Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/6QiVh2NNEf3_06gB-D9wGUGKrdg.roa
File:                     6QiVh2NNEf3_06gB-D9wGUGKrdg.roa (raw, json)
Hash identifier:          9rC7ZB7+slV0lpege8q1Y5ZfDw7cLNIw240zbUp/xQ0=
Subject key identifier:   E9:08:95:87:63:4D:11:FD:FF:D3:A8:01:F8:3F:70:19:41:8A:AD:D8
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/6QiVh2NNEf3_06gB-D9wGUGKrdg.roa
Signing time:             Thu 15 Sep 2022 02:44:11 +0000
ROA not before:           Thu 15 Sep 2022 02:44:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38047
IP address blocks:        103.106.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 15 02:44:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E9089587634D11FDFFD3A801F83F7019418AADD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:16:e8:41:06:e2:bb:b0:48:2e:38:2e:06:
                    39:8a:c5:29:38:ee:da:15:cc:47:f4:e2:9f:a2:7f:
                    e1:4d:5e:1b:22:b9:70:e8:b1:be:63:44:f7:66:72:
                    29:c3:0d:d9:1a:8f:8f:8d:4b:7b:a9:08:3c:c1:94:
                    60:c2:5b:00:b6:ce:0d:72:f1:85:ce:60:67:4c:b3:
                    83:1a:76:66:8b:09:34:60:8f:98:f3:97:64:87:df:
                    38:59:e6:ff:ca:1d:0b:4f:61:ac:99:5a:45:7d:9c:
                    12:20:3a:9d:26:ff:d4:cb:b1:43:99:51:10:e0:ac:
                    2f:43:98:fd:c0:87:80:5e:10:31:d7:f0:d3:98:5f:
                    7d:d3:05:0a:bc:11:65:a6:1f:1c:42:42:7f:7f:6b:
                    94:72:f5:cf:19:13:08:d5:37:32:dc:b3:8a:9b:46:
                    72:e1:00:88:3f:3b:44:aa:c3:e3:05:45:4a:07:10:
                    6a:20:5e:09:9a:71:b2:78:5c:cb:32:d8:13:de:2d:
                    55:19:71:cb:fb:37:e5:12:99:c1:61:1f:0f:4c:15:
                    b2:b4:4e:4d:93:e8:cb:4e:6e:3b:e2:95:9b:5c:39:
                    26:7e:db:00:9d:e4:3c:f4:4d:0e:ca:5b:0f:64:ba:
                    e1:2e:15:1a:e8:52:60:6f:47:96:71:25:c9:09:62:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:08:95:87:63:4D:11:FD:FF:D3:A8:01:F8:3F:70:19:41:8A:AD:D8
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/6QiVh2NNEf3_06gB-D9wGUGKrdg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:70:78:cd:fc:78:36:f9:d9:86:b0:bd:f4:c7:80:4b:8d:
         07:c2:3b:13:99:ba:fc:e2:ea:ee:63:a1:3e:6c:e6:f0:57:c9:
         c2:cb:5f:ef:e9:3e:9f:6d:bf:64:ce:32:60:ab:11:48:6e:12:
         fa:fb:f3:1f:02:25:6d:a7:7c:26:5d:ca:64:81:bb:bf:6f:07:
         76:83:68:e3:27:b5:b0:22:4b:19:ef:f4:04:32:6d:49:91:6a:
         d3:61:cd:c2:01:fe:4d:cd:00:f2:c1:cf:0b:cd:92:10:7c:73:
         18:f1:d0:88:3f:3d:33:ba:d8:5c:f9:9d:a4:db:ca:e4:93:07:
         95:2c:b2:f6:34:44:65:d4:48:f4:c3:e8:fc:21:14:4a:31:a1:
         e1:af:84:91:60:fa:36:63:e4:ef:e1:c1:8e:3e:26:02:67:8e:
         ef:96:f2:52:e9:cf:56:74:80:0e:db:bd:f3:a1:ad:31:ed:57:
         cf:22:17:32:88:f5:a3:18:eb:b3:d1:af:a5:9a:70:34:d0:bf:
         35:df:f2:56:55:3c:3b:68:f8:9a:71:26:42:11:42:94:88:11:
         1d:e2:96:bc:b5:81:08:15:8a:c4:11:b0:48:13:bf:16:e2:a8:
         5e:68:78:d9:7c:e4:97:15:3f:5b:66:e8:23:4e:74:55:99:36:
         be:f8:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:51 2023 by rpki-client on console-ams.rpki-client.org