Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/V9sYxSt2QZ45Y8VEXk6jor5Qdfg.roa
File:                     V9sYxSt2QZ45Y8VEXk6jor5Qdfg.roa (raw, json)
Hash identifier:          1creXhTjk9xASZRM4R3nd5LTQI07hU2cZcF6KCWrRDI=
Subject key identifier:   57:DB:18:C5:2B:76:41:9E:39:63:C5:44:5E:4E:A3:A2:BE:50:75:F8
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/V9sYxSt2QZ45Y8VEXk6jor5Qdfg.roa
Signing time:             Thu 15 Sep 2022 02:47:07 +0000
ROA not before:           Thu 15 Sep 2022 02:47:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17213
IP address blocks:        60.198.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=57DB18C52B76419E3963C5445E4EA3A2BE5075F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:bf:0b:48:f5:a7:95:e2:93:4e:e0:5b:a3:
                    f8:ef:5f:6b:f5:6e:b3:3b:5f:e7:fd:1e:1d:3b:b1:
                    7b:d7:d7:20:3e:88:60:36:d2:f6:19:40:e4:48:cc:
                    c5:ba:17:0d:8e:7a:66:38:2e:b9:2b:6d:b6:cf:b5:
                    cc:20:40:39:c7:bd:d9:65:db:6e:f9:d3:90:6f:a3:
                    79:1b:ca:47:40:6e:14:fa:18:4d:94:90:63:c5:15:
                    4e:a8:e3:53:21:17:96:e9:e9:02:fe:98:96:6e:ed:
                    b8:b2:14:ca:52:0a:e2:05:c5:6c:ce:d9:92:18:b2:
                    91:ee:1f:7b:e9:e3:de:90:ba:ce:3c:67:8f:e7:e1:
                    9a:57:41:6d:f0:3d:8e:00:a6:ca:13:4b:ef:c5:25:
                    40:ff:e5:ac:ca:4d:90:7c:47:bf:5e:f7:19:83:94:
                    f7:24:dc:7e:5d:08:2d:fc:70:4e:ed:92:3e:5a:1e:
                    aa:d8:8a:f2:f6:e5:a7:cf:cc:c0:c8:5b:6b:64:f7:
                    80:ad:2e:f4:12:44:c8:27:8a:2c:90:ff:59:24:fc:
                    2f:1d:9c:f0:0e:b6:0f:85:cf:96:90:2f:2c:d2:0a:
                    2c:b1:d6:9d:ee:af:80:32:1d:a6:fb:4b:db:a3:13:
                    f5:4a:6f:50:9a:75:5f:14:08:63:24:d9:42:a3:24:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:18:C5:2B:76:41:9E:39:63:C5:44:5E:4E:A3:A2:BE:50:75:F8
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/V9sYxSt2QZ45Y8VEXk6jor5Qdfg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:f2:cf:64:1b:e5:f1:14:cb:b2:9e:3a:1f:23:bb:8a:27:
         07:d2:da:8b:12:75:12:0a:cb:46:f1:dc:8c:8f:5f:85:67:60:
         94:14:16:5e:06:d7:52:6d:e4:bd:f4:8d:e0:e2:b9:0f:5b:fe:
         a8:2c:c3:e9:4b:13:74:b8:0c:6f:e0:e7:ed:f2:2e:73:5e:20:
         71:4a:cc:c6:b0:a3:ed:02:4d:88:6f:56:05:3b:06:02:16:10:
         b1:53:35:5f:cc:3c:0b:68:24:2c:49:c4:3b:37:37:ca:b3:50:
         a0:63:19:b8:65:d2:d3:58:08:9a:2f:ae:fe:a0:39:30:40:2f:
         4a:d2:e9:aa:f4:cc:1b:2b:ae:4c:4d:74:5b:6b:83:18:0f:21:
         fb:f1:3d:cd:79:a3:11:03:e4:3a:4b:2e:5a:b4:fc:55:fd:16:
         fb:e1:0f:97:61:9d:ef:76:75:25:d7:79:dd:11:ad:02:b3:db:
         21:ad:77:65:8a:c6:6f:54:9f:1a:4d:8d:ec:97:f0:9f:7d:30:
         01:e6:6c:d7:f7:a2:5e:93:4a:89:75:1e:ec:10:80:d3:1c:8d:
         f0:55:c2:94:71:87:cf:bb:da:5a:75:63:cc:45:03:13:fe:f3:
         df:da:26:b1:4c:3b:4d:1e:59:78:1b:92:48:8c:f8:1a:e5:ab:
         43:e5:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org