Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/tDfV8jlW6cfqyv9n5wzzRBN2RLA.roa
File:                     tDfV8jlW6cfqyv9n5wzzRBN2RLA.roa (raw, json)
Hash identifier:          wC1P2udNgjALk6teWx1/VhrXycnOphv70/aKbdKZ96k=
Subject key identifier:   B4:37:D5:F2:39:56:E9:C7:EA:CA:FF:67:E7:0C:F3:44:13:76:44:B0
Certificate issuer:       /CN=53AB025E558614A6AC89DCA0302DD23BD596A256
Certificate serial:       05
Authority key identifier: 53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/tDfV8jlW6cfqyv9n5wzzRBN2RLA.roa
Signing time:             Wed 20 Sep 2023 18:51:11 +0000
ROA not before:           Wed 20 Sep 2023 18:51:11 +0000
ROA not after:            Wed 18 Sep 2024 09:08:42 +0000
asID:                     131642
IP address blocks:        2401:3960::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 09:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AB025E558614A6AC89DCA0302DD23BD596A256
        Validity
            Not Before: Sep 20 18:51:11 2023 GMT
            Not After : Sep 18 09:08:42 2024 GMT
        Subject: CN=B437D5F23956E9C7EACAFF67E70CF344137644B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:78:3a:8f:01:ef:41:20:b3:ba:68:95:79:
                    79:7c:eb:d8:2c:f7:d4:21:32:75:6e:f2:4b:cf:53:
                    0b:09:fb:7f:ac:8b:e7:09:cf:a6:f5:6b:30:bc:be:
                    6c:3f:de:a4:3a:bd:d8:c0:49:db:51:f9:e6:7b:a2:
                    b1:28:37:ce:71:36:4e:83:72:f9:00:52:54:a6:3e:
                    7e:77:f0:1f:7f:c4:a9:d4:1b:87:11:af:b2:d9:3c:
                    7d:65:25:a9:bc:79:45:b8:f5:fd:85:6d:90:a7:22:
                    76:22:ba:b3:a2:91:c8:56:76:1a:f8:ab:b6:7a:58:
                    60:93:1f:ad:c6:64:5c:45:6d:aa:aa:21:de:4f:b2:
                    6a:22:2a:93:96:11:05:86:9e:db:a7:cf:bd:fa:81:
                    3a:98:a5:93:2e:07:65:4c:ca:80:9e:09:cf:a4:ec:
                    e3:08:40:e9:db:25:44:ce:5d:48:ab:eb:13:aa:94:
                    95:c0:c0:5e:61:54:f7:07:89:c9:94:96:41:c7:8e:
                    16:36:ef:84:c0:c2:4e:fa:b3:e3:17:07:11:92:24:
                    95:3f:05:49:6c:5f:f0:91:43:fe:ca:a2:e5:02:87:
                    8a:2f:8d:aa:15:63:5f:b2:fe:98:6b:b2:4b:cd:cd:
                    e6:1a:ff:25:8b:a7:a0:ca:9b:a6:d6:9f:55:c1:e7:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:37:D5:F2:39:56:E9:C7:EA:CA:FF:67:E7:0C:F3:44:13:76:44:B0
            X509v3 Authority Key Identifier:
                keyid:53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/tDfV8jlW6cfqyv9n5wzzRBN2RLA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3960::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:83:89:ab:a4:7e:59:d1:a5:f1:3b:98:64:d9:61:53:c6:
         29:a6:59:ed:0b:9c:c0:79:80:9c:d3:39:d7:c8:24:11:42:f3:
         78:d5:47:65:d5:99:f9:fe:f3:62:85:75:41:c8:2c:93:e6:d8:
         55:d8:a3:a5:f9:61:8a:3d:42:7b:75:9f:69:47:a8:bd:a5:6c:
         8e:d9:df:10:29:b8:40:51:2a:0c:3c:49:50:9d:6a:96:5e:43:
         25:25:a4:a9:8d:6d:1d:7f:fb:77:d3:01:47:f2:81:7c:6b:4c:
         b1:fb:fd:93:94:11:6f:03:0d:5d:8d:58:4e:ba:dd:f2:11:d9:
         43:7a:69:95:2c:b9:d3:c4:c0:9c:11:0a:84:b9:ff:56:e7:a3:
         51:24:06:14:ce:d2:e6:9e:b8:a0:22:e0:4f:de:af:44:97:06:
         6b:b3:28:6c:e6:ba:bd:2e:ab:93:db:c6:f2:0c:79:dc:20:de:
         e9:37:b9:e3:4e:19:11:22:84:d1:84:1b:dc:76:66:f9:14:c8:
         e9:aa:a9:7e:71:4b:76:cc:4d:14:5a:81:a1:c1:a1:1b:7d:1a:
         98:53:fd:be:7e:cd:fd:b4:d1:84:ca:2c:4b:13:5e:e6:d4:63:
         ed:03:66:a5:1f:c3:b9:dc:8f:52:0a:8f:1f:b8:1b:16:55:4e:
         86:1d:c4:bb
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 4 10:11:23 2024 by rpki-client on console-fra.rpki-client.org