Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/2TlTZd-tujIUYlC2cuAq22ypO3o.roa
File:                     2TlTZd-tujIUYlC2cuAq22ypO3o.roa (raw, json)
Hash identifier:          WSzDBOwbxyXFPyPBrOUhMeUmZpWwzMu5CdfXOTMcBsU=
Subject key identifier:   D9:39:53:65:DF:AD:BA:32:14:62:50:B6:72:E0:2A:DB:6C:A9:3B:7A
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BC3
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/2TlTZd-tujIUYlC2cuAq22ypO3o.roa
Signing time:             Mon 27 Mar 2023 23:14:03 +0000
ROA not before:           Mon 27 Mar 2023 23:14:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3011 (0xbc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:03 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D9395365DFADBA32146250B672E02ADB6CA93B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:dc:ef:b8:a2:5c:16:b9:0b:aa:d9:0e:55:
                    6b:d2:69:5c:06:89:01:8f:15:bb:53:cb:9c:e5:77:
                    f7:37:b4:06:5c:94:a4:59:9b:0a:6d:47:f0:8a:a4:
                    71:d1:57:24:4b:09:04:27:ee:0a:af:84:75:22:6d:
                    10:ea:12:5b:df:5d:2a:5c:17:15:ce:42:bd:bb:51:
                    b0:c3:78:fa:40:8e:39:c5:d6:51:39:cf:de:cc:4b:
                    d8:e3:d6:fd:d8:d9:7f:09:e3:91:92:8a:11:35:6c:
                    96:14:66:3c:f8:91:35:10:3d:b4:92:dc:4e:e8:1e:
                    4a:b3:ab:98:48:aa:79:fd:32:09:65:f2:55:71:d0:
                    3a:ce:f2:89:85:25:c3:69:c2:31:98:8f:7c:91:1f:
                    a5:81:f5:8c:23:34:3f:68:e8:d9:0c:47:ef:d8:5d:
                    a3:77:a3:b7:81:70:38:12:b9:e8:70:ac:c3:ab:67:
                    81:fe:02:4e:da:da:68:b7:90:d6:df:98:f7:e2:82:
                    38:45:0e:f2:09:c6:76:d4:84:1b:ee:9a:60:ce:75:
                    54:a0:84:08:bb:e9:02:cf:aa:c3:6f:c8:4a:26:47:
                    40:05:6e:f6:70:d5:bc:7d:63:73:9b:11:90:99:6a:
                    0b:df:a9:fc:99:59:25:27:0c:d5:6a:ce:7c:64:0d:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:53:65:DF:AD:BA:32:14:62:50:B6:72:E0:2A:DB:6C:A9:3B:7A
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/2TlTZd-tujIUYlC2cuAq22ypO3o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:3f:43:74:58:a9:b0:86:e4:31:fa:20:83:9e:90:aa:0e:21:
         c0:1a:52:0d:02:e2:81:56:bf:17:bf:e2:29:2b:22:bd:e8:2b:
         d3:0f:c6:83:8a:e4:60:d6:1a:86:a0:57:4d:7a:8e:a7:9d:63:
         29:3e:31:dc:fd:cb:86:3e:db:f0:4d:79:e4:d0:16:91:ba:23:
         76:77:98:f1:72:6b:4b:ac:fd:b7:25:bb:d4:c6:28:35:5a:de:
         cb:f7:ed:df:c4:78:c3:24:69:11:84:9f:b4:62:6f:0c:4b:45:
         8b:e0:ab:f9:25:b8:45:60:98:1a:db:8c:ce:7e:69:61:43:6c:
         96:b2:e9:c6:b9:7a:66:3a:19:7a:b5:73:93:30:df:33:3e:24:
         f8:fe:8b:06:3b:04:97:c5:79:3e:b8:db:67:5a:41:fd:c0:5b:
         b1:f6:07:26:9a:53:51:d5:13:e8:ef:df:8c:e9:7d:9f:8c:3b:
         f6:a4:3c:7d:3b:61:0e:31:d8:5b:ea:f0:63:d2:4a:97:c5:d6:
         d6:32:e0:74:cd:56:5f:2d:6c:fe:7b:48:59:cc:f1:be:82:98:
         cd:ef:95:88:37:f2:05:59:14:18:20:e9:c0:60:34:59:b9:56:
         a4:bc:c5:ee:4a:96:d0:81:aa:13:2a:08:01:de:8a:be:5a:57:
         83:0d:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org