Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bvZRkVEIVNtM3mqt9ghJ-T9FPdY.roa
File:                     bvZRkVEIVNtM3mqt9ghJ-T9FPdY.roa (raw, json)
Hash identifier:          fTxLrNbHiQ84hfaI68gO8N5VfFPWOIMvHIYePUv9zQg=
Subject key identifier:   6E:F6:51:91:51:08:54:DB:4C:DE:6A:AD:F6:08:49:F9:3F:45:3D:D6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       1031
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bvZRkVEIVNtM3mqt9ghJ-T9FPdY.roa
Signing time:             Thu 19 Oct 2023 03:23:24 +0000
ROA not before:           Thu 19 Oct 2023 03:23:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18106
IP address blocks:        219.86.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 29 Oct 2023 07:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4145 (0x1031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Oct 19 03:23:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6EF65191510854DB4CDE6AADF60849F93F453DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:16:46:ce:16:10:f8:1d:dd:cf:0b:59:37:
                    67:6b:46:65:29:4c:ed:a0:00:0c:5f:af:61:5d:e7:
                    23:1b:8b:19:41:0d:42:50:26:e6:72:0b:39:68:96:
                    bc:65:83:7a:81:46:c6:8c:69:a0:59:93:40:01:87:
                    b4:80:98:32:ec:1d:5e:fc:57:5a:ad:75:6e:80:11:
                    8a:ba:95:d0:86:02:bd:4b:c1:da:43:ea:87:a9:e3:
                    10:97:f7:69:bf:b9:19:9b:26:39:9e:e3:32:97:a9:
                    aa:95:bf:6e:6c:63:66:82:3e:33:1f:dc:12:c9:55:
                    97:95:93:1c:34:c7:7c:7d:b7:59:02:5f:f8:79:75:
                    f8:d2:68:d8:b3:ae:cd:cc:7e:32:2f:51:f4:4f:11:
                    21:d4:a5:65:da:ed:c8:8a:c1:44:df:74:a2:2b:51:
                    55:75:d4:a7:ee:75:67:3c:6b:42:63:a7:3d:8c:85:
                    48:ce:06:75:75:56:b5:51:58:b7:35:25:3d:d7:15:
                    41:1d:c9:86:d4:2d:7a:df:85:2a:d1:bd:34:77:47:
                    82:36:05:5e:53:b7:1b:81:cf:0d:c5:30:de:79:0d:
                    9e:92:48:6a:4d:f3:6c:86:4a:53:93:ba:17:60:f3:
                    75:9a:9d:60:d5:0e:1b:95:12:7b:29:b3:66:a2:1d:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:51:91:51:08:54:DB:4C:DE:6A:AD:F6:08:49:F9:3F:45:3D:D6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bvZRkVEIVNtM3mqt9ghJ-T9FPdY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.86.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:95:ca:f2:01:54:3f:e4:75:13:2b:5d:d9:0e:c6:5c:21:af:
         87:f8:4d:1a:e5:cf:e1:46:59:22:5c:1f:0f:cd:63:8f:ce:c9:
         e9:4f:cc:c8:d4:aa:0f:9d:6d:a6:7e:66:e0:16:8a:93:4a:02:
         ab:3f:49:a2:5b:a7:1b:79:d5:13:c8:59:7f:3f:37:87:17:28:
         28:7f:0c:4d:95:2c:d8:b8:5c:6e:36:6b:e4:4d:e0:52:88:fd:
         83:b7:e0:d5:1c:39:1a:4c:1b:4e:b3:cf:f2:0c:30:e2:68:83:
         83:11:50:b6:43:d5:99:ca:39:66:8d:9b:85:f2:63:ce:73:41:
         d9:e9:f2:06:10:89:7a:8d:f9:9d:9b:a0:ad:6e:00:3c:dd:ba:
         12:a5:8c:e7:96:7b:2e:73:ef:1a:19:70:29:fa:dd:ef:95:c7:
         75:f6:c0:b8:80:4c:9e:2a:25:80:32:11:3e:02:a1:e9:b9:49:
         6a:c7:c8:f0:b3:f8:d6:99:35:df:66:24:f9:0f:3b:4e:87:e2:
         39:5d:9a:e2:7e:d1:57:98:dc:83:29:ba:02:f9:c7:86:4d:e3:
         3c:e1:42:f2:40:e0:89:7a:75:82:31:ff:63:8b:bc:bd:49:90:
         12:be:ba:8b:a7:7c:db:4d:14:8a:97:61:f1:d4:00:44:2b:d3:
         51:45:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:18 2024 by rpki-client on console-ams.rpki-client.org