Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3btoSM71c6suay4wpvvX1F6Jgfw.roa
File:                     3btoSM71c6suay4wpvvX1F6Jgfw.roa (raw, json)
Hash identifier:          N4mSVRhheXT+QqEU/BKPRw28kETOuMrwomwCYwXYze0=
Subject key identifier:   DD:BB:68:48:CE:F5:73:AB:2E:6B:2E:30:A6:FB:D7:D4:5E:89:81:FC
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3btoSM71c6suay4wpvvX1F6Jgfw.roa
Signing time:             Thu 15 Sep 2022 02:50:33 +0000
ROA not before:           Thu 15 Sep 2022 02:50:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DDBB6848CEF573AB2E6B2E30A6FBD7D45E8981FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:28:32:e6:21:cf:c9:47:b7:75:48:ee:b3:
                    bb:41:af:5d:de:27:a0:0b:16:2c:13:6d:2e:3a:af:
                    b2:4e:fd:23:1e:de:2f:a6:5f:0b:6b:c3:10:d3:0e:
                    20:bb:66:9f:43:fd:1e:77:52:5f:97:0a:a1:d0:01:
                    c4:1f:7e:c8:5c:5f:45:a2:d3:86:d7:b6:fd:31:eb:
                    68:8e:73:91:0e:f2:32:71:0d:77:a3:3d:d6:ec:74:
                    bd:2b:de:b1:dd:77:65:18:7e:ff:01:c9:ad:6a:0c:
                    6d:86:fa:d4:be:36:8f:6a:5b:8e:fd:7c:9e:69:c2:
                    ab:62:f1:c3:2a:57:64:61:56:97:2b:d1:a0:b7:b9:
                    57:39:aa:82:cf:68:a7:8a:79:e8:0e:c0:af:d1:06:
                    0b:82:6f:14:90:e6:3d:13:c1:69:03:43:75:57:fb:
                    bf:49:d1:ed:1e:ab:fb:0f:7a:8c:2c:91:45:4e:ed:
                    e7:73:1c:3d:97:4e:5c:5d:07:90:6c:b8:db:4d:5e:
                    f5:1f:73:08:7f:b3:09:7d:f0:fa:b5:24:a7:54:60:
                    1a:9d:58:53:5b:f3:e9:2d:48:54:04:7c:ac:90:e9:
                    19:e3:4a:88:d0:bb:a1:e2:1e:22:42:ab:2e:a5:02:
                    de:33:5a:99:e6:07:11:d9:89:b5:87:f2:c6:7f:33:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BB:68:48:CE:F5:73:AB:2E:6B:2E:30:A6:FB:D7:D4:5E:89:81:FC
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3btoSM71c6suay4wpvvX1F6Jgfw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:e7:ef:e0:bf:f1:3d:8d:06:1c:79:69:0e:e1:42:1e:08:
         b0:92:22:29:fe:04:30:90:52:89:d6:ae:28:2f:d4:44:2b:f6:
         d4:ce:9e:04:cd:4c:0c:da:e7:37:a9:35:78:5b:cb:5f:7e:09:
         5c:60:4f:27:70:61:a2:b2:a5:b1:ec:82:7a:03:ea:f7:e1:81:
         3a:cf:e3:ff:87:12:88:f4:fe:19:9f:53:6c:42:92:8e:f2:1d:
         3a:f2:02:c3:3e:24:f3:d2:09:44:1d:6b:ad:14:6f:ed:83:78:
         e7:d5:3b:df:57:58:34:85:bb:71:37:6c:cf:6f:ba:ac:2c:7e:
         92:8a:3e:9e:5e:3a:09:37:20:0e:56:17:17:89:a6:06:f1:17:
         26:43:1c:86:20:1d:44:39:b3:ba:7d:cd:24:d3:76:03:53:78:
         06:59:ec:ee:8b:f0:e1:15:d3:aa:03:63:7a:13:ac:17:e5:cc:
         7d:cc:6f:a9:8b:2c:b7:64:bb:0e:28:25:78:1c:73:93:45:70:
         ec:63:4c:bf:f0:04:45:5c:a4:e5:f2:e7:79:a7:c0:66:4f:26:
         5d:80:48:6a:9f:ca:17:73:22:e7:ae:f7:0d:ea:0f:ba:d3:84:
         9e:71:19:31:f6:e6:1f:9f:fb:3c:7a:a8:d5:6d:58:81:59:6d:
         47:cf:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org