Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PeTu7wSGfSrKEO0-2JFdof6rkdc.roa
File:                     PeTu7wSGfSrKEO0-2JFdof6rkdc.roa (raw, json)
Hash identifier:          VmoL5GgerMRI2QNyAWm7A2/Wb7kcT3dTHb8OihrdV1g=
Subject key identifier:   3D:E4:EE:EF:04:86:7D:2A:CA:10:ED:3E:D8:91:5D:A1:FE:AB:91:D7
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PeTu7wSGfSrKEO0-2JFdof6rkdc.roa
Signing time:             Thu 15 Sep 2022 02:42:51 +0000
ROA not before:           Thu 15 Sep 2022 02:42:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        115.30.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3DE4EEEF04867D2ACA10ED3ED8915DA1FEAB91D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:d9:46:e4:95:ac:e5:ec:8c:dd:19:bf:1c:
                    ea:09:6e:b0:66:12:af:fb:59:5c:83:73:f2:f3:e7:
                    26:fa:03:54:94:35:12:9f:ae:54:bd:7e:f4:91:d7:
                    3d:7a:66:51:1d:85:4a:ec:43:d3:49:8a:7e:45:69:
                    b3:51:c5:2e:b1:9c:eb:19:97:37:c4:83:31:b0:8c:
                    c6:b7:51:08:8e:1f:2a:89:34:d9:f3:07:81:f0:6c:
                    75:65:71:6f:3d:c5:66:4e:85:1f:e7:99:44:ff:a6:
                    67:04:cf:53:67:b0:08:7f:b2:58:22:df:5f:61:5e:
                    55:6a:19:eb:04:a1:8b:eb:ec:82:72:33:20:25:2e:
                    65:2b:75:6f:21:2d:38:7a:09:96:fc:b7:a4:bf:23:
                    0e:e3:7f:c3:7a:cf:f7:59:6f:da:47:52:a8:a9:b0:
                    75:2f:cc:d1:d6:e2:c2:56:b9:54:3d:ce:1d:51:da:
                    87:3a:3e:d3:3d:f9:10:51:d1:fd:9d:f4:e0:68:05:
                    1d:4b:26:53:e0:cb:77:db:92:29:7f:74:8d:ac:17:
                    a8:68:e7:46:94:63:1a:41:91:3d:44:db:ed:9a:f1:
                    f5:09:6b:4d:2b:8b:77:58:40:a4:97:74:5d:0b:c0:
                    a1:92:26:aa:28:35:1a:ff:4d:2e:8d:5f:d2:60:35:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:EE:EF:04:86:7D:2A:CA:10:ED:3E:D8:91:5D:A1:FE:AB:91:D7
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PeTu7wSGfSrKEO0-2JFdof6rkdc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c0:01:a0:24:73:a7:c6:a2:3d:ca:ac:f6:99:5e:6f:ce:16:02:
         1e:05:c5:dc:f2:7e:0a:88:8b:1b:d1:e0:f8:d7:5a:5d:65:d2:
         b5:83:95:d7:d5:e0:f0:b5:9c:7d:7b:da:78:9e:70:4d:6f:1a:
         3b:22:9d:4d:35:40:fc:9a:f7:a6:48:c6:97:5c:95:73:e1:0e:
         94:05:9e:ce:d6:08:c4:18:25:69:80:2c:b9:17:1e:3e:f4:a1:
         54:89:b8:f9:5a:80:2f:4b:f0:8c:9b:a1:62:d2:52:de:87:94:
         ef:f2:18:5f:7f:82:0d:93:80:7d:c9:9f:8d:c5:62:c9:b4:3b:
         86:d0:af:3e:0b:29:11:da:48:85:6f:44:7e:58:6d:e5:19:7c:
         eb:70:fc:94:2f:76:5b:ac:1d:e3:66:a1:8f:9d:78:fc:c6:2a:
         52:e3:e6:63:28:d9:73:d0:e1:25:b0:93:27:e3:31:17:ad:07:
         46:32:84:22:a4:f3:8b:c8:8c:e8:62:7f:25:f2:ed:18:27:0d:
         e4:c2:d7:1e:63:b8:35:9a:3f:70:13:aa:fd:a7:60:4b:12:c8:
         7c:6f:b9:a8:b1:26:61:7c:01:68:db:12:e8:79:0d:ac:41:53:
         37:9e:16:e8:79:1d:ef:18:3c:44:fa:d4:2b:06:e1:b8:0e:8a:
         ff:7b:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org