Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5TfQkN6BNJSAuvTqQuVgVit7nCI.roa
File:                     5TfQkN6BNJSAuvTqQuVgVit7nCI.roa (raw, json)
Hash identifier:          s7Qf/IGvu4jPnlUiqQ1OU0AvGc3W2JEe86zK3wWXfWM=
Subject key identifier:   E5:37:D0:90:DE:81:34:94:80:BA:F4:EA:42:E5:60:56:2B:7B:9C:22
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5TfQkN6BNJSAuvTqQuVgVit7nCI.roa
Signing time:             Thu 15 Sep 2022 02:47:30 +0000
ROA not before:           Thu 15 Sep 2022 02:47:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        124.12.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E537D090DE81349480BAF4EA42E560562B7B9C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:a4:32:2c:fd:4d:48:1a:fa:d0:b0:04:d0:
                    45:a6:27:3d:44:af:b2:bc:87:18:ce:95:27:58:e9:
                    d4:50:92:fb:47:35:c8:a6:bf:c7:f9:cb:0b:8a:e0:
                    b3:ef:2d:ee:d1:31:42:ec:70:eb:f2:d0:f4:67:f9:
                    e2:0d:e1:9d:a7:d0:8e:f5:9b:07:5d:de:f0:71:49:
                    61:f5:49:ca:60:f1:a2:6c:9e:d1:81:a4:20:10:8c:
                    bd:12:0f:e6:c2:b3:b8:9c:10:94:35:24:4a:7a:15:
                    06:01:af:2f:a7:2b:13:d9:32:19:6a:c4:e9:c1:91:
                    6a:3e:e6:fc:9d:c5:e2:17:cd:07:e1:26:07:8f:c1:
                    27:cd:9f:4f:3d:a5:46:b0:64:cc:d9:92:87:1f:db:
                    12:05:f9:06:b3:e0:1a:41:eb:30:c4:ad:47:f7:f8:
                    15:04:63:10:b3:b0:98:41:be:20:ad:f5:a0:23:d8:
                    5a:be:b0:bd:54:f4:6e:e2:d4:45:80:c3:29:63:f8:
                    59:de:e5:76:37:84:2b:25:e0:8f:30:24:67:12:01:
                    53:31:90:ed:32:ed:58:a4:bb:dc:a9:e5:e8:28:41:
                    42:5b:f5:31:64:3a:7f:98:a8:ed:75:7e:aa:c7:ab:
                    4d:a5:e3:c2:d2:20:d0:be:98:6f:2d:41:ee:9c:6a:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:D0:90:DE:81:34:94:80:BA:F4:EA:42:E5:60:56:2B:7B:9C:22
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5TfQkN6BNJSAuvTqQuVgVit7nCI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:12:b9:07:c0:e6:77:bd:65:dd:4c:72:8b:01:71:74:0b:
         85:08:01:63:7a:c1:c0:fe:cb:92:46:7a:d4:2e:96:d6:7d:b0:
         7e:ec:d3:bf:34:74:77:59:11:a7:ae:9a:4b:9c:f1:e0:42:2d:
         43:61:32:21:fa:e3:3d:db:b9:73:fc:5d:da:af:8f:0a:e3:ae:
         89:cc:c3:50:f1:f4:78:78:90:ed:28:2b:be:63:86:9a:fe:0d:
         97:df:40:ea:ad:a2:5e:ad:df:4a:9a:da:3d:cf:40:8e:d3:a9:
         d1:3e:dd:5d:1e:eb:f9:a1:ee:d7:1f:de:34:5d:9b:43:cd:00:
         85:68:08:cc:82:3c:ec:f2:96:ff:18:aa:7b:cc:6e:36:e9:99:
         04:9f:35:b8:c6:9a:9e:4d:ff:b1:e5:c7:26:f7:f3:53:58:f6:
         67:c0:7b:0e:19:d1:41:3f:dd:ae:90:06:d5:58:b8:d2:6f:bd:
         50:f4:92:ed:1a:d1:04:2e:e5:3a:c7:92:5d:37:d1:64:8e:79:
         08:09:b1:88:75:ae:93:04:6d:0a:c6:d2:c5:74:8d:11:56:cb:
         3a:64:23:76:57:e7:dd:3a:64:2e:ae:b7:de:0c:aa:03:2f:bc:
         97:ce:e7:13:70:8b:66:cf:6e:7f:27:1e:eb:6b:51:9f:ab:3f:
         13:2b:45:c3
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU1MzdEMDkwREU4MTM0
OTQ4MEJBRjRFQTQyRTU2MDU2MkI3QjlDMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBLqQyLP1NSBr60LAE0EWmJz1Er7K8hxjOlSdY6dRQkvtHNcim
v8f5ywuK4LPvLe7RMULscOvy0PRn+eIN4Z2n0I71mwdd3vBxSWH1Scpg8aJsntGB
pCAQjL0SD+bCs7icEJQ1JEp6FQYBry+nKxPZMhlqxOnBkWo+5vydxeIXzQfhJgeP
wSfNn089pUawZMzZkocf2xIF+Qaz4BpB6zDErUf3+BUEYxCzsJhBviCt9aAj2Fq+
sL1U9G7i1EWAwylj+Fne5XY3hCsl4I8wJGcSAVMxkO0y7Viku9yp5egoQUJb9TFk
On+YqO11fqrHq02l48LSINC+mG8tQe6canF1AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU5TfQkN6BNJSAuvTqQuVgVit7nCIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNVRmUWtONkJOSlNBdXZU
cVF1VmdWaXQ3bkNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AHwMMA0GCSqGSIb3DQEBCwUAA4IBAQCLchK5B8Dmd71l3UxyiwFxdAuFCAFjesHA
/suSRnrULpbWfbB+7NO/NHR3WRGnrppLnPHgQi1DYTIh+uM927lz/F3ar48K466J
zMNQ8fR4eJDtKCu+Y4aa/g2X30DqraJerd9Kmto9z0CO06nRPt1dHuv5oe7XH940
XZtDzQCFaAjMgjzs8pb/GKp7zG426ZkEnzW4xpqeTf+x5ccm9/NTWPZnwHsOGdFB
P92ukAbVWLjSb71Q9JLtGtEELuU6x5JdN9FkjnkICbGIda6TBG0KxtLFdI0RVss6
ZCN2V+fdOmQurrfeDKoDL7yXzucTcItmz25/Jx7ra1Gfqz8TK0XD
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org