Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NodQmcJor20KyZ8qBbrcw8FUg3w.roa
File:                     NodQmcJor20KyZ8qBbrcw8FUg3w.roa (raw, json)
Hash identifier:          kEvcYw9kkoZ6u2pd50d8lT4AD3oqrGTN2aCggnLJHHA=
Subject key identifier:   36:87:50:99:C2:68:AF:6D:0A:C9:9F:2A:05:BA:DC:C3:C1:54:83:7C
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0E78
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NodQmcJor20KyZ8qBbrcw8FUg3w.roa
Signing time:             Thu 11 May 2023 06:29:13 +0000
ROA not before:           Thu 11 May 2023 06:29:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        2001:4546:1000:da00::/56 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3704 (0xe78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: May 11 06:29:13 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=36875099C268AF6D0AC99F2A05BADCC3C154837C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:51:b4:83:47:e0:0d:33:46:59:f4:e8:34:
                    f2:e9:fa:6f:03:3b:4a:dd:64:bf:96:db:8c:84:a2:
                    c2:1a:68:5d:f4:96:8a:cf:47:62:1f:d4:18:4c:5f:
                    fe:bc:20:c8:12:ec:6e:94:de:ad:2b:b3:77:36:ce:
                    18:01:19:dd:7e:27:b9:19:ff:00:d6:52:01:ad:c3:
                    e3:74:2b:14:d4:5a:86:db:a9:31:51:36:d9:8a:ed:
                    58:b4:83:be:8d:e4:0e:bf:52:2e:a5:54:aa:58:83:
                    54:9b:60:26:5e:28:14:ae:2a:07:ba:af:02:6c:fe:
                    bc:52:46:60:bf:e6:94:52:32:16:5b:82:25:aa:da:
                    59:31:69:5b:9d:81:43:0b:e4:ae:18:e1:3b:89:e4:
                    c8:82:4c:ac:1e:34:34:34:3d:c8:b5:9f:a9:f8:4b:
                    f7:02:32:c9:a9:66:86:b0:7e:86:a6:8a:69:f3:a4:
                    e8:47:d0:d6:04:28:ef:5d:2d:91:52:72:df:f2:c4:
                    36:c4:b6:5e:c9:96:f3:b0:09:01:b1:9a:1c:94:8d:
                    94:4b:6c:23:03:db:14:c6:b8:28:10:49:84:63:77:
                    fd:13:6c:de:eb:ed:58:7b:12:c6:e5:b7:d1:17:79:
                    ed:89:20:f2:d5:3b:a8:f6:2a:a6:51:db:03:a3:f5:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:50:99:C2:68:AF:6D:0A:C9:9F:2A:05:BA:DC:C3:C1:54:83:7C
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NodQmcJor20KyZ8qBbrcw8FUg3w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4546:1000:da00::/56

    Signature Algorithm: sha256WithRSAEncryption
         08:ac:5f:ef:81:17:b2:89:41:18:b8:aa:d6:d1:ac:d2:6d:ef:
         4e:bd:6a:16:3d:ee:76:c0:ae:39:0a:aa:0d:66:94:2b:e6:65:
         74:dd:63:18:64:53:93:54:3e:78:2b:63:3b:53:7e:84:2a:75:
         c7:0a:56:4e:9e:03:62:af:af:ac:e0:c1:60:36:17:d3:1a:db:
         7c:df:51:3f:2e:c7:95:31:04:d0:67:92:60:d2:7e:d5:85:68:
         43:b0:f9:95:03:44:b3:8f:44:66:9f:35:c1:91:ee:74:9b:65:
         8f:05:a8:04:74:41:66:a7:09:5c:39:cd:39:02:75:49:87:31:
         0c:f7:9e:81:a5:82:b9:1e:8c:43:18:2d:e2:86:5f:d8:3a:5c:
         be:1a:b3:87:16:c4:3d:a1:a5:52:37:1a:a5:2a:96:a6:83:f7:
         4b:ab:ed:db:10:91:03:c6:25:c8:f1:41:a8:42:b2:ee:4b:5a:
         85:99:93:4a:7d:64:87:85:6f:9e:2c:5b:6d:b4:71:4d:dd:3c:
         53:f4:f5:4a:dc:8c:09:34:d0:00:4b:cb:84:e2:ef:0c:5d:d6:
         ae:61:de:cb:3b:03:ec:d7:7a:d2:98:6f:f3:6c:25:2e:1c:e4:
         1f:bf:97:34:0b:ed:52:8c:f8:71:1a:dc:ed:1d:4a:18:e9:5b:
         43:fd:aa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org