Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/UiiQI_ysN8Jji97LO7ej7SKxdqA.roa
File:                     UiiQI_ysN8Jji97LO7ej7SKxdqA.roa (raw, json)
Hash identifier:          1vdV/FvCsXek6nC2xvERneUEkX//hWZRXPho0RNw2YI=
Subject key identifier:   52:28:90:23:FC:AC:37:C2:63:8B:DE:CB:3B:B7:A3:ED:22:B1:76:A0
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0B93
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/UiiQI_ysN8Jji97LO7ej7SKxdqA.roa
Signing time:             Mon 22 Apr 2024 07:43:51 +0000
ROA not before:           Mon 22 Apr 2024 07:43:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7483
IP address blocks:        103.229.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 May 2024 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Apr 22 07:43:51 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=52289023FCAC37C2638BDECB3BB7A3ED22B176A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:06:32:86:77:f4:c2:2e:77:45:5d:db:c0:
                    04:21:ad:e4:b0:67:78:47:c0:1d:1f:26:69:84:dd:
                    a0:8a:7d:45:b5:67:2d:78:83:47:96:ee:eb:14:df:
                    89:87:5a:a1:6a:f6:b6:a5:3a:80:45:17:ad:2e:e5:
                    d5:d0:95:1c:63:ba:ca:30:ae:00:51:06:df:b0:7e:
                    0e:9c:aa:90:13:d9:b9:8b:d0:60:79:a8:ae:17:bf:
                    05:ed:f8:80:66:6b:db:42:d2:7a:53:38:88:65:73:
                    5c:84:f3:07:c4:25:c6:32:4b:06:d1:6f:64:a9:73:
                    13:a8:b5:12:70:d4:fd:ac:fd:cc:b4:a7:1c:41:1e:
                    2c:31:4a:e9:56:98:9f:c7:f0:76:9b:4b:50:35:7a:
                    8a:85:65:15:e2:9b:cd:af:8f:aa:c4:7e:30:16:80:
                    c1:71:dd:fe:80:f9:18:35:8d:67:d9:76:66:d5:10:
                    b1:b3:59:c1:32:6c:0c:9b:9e:d6:c6:ce:a6:f5:c0:
                    23:c6:8c:fb:9a:0e:4f:6f:9f:b2:0b:be:b4:1f:32:
                    06:75:8c:a7:ac:49:dd:0a:9d:cc:33:fa:ee:8d:25:
                    80:9c:0c:62:a8:9c:fd:9d:2a:59:83:7f:27:69:aa:
                    40:07:28:f4:ff:b8:94:ab:e1:ad:1f:3d:4f:3d:e1:
                    43:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:90:23:FC:AC:37:C2:63:8B:DE:CB:3B:B7:A3:ED:22:B1:76:A0
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/UiiQI_ysN8Jji97LO7ej7SKxdqA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ff:36:87:e0:17:c1:5b:6c:ef:ba:b7:a3:82:0c:35:dd:9c:
         95:cf:d2:88:76:40:b9:27:41:2c:0b:3c:51:be:c1:f9:de:47:
         57:a6:7e:bb:07:25:89:fd:6d:f3:61:d4:4b:f5:a5:3b:73:73:
         a0:92:66:d5:ed:63:6c:fc:42:e3:dd:b3:d8:6a:63:18:37:48:
         da:bc:89:64:6d:6f:37:96:be:6c:81:10:da:96:37:61:6e:f4:
         f8:d8:69:c9:5c:4c:5f:b9:ed:19:16:1b:8b:91:bf:53:de:1f:
         28:45:32:7e:ef:6c:5c:00:76:62:e3:07:73:34:28:e3:15:9f:
         ae:bd:93:e0:67:ad:c8:27:6b:4c:8a:e4:3a:8b:09:f3:00:e9:
         4a:98:fd:9d:8d:c5:e0:f7:d3:64:f6:d5:63:74:b2:10:ed:51:
         7a:a8:e8:51:d9:43:40:74:50:db:d3:2d:3a:30:50:9c:b1:a1:
         c2:d7:1a:c4:2e:4d:4e:c0:3c:ac:c8:f9:41:42:5e:12:08:67:
         63:b1:3f:cc:00:0b:97:47:04:11:f6:7f:ec:6c:44:3a:fa:4b:
         5e:c5:f8:f5:2e:8d:3a:64:6c:bf:9f:7d:16:45:cc:fa:cd:31:
         1b:08:66:06:bd:9e:eb:3a:ab:eb:14:fd:e9:64:be:86:ea:09:
         44:a3:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org