Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa
File:                     Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa (raw, json)
Hash identifier:          Ef65uLrhbWwSn0eXSQznKBoFDhm4KMgmh6B1cK5vOQs=
Subject key identifier:   52:47:BD:E1:EE:4B:7F:9A:7E:05:B0:F0:88:91:AC:63:69:F1:AF:FC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FE0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa
Signing time:             Tue 25 Oct 2022 01:03:04 +0000
ROA not before:           Tue 25 Oct 2022 01:03:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     198949
IP address blocks:        113.196.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4064 (0xfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Oct 25 01:03:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5247BDE1EE4B7F9A7E05B0F08891AC6369F1AFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:b8:86:6a:97:56:06:03:ba:59:f2:c6:3e:
                    f6:3a:a8:55:d9:b8:d2:e4:2d:2e:28:78:bf:37:e3:
                    9f:af:84:f6:0c:f1:81:d3:e3:e9:98:19:06:0a:ba:
                    33:40:30:b4:fe:51:2c:63:ee:b4:53:30:35:28:da:
                    66:df:d0:de:99:2c:18:70:40:2c:bf:16:44:05:bf:
                    9a:97:d7:a3:92:65:cd:b8:2c:61:95:a0:4a:46:67:
                    95:a8:70:11:c2:3f:bb:05:20:60:0d:b0:36:92:e9:
                    61:9c:77:9b:50:75:ef:a9:27:38:88:b6:aa:46:dd:
                    58:54:91:6f:3d:0c:e5:94:1c:9b:59:de:51:ea:68:
                    fb:70:26:b9:cc:ed:1e:d3:03:b4:db:c4:6b:5b:64:
                    e3:34:1f:b9:19:8b:92:18:37:73:9e:e8:9b:a9:24:
                    fa:72:b2:13:03:7c:45:8d:d3:a7:11:de:f0:6b:93:
                    37:5a:8c:9d:60:b6:7f:f3:b9:da:3f:83:6c:f8:07:
                    29:85:51:ff:44:45:4e:48:16:6a:03:d5:14:0a:58:
                    7f:77:9c:06:eb:0e:01:57:5c:85:66:50:55:d4:3d:
                    42:01:1c:5d:86:38:6a:9a:c2:0f:87:9a:7d:f6:94:
                    e8:d2:7a:a1:e1:af:f1:53:87:ee:fa:9b:c0:af:60:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:BD:E1:EE:4B:7F:9A:7E:05:B0:F0:88:91:AC:63:69:F1:AF:FC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Uke94e5Lf5p-BbDwiJGsY2nxr_w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:54:17:d5:83:78:ff:ee:66:9e:b4:6e:1d:34:a7:99:9f:78:
         10:e5:6b:f4:ad:e0:12:9a:03:be:b5:d5:b6:c9:d3:e2:a8:15:
         80:e6:de:b9:46:85:bc:e6:4d:93:ab:5a:4c:12:f0:03:5a:a2:
         26:88:0b:17:4f:22:56:87:7c:44:a5:1b:04:99:16:cb:dc:71:
         4f:5a:ea:55:12:48:ef:ac:8e:14:fd:19:99:30:53:61:db:60:
         56:88:61:3e:ec:7a:8c:6c:e1:ce:e8:44:a0:96:60:ec:4a:32:
         b2:b4:1e:bd:fe:e7:18:8f:43:81:5f:ad:65:70:2c:70:ed:70:
         e8:f6:e3:86:bb:f7:36:a7:c0:4a:8b:6f:02:2a:09:e5:85:0c:
         03:47:2e:0c:5d:0c:41:58:06:60:91:a2:84:aa:86:e2:8e:e3:
         66:f8:a9:7c:b3:cb:4e:69:a8:97:3d:2a:aa:04:f3:77:29:68:
         4c:85:41:ed:51:16:db:5f:1f:80:c6:67:2c:6f:3b:83:2e:7e:
         5d:eb:ca:cd:db:2e:2a:c6:94:d0:2a:88:1c:b5:ce:bd:ad:c1:
         59:f1:43:64:b9:a0:a5:dc:c6:65:92:8b:7b:d4:24:95:92:0f:
         9b:6b:f3:06:ab:be:d1:1a:0e:d3:54:52:5d:1b:a6:31:9c:e5:
         bf:f6:11:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org