Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/lgaM3-74ITHPo0e6QRsD8mlnA4Y.roa
File:                     lgaM3-74ITHPo0e6QRsD8mlnA4Y.roa (raw, json)
Hash identifier:          jNPzs3jD57biL3O12pGZLBVs6AXncFapQQjnPLOPPbU=
Subject key identifier:   96:06:8C:DF:EE:F8:21:31:CF:A3:47:BA:41:1B:03:F2:69:67:03:86
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       9E
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/lgaM3-74ITHPo0e6QRsD8mlnA4Y.roa
Signing time:             Tue 21 May 2024 10:33:10 +0000
ROA not before:           Tue 21 May 2024 10:33:10 +0000
ROA not after:            Fri 04 Oct 2024 07:31:42 +0000
asID:                     2914
IP address blocks:        202.160.64.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 07:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: May 21 10:33:10 2024 GMT
            Not After : Oct  4 07:31:42 2024 GMT
        Subject: CN=96068CDFEEF82131CFA347BA411B03F269670386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:a5:52:bb:64:fe:4d:c1:26:9e:39:d0:94:
                    c1:52:ce:d8:85:98:c0:58:93:46:61:cb:2d:d6:c5:
                    69:29:91:63:a3:f4:73:5a:6d:68:dc:2b:9a:93:b6:
                    05:85:17:30:7b:a1:e9:87:4a:22:ee:bc:1a:bf:4e:
                    0f:33:81:ae:a1:11:94:4e:95:80:24:6b:fd:18:cd:
                    63:0e:bd:a3:26:84:6d:a2:bc:0f:54:14:95:79:2a:
                    69:5f:7e:9d:96:24:cb:08:4f:f5:13:99:d6:41:5c:
                    54:97:6c:dd:97:1a:d9:62:d2:3f:cc:32:0d:6c:cb:
                    42:09:1b:de:96:bd:b0:40:14:33:17:18:a8:f3:ec:
                    8e:21:8f:d4:72:7d:45:bc:67:4d:ca:22:3c:5d:2f:
                    d9:8e:bd:35:e8:2d:93:f0:42:23:f5:e0:64:92:16:
                    05:2c:14:ff:88:58:53:3e:61:17:f0:28:29:aa:1e:
                    4a:3c:09:91:b6:84:dd:68:08:07:f4:1a:b8:8f:18:
                    74:24:8d:50:95:a2:c9:21:4d:ca:3f:14:77:03:b0:
                    c6:83:da:ae:32:01:be:34:cf:f1:41:60:52:4c:50:
                    e6:7e:2d:5f:45:9e:ec:35:98:c4:36:51:9c:45:4d:
                    7d:42:72:cd:69:39:ce:18:d9:e9:0c:91:20:43:b0:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:06:8C:DF:EE:F8:21:31:CF:A3:47:BA:41:1B:03:F2:69:67:03:86
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/lgaM3-74ITHPo0e6QRsD8mlnA4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:be:5f:05:f9:48:b8:00:82:d3:56:aa:79:65:a0:94:62:35:
         84:09:bd:00:0e:f6:52:3f:8c:84:c7:64:d0:b4:f8:cf:cc:0b:
         94:58:d5:14:9b:de:d2:8d:6a:98:97:96:22:2c:10:62:cc:90:
         73:44:7a:a1:d8:1f:27:c3:80:09:74:ab:e3:f8:b0:c2:87:05:
         6b:92:15:19:e5:a5:e3:88:bd:31:f5:53:49:5f:83:37:e1:19:
         67:d5:a2:44:59:8b:dd:6b:05:96:ec:f3:ee:c7:49:6e:f4:c7:
         f3:e6:f1:c8:a7:94:0c:d9:03:a3:e1:a4:cc:52:21:c3:2d:04:
         9d:5b:f3:01:f3:91:8a:87:1a:e4:68:93:98:c9:80:71:04:f6:
         0d:50:2c:ba:bc:40:ff:e1:8b:90:26:7a:a0:41:c5:c9:57:5d:
         b0:dc:ba:cb:48:41:49:7d:4d:3d:dc:29:41:b0:b8:92:6b:02:
         39:4d:1f:2c:a7:c2:d6:4b:4d:49:7b:a7:81:d2:5f:7a:68:f8:
         d1:f7:23:6c:6d:f8:ad:96:70:49:50:78:c4:14:8b:02:df:06:
         09:c1:6f:71:b4:ff:63:99:e8:f8:7f:9b:c8:6c:56:1d:71:b1:
         72:4f:8b:c5:32:ea:bc:e8:04:aa:b7:89:4b:fe:3e:ce:9f:e1:
         b0:fa:16:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 12:19:47 2024 by rpki-client on console-ams.rpki-client.org