Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/GKGqvJ0gSe_nCrYeW-s5H1BM3r4.roa
File:                     GKGqvJ0gSe_nCrYeW-s5H1BM3r4.roa (raw, json)
Hash identifier:          cjAI/LAow53WslHt8shxGg/AkYZwuGUTM9yX40lJLlo=
Subject key identifier:   18:A1:AA:BC:9D:20:49:EF:E7:0A:B6:1E:5B:EB:39:1F:50:4C:DE:BE
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/GKGqvJ0gSe_nCrYeW-s5H1BM3r4.roa
Signing time:             Thu 15 Sep 2022 02:50:33 +0000
ROA not before:           Thu 15 Sep 2022 02:50:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.46.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=18A1AABC9D2049EFE70AB61E5BEB391F504CDEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:08:33:46:82:90:12:fc:6e:8c:e2:09:70:
                    9f:45:ac:90:b6:0e:16:f4:bd:d9:b0:43:3c:21:b8:
                    d5:ad:0f:ca:d1:7f:a4:7d:11:94:80:71:a5:a3:ff:
                    ed:3c:6b:c5:1f:ce:81:d2:9c:89:cd:1a:ab:fc:50:
                    3f:25:28:6b:40:74:e5:65:2f:c2:b2:52:ea:59:f4:
                    03:48:37:36:e9:1f:ae:0e:7e:18:d5:76:81:a8:60:
                    22:70:e9:f7:e5:1a:01:23:27:c0:d5:cd:b4:7b:16:
                    84:4e:ff:48:39:d7:45:c0:37:b2:9e:5c:43:15:37:
                    8d:97:be:0c:3e:38:df:d1:bf:d6:3f:93:e1:12:67:
                    d8:90:55:1a:b1:f0:04:7b:a2:35:86:ee:f4:f6:bf:
                    a8:1e:18:e5:c6:69:48:ab:1b:62:10:70:0b:1e:1f:
                    41:d0:b7:b1:5c:59:af:c9:cc:93:62:fc:fc:8a:7c:
                    75:66:28:88:6c:64:c9:7b:63:5c:b9:cb:e7:b9:09:
                    5b:dd:a6:7d:aa:58:ce:d8:18:58:6e:bc:09:f6:bf:
                    d5:9f:32:01:72:fe:86:4f:7d:27:6a:44:33:83:dd:
                    97:1d:87:64:dc:f6:21:3e:3a:bf:92:8e:08:68:2a:
                    43:00:94:3a:23:b5:e4:16:a7:73:69:16:e1:79:64:
                    e3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:AA:BC:9D:20:49:EF:E7:0A:B6:1E:5B:EB:39:1F:50:4C:DE:BE
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/GKGqvJ0gSe_nCrYeW-s5H1BM3r4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:71:25:48:4e:0d:74:26:ce:35:5a:d0:09:bc:49:76:a6:
         2e:54:b3:90:d2:c1:4d:04:d8:38:ff:8d:59:06:3b:f1:35:0f:
         a8:68:5b:66:59:a8:1e:68:00:49:e4:cf:c0:17:91:9d:29:7a:
         6a:74:1d:82:8b:66:82:9d:3e:31:69:12:53:bb:57:34:87:f0:
         18:00:9e:a0:31:57:2a:bd:76:5f:4a:b5:09:c5:cd:07:c4:c0:
         8a:86:40:0a:53:c0:64:9a:50:9d:cf:ec:a1:b7:6c:04:db:a7:
         95:53:cb:48:d8:00:14:a1:4a:3d:f6:6f:46:4f:80:9e:c4:ed:
         dd:03:d2:d3:78:8d:8b:eb:d6:67:68:23:8d:5b:80:4d:a4:bb:
         5e:28:72:00:92:32:b0:86:7e:3e:2c:5d:01:78:6a:57:56:db:
         f5:64:25:67:35:45:26:9b:81:29:06:1a:03:65:81:60:97:17:
         97:55:0f:ea:77:29:ce:10:36:54:6a:1e:d9:67:45:f1:1e:4d:
         8a:a5:7c:7c:67:de:96:76:a3:08:c5:8f:fa:65:9f:d1:44:29:
         47:98:82:8d:aa:44:7c:ed:be:25:80:8e:eb:d8:7b:43:ee:8a:
         86:b8:5c:20:2e:39:57:b5:e1:d6:10:27:5d:cb:c0:6b:45:ca:
         8a:31:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org