6b:1a:c2:9d:
                    67:7b:40:b3:03:5a:d0:de:86:1f:6c:4c:7d:72:fe:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A8:48:DB:A5:91:2F:07:E1:5A:6F:D3:90:DD:84:2E:B4:45:36:75
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/26hI26WRLwfhWm_TkN2ELrRFNnU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:08:28:03:57:b5:63:66:5d:da:7a:43:87:3e:ff:ac:96:45:
         dd:4b:a8:d2:2b:7a:0a:ce:b4:ff:6c:c3:0f:1f:d0:54:bf:9c:
         0a:0c:f1:06:83:76:a0:e9:c0:7a:06:e3:63:f6:1e:40:d5:e3:
         1b:a3:6f:b1:da:52:49:23:8f:b6:0a:13:8b:a4:7b:a4:08:78:
         46:df:84:af:3c:63:90:cf:10:73:b8:92:97:37:e4:d4:c4:e6:
         a8:df:4b:54:25:bd:c4:42:51:6a:36:b8:92:a3:fd:37:34:48:
         99:37:fe:b3:c6:82:8d:a0:2a:82:2d:b3:b1:99:00:e2:06:4e:
         29:54:be:b5:29:73:4f:14:24:a0:28:43:b6:b3:9e:c4:31:d1:
         2b:61:3c:bc:2e:a2:81:b1:4d:ef:f7:33:65:0a:6b:0d:ee:d7:
         e4:f1:e7:ba:f4:5c:e7:68:cb:df:cb:ed:53:93:ed:4d:49:dd:
         57:76:4b:cb:aa:7d:de:6a:a0:19:7e:8a:ae:58:5e:bf:60:74:
         7d:92:b5:a3:97:c7:ed:cc:68:b4:57:18:a0:0a:38:b6:ba:ab:
         3f:2d:7d:cb:17:ab:bc:e8:fa:5d:9d:bc:5d:dd:54:47:85:b6:
         2b:59:45:10:25:00:f4:0c:4d:ce:e8:fb:f2:16:08:09:30:b8:
         20:64:0a:d0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERCQTg0OERCQTU5MTJG
MDdFMTVBNkZEMzkwREQ4NDJFQjQ0NTM2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCidhExQVwGG7hvl9JwK5IT5l6G7sU/r9w7qbT7nz8N3LxsSADb
lyDw31UUhCZyHwaGiz6JAgQAY/KTYZnFJ3eHfQ/6i69zZwzmR/D2eN893yEJk8pU
XveS82vs8VzN/Ocq52RoIvJKD2IArmbmADkWZYR9wRwTmlCghLZ7mbgZV1Aq9whY
MgmHcg/FwT1dHcgy/IUDtqyQ9diFF1VPvmB/Qt+oLpKG5/rYUg0zdObJLOicWowt
RoOj8EYijQH9XF60Oz+IcbTY46tYDXYm7wVHCyJFXawtqvNZB8q6CXjdcFrZ28Ua
pM/FOyC5axrCnWd7QLMDWtDehh9sTH1y/nzZAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU26hI26WRLwfhWm/TkN2ELrRFNnUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMjZoSTI2V1JMd2ZoV21fVGtOMkVM
clJGTm5VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1A5DAN
BgkqhkiG9w0BAQsFAAOCAQEAOAgoA1e1Y2Zd2npDhz7/rJZF3Uuo0it6Cs60/2zD
Dx/QVL+cCgzxBoN2oOnAegbjY/YeQNXjG6NvsdpSSSOPtgoTi6R7pAh4Rt+Erzxj
kM8Qc7iSlzfk1MTmqN9LVCW9xEJRaja4kqP9NzRImTf+s8aCjaAqgi2zsZkA4gZO
KVS+tSlzTxQkoChDtrOexDHRK2E8vC6igbFN7/czZQprDe7X5PHnuvRc52jL38vt
U5PtTUndV3ZLy6p93mqgGX6Krlhev2B0fZK1o5fH7cxotFcYoAo4trqrPy19yxer
vOj6XZ28Xd1UR4W2K1lFECUA9AxNzuj78hYICTC4IGQK0A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org