Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/b8vd82kmsefyCz1Kci7axXS91OI.roa
File:                     b8vd82kmsefyCz1Kci7axXS91OI.roa (raw, json)
Hash identifier:          T05TUhmAlKsXJqy57ccwkYW2z88otABhEqbSG6YINAU=
Subject key identifier:   6F:CB:DD:F3:69:26:B1:E7:F2:0B:3D:4A:72:2E:DA:C5:74:BD:D4:E2
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0CB8
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/b8vd82kmsefyCz1Kci7axXS91OI.roa
Signing time:             Mon 26 Aug 2024 05:25:53 +0000
ROA not before:           Mon 26 Aug 2024 05:25:53 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38047
IP address blocks:        103.106.52.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Aug 2024 04:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Aug 26 05:25:53 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6FCBDDF36926B1E7F20B3D4A722EDAC574BDD4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:0a:4d:82:96:41:64:ad:a3:09:8b:e8:c1:
                    58:19:33:5c:5f:52:15:aa:75:83:1f:a7:1f:32:cb:
                    1e:bf:a6:52:55:cd:d5:20:c0:7b:30:c8:0a:26:b7:
                    7f:14:b3:cd:24:79:28:a9:03:bc:71:71:9e:0b:b9:
                    90:15:31:d5:1f:3e:7e:76:4a:1e:7d:fd:9a:28:86:
                    ef:11:ec:eb:c3:68:a0:44:96:f9:c0:35:2b:62:a4:
                    5d:53:53:21:43:61:73:8f:ee:16:8b:63:77:04:b5:
                    f4:44:6f:1f:94:7c:be:2c:e2:dc:24:fc:db:82:c0:
                    c0:16:b7:4a:16:e1:a5:4a:da:a8:0c:00:fd:26:2c:
                    fa:87:2e:c1:ec:85:33:3e:55:88:4d:3a:ae:e7:d1:
                    4b:06:f3:98:73:54:3b:34:ff:0e:4b:c8:b3:6a:0f:
                    bf:7a:01:b4:43:08:cb:1a:60:2c:aa:ff:df:b1:c4:
                    09:22:2a:c2:48:bb:1e:b1:3c:bd:22:f1:a6:5e:c1:
                    f9:dc:4b:e0:59:4a:c6:e6:ee:9a:5c:bf:71:28:53:
                    07:32:3f:b8:59:c2:9d:62:de:a5:89:44:3a:52:f0:
                    1a:5f:11:5c:b6:b4:2d:57:fb:f3:62:e3:24:6c:0e:
                    42:37:e6:79:ce:66:57:06:8d:a9:a2:1b:d7:c0:f0:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:DD:F3:69:26:B1:E7:F2:0B:3D:4A:72:2E:DA:C5:74:BD:D4:E2
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/b8vd82kmsefyCz1Kci7axXS91OI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:61:bb:36:d1:ee:4b:04:62:3e:02:10:62:71:56:5e:96:
         e0:f9:ce:d9:a0:3d:74:95:03:d6:eb:76:ab:ca:e1:d3:7d:04:
         b1:98:73:7e:cf:3b:42:67:b6:98:1e:de:a8:d0:c2:4f:f3:bb:
         e7:f0:c3:a3:fa:9e:03:8d:89:e5:5c:35:a8:94:d5:e1:05:85:
         07:85:80:02:b3:6b:be:e3:a3:5e:3b:7d:17:ed:f4:98:52:01:
         d7:a5:f4:e1:b1:54:29:41:66:25:b3:87:86:20:04:f2:c0:6c:
         17:7b:8c:f0:2e:8c:67:bb:e3:2a:4c:53:ad:3c:b3:ac:10:4e:
         49:22:9a:86:32:2a:d5:4a:c3:0f:3c:b2:59:c8:b9:2f:43:7e:
         3b:20:4c:1b:14:40:e1:5d:03:c1:33:cd:66:63:3e:21:f4:b5:
         5f:20:3a:74:0a:ae:76:f1:4e:a7:7c:1f:9b:7a:d9:33:c8:92:
         ff:ad:20:76:c0:f5:94:5f:de:34:65:11:e9:08:7c:0f:eb:ff:
         57:05:9e:9c:5e:b3:1f:83:b1:32:bd:12:4d:a5:8d:f2:66:51:
         47:8e:3a:26:a1:26:18:b3:c1:57:11:02:ba:3e:23:bf:9f:9b:
         52:52:68:75:99:f7:ba:58:32:35:71:f7:46:d5:f9:f2:0c:21:
         a0:4d:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 06:12:37 2024 by rpki-client on console-ams.rpki-client.org