Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c6XM1Z624W2M_ZUI7-KD4b0zQbg.roa
File:                     c6XM1Z624W2M_ZUI7-KD4b0zQbg.roa (raw, json)
Hash identifier:          alnCfcQ3aISmr3c3AmGw6vXROjBO2Uqe1KtqM73ItRE=
Subject key identifier:   73:A5:CC:D5:9E:B6:E1:6D:8C:FD:95:08:EF:E2:83:E1:BD:33:41:B8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c6XM1Z624W2M_ZUI7-KD4b0zQbg.roa
Signing time:             Thu 15 Sep 2022 02:43:46 +0000
ROA not before:           Thu 15 Sep 2022 02:43:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        218.211.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=73A5CCD59EB6E16D8CFD9508EFE283E1BD3341B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:5b:77:64:50:fd:0a:90:90:24:d8:e8:68:
                    d6:32:64:ba:cf:2d:3c:6b:5c:6e:76:15:23:9d:24:
                    41:dd:1c:76:db:30:70:36:4d:3e:ec:9a:b6:06:cc:
                    2d:0c:82:db:ef:81:09:a3:7a:b8:a0:53:10:14:5e:
                    c5:e8:fe:d4:85:33:92:19:69:2e:d9:3d:ae:ba:44:
                    54:c9:36:71:02:8a:eb:c9:ae:bf:2c:ae:35:af:97:
                    0b:8b:ab:9e:ff:38:25:7b:37:cf:81:c2:90:69:cd:
                    6a:1e:b1:a3:e0:41:84:ea:74:34:68:e9:3c:17:a4:
                    29:d6:7c:86:88:26:fe:29:09:eb:49:5e:94:cf:58:
                    ac:e6:79:72:d3:69:bf:4d:d9:7c:da:24:d9:ef:ed:
                    55:c0:8a:b9:07:48:90:34:d1:81:6c:d8:93:da:ce:
                    8e:b3:e4:ea:25:de:6a:db:5b:36:ee:7e:7e:42:a0:
                    76:85:90:c1:4f:65:86:63:4b:89:8b:7b:30:13:4a:
                    43:88:d6:07:a8:49:dc:9f:54:1d:af:1b:b2:8b:7a:
                    54:ca:10:20:08:4a:dc:9b:68:d4:7d:69:37:7d:21:
                    16:1f:df:e5:ca:52:ce:ff:f3:81:a4:2f:90:fb:d8:
                    17:25:d0:b3:79:5d:0e:08:57:dd:e1:42:77:73:9a:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:CC:D5:9E:B6:E1:6D:8C:FD:95:08:EF:E2:83:E1:BD:33:41:B8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c6XM1Z624W2M_ZUI7-KD4b0zQbg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:37:b3:38:dd:fb:92:d6:03:cb:b8:3a:49:01:ba:68:7d:
         49:6f:e1:23:47:01:99:d8:7b:36:18:05:cd:92:c4:34:e3:af:
         3d:4a:fb:cc:ac:04:73:6a:4c:c6:67:a7:df:66:e5:18:33:a2:
         61:41:27:03:a3:98:11:05:ab:36:b5:6e:7b:6d:2f:fe:78:47:
         ca:2d:06:ba:07:10:1f:a4:de:4d:44:96:e9:fe:20:9c:e5:dd:
         5f:8b:31:51:3e:49:0f:11:1e:a5:30:b3:a1:a8:9d:95:83:93:
         3e:c4:1b:57:62:28:ba:ed:7b:89:b6:fd:d7:a8:ab:c1:ae:95:
         fd:cf:6a:d7:97:29:44:34:15:c7:45:43:f3:7b:b5:8c:24:12:
         6c:7b:52:a7:05:90:5e:a2:ee:23:88:f7:fb:c0:7c:dc:25:4f:
         1c:6c:75:58:69:d5:ab:77:7d:04:a7:d8:1f:5b:62:11:da:f2:
         c4:e1:84:b0:60:65:12:05:1f:55:b1:f9:bf:56:88:e0:17:bb:
         5c:2f:42:69:c8:94:d8:4a:9a:4e:d6:ac:8f:e6:83:3e:75:46:
         e5:02:d0:90:4b:63:5a:96:3e:11:c6:1f:b7:41:13:39:c5:a5:
         b0:d6:43:cd:42:e4:56:1e:fc:8e:d1:74:60:c6:7b:3d:94:b2:
         e5:74:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org