Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/T6etEtP8s6zCwnEC66K-6d_EbTI.roa
File:                     T6etEtP8s6zCwnEC66K-6d_EbTI.roa (raw, json)
Hash identifier:          Bi/enX9Uovcmy7E1kK2bS+XNghPHzClO8MdHIl87AXY=
Subject key identifier:   4F:A7:AD:12:D3:FC:B3:AC:C2:C2:71:02:EB:A2:BE:E9:DF:C4:6D:32
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T6etEtP8s6zCwnEC66K-6d_EbTI.roa
Signing time:             Thu 15 Sep 2022 02:43:05 +0000
ROA not before:           Thu 15 Sep 2022 02:43:05 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        210.66.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:05 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4FA7AD12D3FCB3ACC2C27102EBA2BEE9DFC46D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:45:27:cc:65:90:e0:5d:78:0c:ce:da:e8:ee:
                    00:71:e2:48:45:d5:86:30:a2:95:03:85:4a:43:83:
                    78:34:ec:44:4a:96:2b:90:43:be:ca:9a:ab:f6:bf:
                    45:79:df:33:6c:69:c2:fc:ae:50:ca:9f:13:40:31:
                    d8:0c:90:55:45:11:6a:36:28:cc:f1:2c:e3:fe:a8:
                    3e:5e:3b:d1:29:2d:4a:83:8a:69:dc:a9:e2:1d:87:
                    d1:60:6e:30:e5:7d:1f:8f:dc:2f:f9:dc:5d:e7:34:
                    0b:82:e2:7e:d1:11:a7:93:5a:56:b1:16:9a:f7:b7:
                    ac:38:b8:38:5e:5d:da:53:94:87:b2:d3:c2:7f:fc:
                    c3:de:b3:38:e7:7f:41:82:32:80:dd:97:e2:0f:8f:
                    19:93:f1:5a:be:89:87:06:4f:59:1c:88:97:09:3d:
                    76:7e:2b:85:5f:ba:73:b3:e9:70:e3:dd:6a:f4:5f:
                    17:25:95:45:25:00:7c:ad:e0:f9:f5:1d:c6:9a:0a:
                    8d:89:9f:1b:26:b0:88:93:94:26:1e:7d:15:9e:22:
                    a5:84:6b:fb:5f:cb:8f:28:7c:10:c6:08:5a:91:8a:
                    4f:96:94:7c:26:0f:fa:f0:48:8a:6e:a8:a8:1b:e6:
                    d9:ba:23:c6:77:a7:2a:73:96:1a:38:94:b2:98:e3:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A7:AD:12:D3:FC:B3:AC:C2:C2:71:02:EB:A2:BE:E9:DF:C4:6D:32
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/T6etEtP8s6zCwnEC66K-6d_EbTI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:64:c8:5c:1c:dd:cd:0c:2f:ab:c9:3e:5e:11:df:06:12:
         d9:80:9f:c6:ff:82:52:bd:fd:5e:b2:df:e6:ec:85:12:0d:2f:
         3c:2a:a3:50:fb:63:d8:50:00:3a:df:ed:3d:74:55:ef:76:82:
         7d:ea:ee:b1:b4:c9:d0:4d:f8:3b:a6:da:10:45:d2:e8:05:ee:
         f9:5f:7a:5a:da:85:aa:9d:14:00:f0:67:e5:10:d6:0b:1c:eb:
         d6:7b:f4:7a:be:1e:01:b3:69:f1:58:cc:bf:28:d8:ad:1b:af:
         83:14:0e:cb:be:d6:e9:2a:aa:1a:6e:de:18:da:ef:48:f1:8e:
         82:80:44:1a:6a:99:e9:78:2a:e8:d6:f6:9a:54:f9:2d:d6:51:
         78:9b:84:b7:64:e5:b3:3c:30:b6:e3:3a:17:53:3a:9a:eb:f6:
         38:dd:3c:f5:ee:12:02:41:08:e5:84:a7:b5:93:40:b5:42:c1:
         4e:22:2b:03:5c:77:42:c3:5a:e5:4b:30:61:40:92:b1:37:a2:
         29:07:47:3f:a5:d0:75:3e:d4:5f:f7:39:33:f1:9a:70:ea:5e:
         8f:8d:70:c6:76:74:f1:2f:2e:2b:38:0b:ee:4e:01:2f:53:f2:
         77:8c:51:a4:50:ea:4d:a4:4b:3e:e9:e5:61:04:90:17:36:c3:
         99:11:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org