Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jsRpVcw_p1TToWTROQ9MRRx3FzI.roa
File:                     jsRpVcw_p1TToWTROQ9MRRx3FzI.roa (raw, json)
Hash identifier:          /B59CsZa6HFGlYHVcVrd33HOrTPOu27L+LQ3DubJW0E=
Subject key identifier:   8E:C4:69:55:CC:3F:A7:54:D3:A1:64:D1:39:0F:4C:45:1C:77:17:32
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jsRpVcw_p1TToWTROQ9MRRx3FzI.roa
Signing time:             Thu 15 Sep 2022 02:43:38 +0000
ROA not before:           Thu 15 Sep 2022 02:43:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     23675
IP address blocks:        106.105.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8EC46955CC3FA754D3A164D1390F4C451C771732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:45:46:5f:3e:8e:91:64:6c:49:d6:0e:ba:
                    1a:f4:1b:e6:49:01:84:8e:0e:16:46:74:07:cf:76:
                    4a:05:35:43:40:0c:83:8d:ae:34:8f:c4:be:82:d4:
                    32:1b:1a:1e:8f:8d:3d:94:d3:12:f6:39:e1:92:56:
                    5d:3c:95:3d:de:5f:ad:08:90:22:1b:fd:38:37:98:
                    d1:35:46:77:a8:e7:66:98:5e:7d:39:ae:7c:0e:b1:
                    f2:52:c7:d6:36:f2:35:9b:c2:c7:79:13:be:61:f4:
                    18:0b:c0:02:06:a5:8f:8f:6f:87:a4:bd:63:1f:8e:
                    3e:d8:f1:9e:be:f7:e5:b7:2f:92:8d:4a:36:42:e9:
                    48:a8:f6:d5:e7:42:b4:6f:03:ab:f1:ce:7e:0d:36:
                    e1:b7:44:11:bb:a4:c0:c2:69:7f:c2:fb:19:e6:1d:
                    2b:e8:0b:1f:6d:88:63:b3:68:21:28:7b:11:d8:76:
                    25:b9:91:ff:85:42:b1:c5:a0:f9:b7:34:95:f3:d5:
                    ac:17:4c:65:6e:3f:3d:af:63:6f:c6:c6:70:fd:5a:
                    fb:dc:ef:94:74:20:2c:a7:ac:2c:f2:54:2f:76:2d:
                    a7:32:99:e5:54:1a:dd:fe:3c:0f:9b:f5:b5:69:e6:
                    dd:88:d2:02:d8:ee:42:6b:68:da:77:92:99:9d:eb:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C4:69:55:CC:3F:A7:54:D3:A1:64:D1:39:0F:4C:45:1C:77:17:32
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jsRpVcw_p1TToWTROQ9MRRx3FzI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:e1:89:b8:e2:2c:dd:81:32:15:95:6c:01:20:8d:c7:d9:
         fe:db:aa:1f:b0:cb:8d:b5:bb:fe:51:08:40:66:b6:33:6d:05:
         ba:fa:2b:14:ec:9c:54:fe:ea:c9:a2:d0:6a:53:6e:dc:5d:10:
         11:3e:7c:eb:34:e1:9c:99:b3:d5:ba:e1:69:b0:dc:60:1b:f1:
         80:63:0e:40:03:78:37:d6:df:07:be:84:42:c9:ed:e1:33:31:
         3d:80:5b:35:12:af:62:7a:de:b3:51:8c:03:c2:9d:8f:2a:7d:
         0c:1b:49:18:a9:fe:f6:74:79:dc:8e:26:dd:8a:cc:c9:e0:b2:
         7a:ac:07:0d:3c:99:38:a8:a0:41:17:c0:8a:82:1b:28:3a:95:
         4e:74:f0:f0:2e:34:9e:29:13:40:72:5b:8b:d7:ed:a0:a9:82:
         c8:69:3b:9f:08:2f:fc:69:cd:eb:48:f0:6e:33:43:98:bb:f6:
         77:d1:ee:11:b8:4d:26:7b:4e:25:25:ca:dc:e4:28:35:bd:92:
         3c:0e:85:30:2c:db:18:1f:15:5d:7b:2d:77:93:4b:8a:b1:d1:
         b8:bd:8d:8c:cb:ff:86:41:3b:4a:cd:9d:4c:40:6e:12:ee:08:
         b9:35:3d:ca:5a:1f:e1:81:6d:d5:3f:3e:36:b7:66:3b:30:60:
         47:21:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org