Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/70g6c9P0_xy2F09pmTCgxyTalDo.roa
File:                     70g6c9P0_xy2F09pmTCgxyTalDo.roa (raw, json)
Hash identifier:          nhvdCcf8wn6IbuP/6kyY/vVnMockd41c3UcqjCpS/9w=
Subject key identifier:   EF:48:3A:73:D3:F4:FF:1C:B6:17:4F:69:99:30:A0:C7:24:DA:94:3A
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BD1
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/70g6c9P0_xy2F09pmTCgxyTalDo.roa
Signing time:             Mon 27 Mar 2023 23:14:08 +0000
ROA not before:           Mon 27 Mar 2023 23:14:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24168
IP address blocks:        2405:8700:3000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:08 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EF483A73D3F4FF1CB6174F699930A0C724DA943A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:a8:bd:80:28:07:85:bc:87:0a:fd:de:5a:
                    36:45:75:9f:10:7f:0d:71:b9:61:15:7f:cc:05:df:
                    0a:33:9a:21:c6:30:dc:cf:0b:5a:d6:6e:8c:c5:e7:
                    15:0e:11:96:39:53:bf:9d:99:16:19:da:4e:50:12:
                    dd:26:45:8f:8c:c6:53:d9:e4:44:e6:1d:0a:86:27:
                    cd:cb:fc:89:0d:3a:df:2f:b3:c6:b0:01:49:19:1d:
                    6a:aa:7f:8e:7d:d4:3a:5b:49:c7:da:40:82:47:45:
                    b0:12:0c:60:64:d2:18:31:2c:3d:e7:44:0b:70:08:
                    12:61:df:8f:82:af:82:9d:b9:79:eb:29:7d:13:8e:
                    1d:4b:fe:f0:a9:12:75:97:14:36:25:bd:7e:5e:35:
                    dd:da:35:fb:a7:36:33:45:13:f8:0a:e1:83:84:ea:
                    17:84:99:6f:ad:28:0a:d5:c3:e4:c7:7b:e7:6b:4b:
                    97:11:73:0e:28:5a:d3:a5:57:87:c9:59:99:65:61:
                    55:a7:95:3b:e8:45:09:27:74:23:1c:60:68:2e:cc:
                    c3:73:31:2f:ed:81:f1:26:d2:41:db:49:95:14:f1:
                    92:99:61:97:5f:62:c8:e1:01:d6:66:37:55:68:e6:
                    25:97:6c:9d:16:59:58:7d:f2:fb:50:0c:5f:f1:19:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:48:3A:73:D3:F4:FF:1C:B6:17:4F:69:99:30:A0:C7:24:DA:94:3A
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/70g6c9P0_xy2F09pmTCgxyTalDo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:4d:70:f2:ee:ec:32:3d:18:7a:b2:92:c2:8e:ab:59:3a:
         3b:f8:b6:df:dd:0e:a5:25:5d:2f:9c:1c:82:83:f8:7c:f7:a9:
         e2:51:16:fe:75:a3:ef:ad:77:48:fc:8d:f7:cb:21:10:e8:ff:
         c4:0e:a6:68:af:03:3a:e6:6d:1e:5c:7b:1c:d6:77:7d:7f:8b:
         de:65:b7:08:ba:5a:7d:82:ef:2a:c2:ab:27:fb:1d:22:bf:b1:
         9b:9e:7d:77:d9:4d:a2:ec:bd:b4:e3:83:7e:c2:5f:9a:32:18:
         5e:71:b2:c7:41:3c:d9:a0:1f:b1:e5:97:7d:a1:60:08:d0:6b:
         4e:fc:01:3e:47:82:83:7b:ae:ff:74:bf:d7:11:27:6e:07:39:
         69:ff:b1:c5:3b:2f:a3:4c:ad:6e:fc:74:e2:77:6c:23:5c:0b:
         19:83:9e:d0:dc:c4:f1:99:92:ae:f9:6c:09:f0:20:d5:e5:fc:
         4a:e8:04:ef:9f:41:23:ed:c7:88:0e:4c:cb:ac:bc:fe:eb:03:
         45:99:0b:19:c2:6d:79:9e:c5:20:e0:2c:34:44:19:88:0f:20:
         d5:f3:ca:ca:ce:77:89:7b:ef:5a:9e:ad:fa:fd:0e:2a:f7:c1:
         30:13:f8:d2:ff:35:e5:ed:e3:a7:88:1a:04:70:ca:a0:f2:01:
         a3:02:c9:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----