Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/AqbhyKkcZMbvpLWLmUwkIpUhg4s.roa
File:                     AqbhyKkcZMbvpLWLmUwkIpUhg4s.roa (raw, json)
Hash identifier:          XZCxghRCbcoedjymkxLlkVxMVJrZfK8q5f03xuasieU=
Subject key identifier:   02:A6:E1:C8:A9:1C:64:C6:EF:A4:B5:8B:99:4C:24:22:95:21:83:8B
Certificate issuer:       /CN=53AB025E558614A6AC89DCA0302DD23BD596A256
Certificate serial:       FE
Authority key identifier: 53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/AqbhyKkcZMbvpLWLmUwkIpUhg4s.roa
Signing time:             Sun 22 Sep 2024 18:09:24 +0000
ROA not before:           Sun 22 Sep 2024 18:09:24 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        103.99.140.0/23 maxlen: 32

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 05:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AB025E558614A6AC89DCA0302DD23BD596A256
        Validity
            Not Before: Sep 22 18:09:24 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=02A6E1C8A91C64C6EFA4B58B994C24229521838B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:d2:24:7a:05:7b:39:14:83:95:68:20:63:
                    88:16:42:63:c1:7a:58:f6:b2:bf:77:6a:fa:1b:b1:
                    45:6b:3d:5b:84:12:f8:09:83:4c:b4:99:e5:0d:50:
                    53:78:a4:de:8f:c1:d4:0b:28:fe:e3:69:e8:6d:13:
                    50:9a:9d:47:29:33:87:72:db:1a:96:58:8d:47:cd:
                    1b:98:46:6b:cc:a0:5b:3a:53:17:bf:fe:db:37:d2:
                    ed:cf:a2:2f:c2:b2:69:da:21:2a:a1:f5:ad:ff:e3:
                    81:9e:84:59:69:4d:84:48:ea:06:b0:64:d2:e3:0b:
                    e4:27:1a:9a:fd:9b:ca:0b:95:9d:2e:92:85:1c:1c:
                    7a:78:09:f9:24:dc:f2:2c:9c:fb:50:ff:08:b5:e0:
                    0e:dd:12:fc:57:31:4a:85:96:df:c5:be:3d:32:fe:
                    c1:7a:41:b3:2b:83:cc:e5:30:57:87:80:11:38:89:
                    b9:94:8e:fc:ef:9a:05:8e:40:d6:aa:85:fa:53:2b:
                    d5:c1:d6:e8:5a:98:6f:ec:81:72:78:82:ce:29:ce:
                    8a:a3:e3:5a:4c:0b:e7:35:0c:69:ba:1b:34:60:f7:
                    77:1e:30:fa:ed:72:58:55:49:54:9d:b7:b5:25:57:
                    90:6f:f8:f3:3f:e4:de:0d:3f:0b:70:94:ed:4e:c0:
                    82:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:E1:C8:A9:1C:64:C6:EF:A4:B5:8B:99:4C:24:22:95:21:83:8B
            X509v3 Authority Key Identifier:
                keyid:53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/AqbhyKkcZMbvpLWLmUwkIpUhg4s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:cc:8d:c3:22:62:08:74:79:55:80:2e:66:d9:37:3e:62:47:
         cb:a1:87:f1:3d:1a:b2:d3:48:b2:1a:5e:1a:79:2e:0b:fe:8b:
         b1:3c:fe:9f:b6:f1:5e:3f:5b:f5:2e:2b:8c:ab:a5:57:3c:ec:
         50:7b:67:a5:88:b1:e4:0a:a6:d5:5e:27:b1:7f:92:ec:50:36:
         f3:d3:cf:e2:b3:78:fd:d0:36:8a:36:f0:d3:91:31:32:cf:ed:
         98:eb:2a:69:34:8d:e9:e1:c5:c0:29:65:dc:5a:8d:cb:4b:a1:
         c9:eb:07:af:d6:01:90:3e:7f:2d:ce:d8:a2:32:ef:90:8f:e0:
         56:a4:dd:02:a9:87:86:94:37:c6:37:d2:3a:84:ac:61:15:ea:
         52:46:c5:31:08:02:89:1e:60:f9:43:8e:e0:96:39:b0:19:9d:
         33:e9:1b:c9:e2:03:e8:a5:35:a1:af:12:1a:7a:62:c7:2d:df:
         50:d5:2c:08:d7:2b:a8:57:c4:fe:47:b4:d8:61:7b:22:62:23:
         95:e2:e7:c5:90:5d:ba:7e:ab:91:73:d1:1e:b8:8b:30:22:7c:
         70:e5:b2:90:17:33:a6:99:5c:05:c6:50:f3:a5:08:1a:09:40:
         79:80:85:b0:fe:8c:fb:79:5d:28:61:16:ff:f8:75:7f:6c:a5:
         cd:a6:2e:a6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTNB
QjAyNUU1NTg2MTRBNkFDODlEQ0EwMzAyREQyM0JENTk2QTI1NjAeFw0yNDA5MjIx
ODA5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyQTZFMUM4QTkxQzY0
QzZFRkE0QjU4Qjk5NEMyNDIyOTUyMTgzOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdSdIkegV7ORSDlWggY4gWQmPBelj2sr93avobsUVrPVuEEvgJ
g0y0meUNUFN4pN6PwdQLKP7jaehtE1CanUcpM4dy2xqWWI1HzRuYRmvMoFs6Uxe/
/ts30u3Poi/CsmnaISqh9a3/44GehFlpTYRI6gawZNLjC+QnGpr9m8oLlZ0ukoUc
HHp4Cfkk3PIsnPtQ/wi14A7dEvxXMUqFlt/Fvj0y/sF6QbMrg8zlMFeHgBE4ibmU
jvzvmgWOQNaqhfpTK9XB1uhamG/sgXJ4gs4pzoqj41pMC+c1DGm6GzRg93ceMPrt
clhVSVSdt7UlV5Bv+PM/5N4NPwtwlO1OwIIhAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUAqbhyKkcZMbvpLWLmUwkIpUhg4swHwYDVR0jBBgwFoAUU6sCXlWGFKasidyg
MC3SO9WWolYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVJQ0hB
TkcvVTZzQ1hsV0dGS2FzaWR5Z01DM1NPOVdXb2xZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9VNnNDWGxXR0ZLYXNpZHlnTUMzU085V1dvbFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUlDSEFORy9BcWJoeUtrY1pNYnZw
TFdMbVV3a0lwVWhnNHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ2OMMA0GCSqGSIb3DQEBCwUAA4IBAQBjzI3DImIIdHlVgC5m2Tc+YkfLoYfx
PRqy00iyGl4aeS4L/ouxPP6ftvFeP1v1LiuMq6VXPOxQe2eliLHkCqbVXiexf5Ls
UDbz08/is3j90DaKNvDTkTEyz+2Y6yppNI3p4cXAKWXcWo3LS6HJ6wev1gGQPn8t
ztiiMu+Qj+BWpN0CqYeGlDfGN9I6hKxhFepSRsUxCAKJHmD5Q47gljmwGZ0z6RvJ
4gPopTWhrxIaemLHLd9Q1SwI1yuoV8T+R7TYYXsiYiOV4ufFkF26fquRc9EeuIsw
Inxw5bKQFzOmmVwFxlDzpQgaCUB5gIWw/oz7eV0oYRb/+HV/bKXNpi6m
-----END CERTIFICATE-----