Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/T5_4g6qPIybcNtrwrNuPNgEC83Q.roa
File:                     T5_4g6qPIybcNtrwrNuPNgEC83Q.roa (raw, json)
Hash identifier:          nC34m9M1JeYezQiHtIAyodPiOhGlIASclhBDFe46a/o=
Subject key identifier:   4F:9F:F8:83:AA:8F:23:26:DC:36:DA:F0:AC:DB:8F:36:01:02:F3:74
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FA8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/T5_4g6qPIybcNtrwrNuPNgEC83Q.roa
Signing time:             Fri 01 Sep 2023 09:37:06 +0000
ROA not before:           Fri 01 Sep 2023 09:37:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131597
IP address blocks:        219.86.50.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 Jul 2024 10:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4008 (0xfa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4F9FF883AA8F2326DC36DAF0ACDB8F360102F374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:a2:10:f4:a0:71:75:ab:b5:41:b1:09:98:
                    00:fc:cc:85:ae:15:a9:75:7a:1b:76:04:53:da:4a:
                    bf:c0:ff:b9:55:3c:d3:0f:6f:cf:5f:6d:bc:80:a3:
                    d6:a1:c1:c4:c4:b9:61:96:1e:05:66:c2:93:d8:df:
                    db:a4:2c:86:e2:1f:7c:b7:96:b1:53:f0:e0:a1:f7:
                    4b:2c:af:b2:60:b5:59:df:a5:c1:c6:b9:6a:63:26:
                    76:0d:8e:a3:1e:93:87:73:8d:dc:bc:3a:f4:4b:b5:
                    4f:dd:71:b6:0f:1f:19:28:c0:97:a2:59:1c:e6:de:
                    6c:f9:7e:d1:a4:37:97:1f:01:bf:2d:b3:4c:84:6e:
                    66:48:97:96:09:62:fa:96:f6:19:49:75:c2:19:55:
                    78:11:b4:cd:e8:98:3e:8d:5d:b2:bf:73:31:f4:25:
                    1a:fa:4c:31:04:f8:11:8b:a4:de:44:d6:d4:d2:db:
                    f1:d7:2c:ef:b7:8d:3e:11:12:69:19:8f:7d:e2:6a:
                    5b:96:9f:f3:7a:6c:f7:77:e9:3d:e7:61:cc:ad:e2:
                    2e:6c:ce:7e:52:0c:59:09:5e:cc:7e:8d:d9:2b:2c:
                    84:5c:fa:0d:2d:da:8f:e2:25:d4:e8:0d:ec:9c:a6:
                    2f:04:bb:1f:fa:81:e4:44:11:71:2f:e9:89:65:79:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:F8:83:AA:8F:23:26:DC:36:DA:F0:AC:DB:8F:36:01:02:F3:74
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/T5_4g6qPIybcNtrwrNuPNgEC83Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.86.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:70:e1:6c:c6:5e:d4:00:5a:9d:57:d9:08:c2:a2:52:8b:
         60:c5:36:80:f4:68:79:0b:52:5f:73:20:cd:07:0a:a5:a2:40:
         0c:85:97:51:ff:37:85:65:55:a8:37:56:81:f9:5b:aa:9c:f9:
         1f:6e:32:36:7f:9a:98:a4:79:01:51:7b:c5:12:3a:f3:9d:59:
         bd:aa:ac:5c:37:35:7a:2d:66:76:07:3c:d2:67:b1:14:00:37:
         ec:83:86:85:17:23:53:d5:9b:88:20:42:6d:44:89:37:ac:38:
         47:54:93:e9:ad:ca:6c:96:5e:1f:cc:47:8a:39:ea:a9:73:51:
         4f:ff:8e:df:0b:ef:93:f1:9a:ab:b0:c9:78:41:6f:8d:d9:48:
         23:30:b5:6f:17:0a:75:91:2d:7a:ca:75:77:e6:c0:b9:32:b5:
         3f:8b:63:1f:c0:c5:68:6a:a8:f6:98:6c:59:31:55:47:17:4f:
         23:b3:65:07:63:cf:0a:df:ec:09:07:9c:44:8b:29:78:8a:08:
         d3:3f:ec:30:34:53:30:4a:28:c7:2b:25:e2:e3:63:00:f1:c0:
         65:2b:b3:1f:5f:50:3e:de:d3:2b:7c:49:03:fe:46:47:ef:50:
         d8:5c:37:dd:90:1e:76:5d:34:2f:7d:de:89:95:9d:fe:82:d9:
         11:16:70:c4
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRGOUZGODgzQUE4RjIz
MjZEQzM2REFGMEFDREI4RjM2MDEwMkYzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWu6IQ9KBxdau1QbEJmAD8zIWuFal1eht2BFPaSr/A/7lVPNMP
b89fbbyAo9ahwcTEuWGWHgVmwpPY39ukLIbiH3y3lrFT8OCh90ssr7JgtVnfpcHG
uWpjJnYNjqMek4dzjdy8OvRLtU/dcbYPHxkowJeiWRzm3mz5ftGkN5cfAb8ts0yE
bmZIl5YJYvqW9hlJdcIZVXgRtM3omD6NXbK/czH0JRr6TDEE+BGLpN5E1tTS2/HX
LO+3jT4REmkZj33ialuWn/N6bPd36T3nYcyt4i5szn5SDFkJXsx+jdkrLIRc+g0t
2o/iJdToDeycpi8Eux/6geREEXEv6YlleRmhAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUT5/4g6qPIybcNtrwrNuPNgEC83QwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVDVfNGc2cVBJeWJjTnRy
d3JOdVBOZ0VDODNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AdtWMjANBgkqhkiG9w0BAQsFAAOCAQEAdLVw4WzGXtQAWp1X2QjColKLYMU2gPRo
eQtSX3MgzQcKpaJADIWXUf83hWVVqDdWgflbqpz5H24yNn+amKR5AVF7xRI6851Z
vaqsXDc1ei1mdgc80mexFAA37IOGhRcjU9WbiCBCbUSJN6w4R1ST6a3KbJZeH8xH
ijnqqXNRT/+O3wvvk/Gaq7DJeEFvjdlIIzC1bxcKdZEtesp1d+bAuTK1P4tjH8DF
aGqo9phsWTFVRxdPI7NlB2PPCt/sCQecRIspeIoI0z/sMDRTMEooxysl4uNjAPHA
ZSuzH19QPt7TK3xJA/5GR+9Q2Fw33ZAedl00L33eiZWd/oLZERZwxA==
-----END CERTIFICATE-----
Generated at Fri Jul 5 12:16:53 2024 by rpki-client on console-ams.rpki-client.org