Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zl6wImf3x6_K4bCpnxgpkdVH_zk.roa
File:                     Zl6wImf3x6_K4bCpnxgpkdVH_zk.roa (raw, json)
Hash identifier:          bg2YEv6mnp+l05DSAynnFcFsx6amNFSqEETrewA2wHI=
Subject key identifier:   66:5E:B0:22:67:F7:C7:AF:CA:E1:B0:A9:9F:18:29:91:D5:47:FF:39
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zl6wImf3x6_K4bCpnxgpkdVH_zk.roa
Signing time:             Thu 15 Sep 2022 02:47:35 +0000
ROA not before:           Thu 15 Sep 2022 02:47:35 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        203.105.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:35 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=665EB02267F7C7AFCAE1B0A99F182991D547FF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:9c:71:29:46:54:5f:19:ac:aa:df:5a:cb:
                    3d:8b:2b:3f:f4:ff:3f:c7:68:39:18:72:c1:4a:9b:
                    0c:af:e1:90:85:b0:19:d1:a7:05:5b:2f:71:83:b4:
                    fa:47:ca:dd:4e:3b:22:29:c3:d2:8c:7a:04:31:84:
                    0d:ea:2c:54:6e:21:25:71:8c:2e:9b:db:35:d4:1e:
                    63:ed:3d:6b:49:01:22:0e:67:42:bb:31:13:2d:a4:
                    bf:fc:35:d8:01:62:5c:3e:87:dd:b1:ee:52:fb:45:
                    ab:0c:bc:6a:c7:5e:ca:96:e0:2d:2d:b0:7c:22:ba:
                    85:02:bd:53:4e:f7:81:bb:e4:9f:b4:dc:cd:bf:d1:
                    64:01:bc:9f:1e:ba:69:ce:c0:fe:a5:17:a6:0f:d1:
                    94:c8:0a:51:59:d7:0a:79:6e:51:af:85:d7:e6:2e:
                    dc:9f:c1:af:d4:f1:81:12:3c:46:66:80:a6:85:eb:
                    d1:49:9a:b7:76:b7:31:ce:f6:ca:66:c5:e8:2e:02:
                    7a:04:4c:31:2e:78:7e:ad:54:fe:84:b0:e2:56:6e:
                    62:11:52:bb:8e:a7:c8:02:ff:77:77:08:dc:ac:57:
                    ab:a0:52:bd:ca:b6:7f:9e:51:61:bc:fa:a0:e2:62:
                    b5:a2:5b:cf:80:8e:5b:82:96:55:78:6c:59:ab:d0:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:B0:22:67:F7:C7:AF:CA:E1:B0:A9:9F:18:29:91:D5:47:FF:39
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zl6wImf3x6_K4bCpnxgpkdVH_zk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:84:be:11:88:01:c9:31:61:63:3c:f8:dd:a9:20:23:d4:e1:
         84:6a:2d:7e:2e:41:b0:52:62:b1:1b:dd:43:a6:a4:05:3a:d6:
         a5:61:03:c7:7e:53:ab:38:4b:ff:e0:a7:0f:07:0b:33:a8:22:
         1d:a3:07:73:ac:0d:ff:8b:46:20:35:54:61:2a:d5:da:c7:5b:
         0f:85:22:ab:b5:6a:6b:d7:13:ae:df:69:26:dc:f6:52:51:24:
         70:51:6c:09:3d:a2:9f:d2:d9:97:ec:6d:af:81:ef:68:08:67:
         42:aa:e1:02:19:44:d6:fe:52:fa:fd:cf:ec:0f:5a:f3:85:92:
         2a:1e:7a:33:0d:26:71:79:06:b6:64:5c:f4:3f:97:13:53:8c:
         a3:02:32:89:69:c5:fe:80:9a:38:1a:5c:32:eb:53:4e:a7:2b:
         eb:8d:24:12:0f:97:a0:d8:ae:ef:33:94:27:bc:24:8e:82:69:
         68:90:3f:32:ae:bc:09:be:cf:f4:66:35:15:a2:ec:fa:7b:d7:
         3c:58:67:36:2c:5e:b5:8f:70:af:21:6a:f5:13:57:97:dd:52:
         e4:97:46:28:9a:69:6e:7a:45:72:dc:6b:13:1a:ed:5e:1b:82:
         69:23:96:d9:88:26:ed:58:05:e0:6d:de:4b:34:9e:3b:85:4f:
         5b:ce:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org