Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4iZAVyJkJ5Km_Li0bKNF-FSsMlI.roa
File:                     4iZAVyJkJ5Km_Li0bKNF-FSsMlI.roa (raw, json)
Hash identifier:          k306s1k3evgJXEW8egQpSFTQF65fOe89pk28hCtt8qs=
Subject key identifier:   E2:26:40:57:22:64:27:92:A6:FC:B8:B4:6C:A3:45:F8:54:AC:32:52
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4iZAVyJkJ5Km_Li0bKNF-FSsMlI.roa
Signing time:             Thu 15 Sep 2022 02:43:32 +0000
ROA not before:           Thu 15 Sep 2022 02:43:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131586
IP address blocks:        175.183.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E226405722642792A6FCB8B46CA345F854AC3252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:2f:13:dd:48:27:b8:f9:77:5a:54:1c:1e:
                    34:d7:f6:d6:bf:71:f3:2d:ff:7b:f5:81:5f:8c:f0:
                    3b:b7:94:e0:07:a2:84:a7:e2:05:0c:6f:28:78:44:
                    15:a4:77:24:35:c5:cc:c2:f9:9b:d7:57:24:3c:c4:
                    9c:ad:0e:0c:3c:4d:31:67:6b:18:6c:93:76:8a:7f:
                    2c:6d:39:b7:bb:0f:c0:6e:45:d1:af:6b:94:e7:2e:
                    d4:b1:00:0e:65:b5:de:de:0e:85:57:b4:00:d8:ca:
                    54:ad:ee:b5:76:49:ad:82:13:af:00:9e:e1:30:1f:
                    80:0d:18:7d:a1:4b:05:de:b7:fb:ab:f5:c8:63:58:
                    83:56:2c:80:bd:ff:25:6a:37:0d:23:fb:80:71:39:
                    1d:61:8a:ac:8c:96:d2:2c:3c:34:2d:00:6d:9c:95:
                    b9:42:25:5b:54:03:8c:f0:ce:6f:f7:13:f2:a8:79:
                    88:58:6e:00:fd:a5:78:49:8c:b6:0c:ed:9d:d3:cb:
                    e4:0d:1a:b7:cd:6d:02:36:16:af:a9:5a:f4:50:53:
                    9b:45:f8:18:a3:8a:4b:9d:41:32:dd:10:1e:9f:f2:
                    eb:9f:23:3c:6a:83:6e:d5:e0:0c:97:58:93:71:a9:
                    99:37:f3:d6:85:43:70:9e:41:cf:e8:31:73:68:72:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:40:57:22:64:27:92:A6:FC:B8:B4:6C:A3:45:F8:54:AC:32:52
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4iZAVyJkJ5Km_Li0bKNF-FSsMlI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:7f:d3:be:21:d2:38:a4:87:25:85:b6:a7:c4:bd:a5:99:
         95:4b:4c:ee:ab:d2:c4:f2:d5:d3:13:5c:57:d1:86:c5:58:35:
         61:65:4a:22:a6:35:9b:69:c7:3d:7b:c8:22:9b:34:da:86:aa:
         68:b7:49:c0:4f:e2:42:96:fd:eb:c4:68:9d:c5:71:54:22:ad:
         6e:31:ee:f3:25:a7:da:f6:5b:a4:2b:ab:02:63:cc:be:19:b5:
         c6:04:ec:1e:c2:73:f1:9f:80:0a:f4:00:4d:f4:a3:5d:c0:4b:
         29:d9:31:5b:a1:c5:a6:ad:71:6c:58:e2:e6:6d:5b:dd:f3:f2:
         cc:1d:13:10:eb:30:1e:15:83:0a:ea:f9:9f:11:9f:23:a8:2f:
         76:de:6f:81:6f:3d:c9:f8:54:8d:49:f4:2b:f9:a4:ab:c9:bf:
         55:00:2e:fe:80:78:93:c6:51:b0:77:d6:67:98:7c:b0:f9:9a:
         4e:33:0e:11:76:c1:4f:d1:2d:60:89:a0:25:d9:b3:f8:db:e0:
         34:5d:56:3d:45:1e:09:14:3e:8d:bb:5d:aa:1b:20:03:d4:2c:
         e8:33:ad:63:b5:c1:61:a8:59:69:3a:9f:af:d6:e0:b8:56:e5:
         44:24:5f:b7:fd:ff:57:94:aa:be:fa:38:67:2e:22:48:5b:28:
         7d:51:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org