Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3APczRCyjwMgtE4_Twc_c48a4jQ.roa
File:                     3APczRCyjwMgtE4_Twc_c48a4jQ.roa (raw, json)
Hash identifier:          LkHznQVm9Mk0raoR7jIEfugvUfS6OQC26eA2wAoScXg=
Subject key identifier:   DC:03:DC:CD:10:B2:8F:03:20:B4:4E:3F:4F:07:3F:73:8F:1A:E2:34
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3APczRCyjwMgtE4_Twc_c48a4jQ.roa
Signing time:             Thu 15 Sep 2022 02:50:31 +0000
ROA not before:           Thu 15 Sep 2022 02:50:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DC03DCCD10B28F0320B44E3F4F073F738F1AE234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:80:77:bb:40:59:dc:c2:c6:6d:d1:06:f9:
                    e3:47:95:89:89:d1:ba:d5:bb:ca:13:2f:a6:b2:31:
                    2a:ff:28:ec:96:43:0a:6b:8a:06:cf:b3:dc:0b:54:
                    28:79:b3:79:7d:70:2c:8a:90:37:d6:60:db:c3:14:
                    68:bb:24:5f:44:cf:89:cd:c1:22:23:22:91:5b:e1:
                    21:bf:ee:7e:8e:33:42:48:7c:18:b0:24:69:e0:5d:
                    6e:f3:94:b5:86:eb:51:20:e8:47:f3:74:f6:6c:30:
                    d6:19:c0:99:b1:f9:b4:7f:4d:03:df:f0:d3:5b:b0:
                    e1:0a:10:9b:74:ad:15:e8:c7:4c:89:0c:fa:05:a4:
                    af:88:1c:d8:ba:69:49:02:d7:ad:cd:74:f7:0d:8d:
                    ce:23:21:5a:a0:04:fc:a6:1e:a9:7f:0f:f1:8c:7e:
                    87:5d:82:c4:84:52:c0:ca:bd:99:6a:83:c1:d4:51:
                    9f:36:f5:48:a4:10:c7:58:3d:3a:28:57:be:03:5d:
                    58:d4:1d:be:7a:b4:69:68:b0:03:4d:f5:8c:99:9c:
                    92:13:5c:e5:15:62:a2:ba:40:8a:64:e2:f4:58:a7:
                    5f:d1:ad:1f:ca:7d:fd:11:c1:07:c9:bb:93:77:79:
                    c5:96:d7:8a:f3:c2:63:84:e1:79:c1:77:0d:35:91:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:03:DC:CD:10:B2:8F:03:20:B4:4E:3F:4F:07:3F:73:8F:1A:E2:34
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3APczRCyjwMgtE4_Twc_c48a4jQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:5e:7b:43:fb:c6:1b:11:16:d3:79:c8:a6:a4:26:c6:d9:02:
         d9:34:e9:ea:4a:78:3e:63:ba:48:c7:41:cb:0a:e6:b3:53:5f:
         d7:03:e2:a5:02:57:7d:9c:4e:ff:98:63:16:38:3d:b5:0a:b7:
         8a:61:ab:a3:b1:b4:a4:d3:96:e6:c4:6f:a2:e5:14:5a:df:2b:
         ad:b3:ed:d8:7c:8f:c3:cb:80:26:aa:67:77:62:6a:64:53:ac:
         66:73:94:6f:b5:98:2d:5f:4f:d4:bc:34:32:16:39:d3:a9:fd:
         90:51:8f:ca:0a:8c:07:0d:5b:93:1b:8a:7b:0a:d8:08:ba:de:
         e5:58:4f:7f:4d:1f:4d:d0:7d:61:a1:de:7f:ad:89:b8:b0:61:
         bb:fb:9e:ec:42:8d:1c:c3:61:a5:ec:cb:9b:91:34:82:4c:53:
         57:53:7b:41:5f:bd:c5:63:c1:f0:65:b2:f6:16:92:c9:67:70:
         68:64:f2:bd:8b:1d:dc:16:5e:9d:81:74:6f:59:6a:ab:16:a7:
         58:53:51:89:00:f8:ce:15:3c:a6:f3:6f:b1:a9:9a:83:52:ec:
         74:9b:cc:f5:4c:8e:83:ed:24:82:19:d6:b2:35:9f:88:07:a7:
         eb:2f:1a:3c:73:93:f0:5d:45:f3:1b:d2:38:ee:29:cf:92:31:
         53:08:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org