Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/L5SwSNzC4LercnY68qhJF-lRPvM.roa
File:                     L5SwSNzC4LercnY68qhJF-lRPvM.roa (raw, json)
Hash identifier:          DpytkYnXun3FPMQJ8m4lnLgOuSjUC/RDzlMRUf8v+AY=
Subject key identifier:   2F:94:B0:48:DC:C2:E0:B7:AB:72:76:3A:F2:A8:49:17:E9:51:3E:F3
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/L5SwSNzC4LercnY68qhJF-lRPvM.roa
Signing time:             Thu 15 Sep 2022 02:50:33 +0000
ROA not before:           Thu 15 Sep 2022 02:50:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24168
IP address blocks:        2405:8700:3000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2F94B048DCC2E0B7AB72763AF2A84917E9513EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:6a:54:af:fb:37:20:be:84:59:24:fe:24:
                    6d:db:16:b0:4a:3f:2b:5d:21:ea:0e:36:51:c9:39:
                    3e:c7:01:bc:a4:94:18:5a:a7:2a:e2:44:4d:c1:da:
                    37:a5:5a:de:fc:36:88:54:ff:e5:68:d0:a4:fb:fd:
                    cb:fd:42:e1:bc:b7:e4:5b:a9:2e:24:1f:12:61:8b:
                    06:fc:2d:e7:bf:40:6b:a0:d4:fa:02:1a:2f:3c:0b:
                    48:0a:72:60:4c:11:77:7d:1a:fa:af:58:33:28:53:
                    e4:d6:95:ec:04:15:21:37:ad:fd:f9:df:e0:44:f0:
                    54:cf:ab:05:e5:26:bc:85:87:57:af:23:59:36:ae:
                    5b:90:a8:ac:58:e4:bf:61:3d:26:9f:72:30:1c:0d:
                    91:61:14:49:98:c1:7f:c9:7d:cf:35:51:10:c4:99:
                    2d:e9:15:34:7c:b4:f5:df:91:a1:c0:ac:22:fe:3c:
                    2b:4d:d2:3b:33:0e:59:f9:18:8f:43:b4:4c:c9:b5:
                    00:75:ad:6c:cb:ea:07:9a:76:ac:25:04:6c:44:23:
                    44:6d:1b:1e:be:d2:72:07:32:e7:61:be:71:f3:3e:
                    c4:23:7d:19:5f:ea:f0:37:ac:cd:52:73:52:67:41:
                    8d:17:2f:7c:b8:f0:36:62:8d:20:21:59:c6:c3:ad:
                    85:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:94:B0:48:DC:C2:E0:B7:AB:72:76:3A:F2:A8:49:17:E9:51:3E:F3
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/L5SwSNzC4LercnY68qhJF-lRPvM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:c7:1d:d7:8e:74:14:9d:26:4e:38:36:73:fa:7a:9b:14:
         dc:4c:2a:d5:27:15:9d:f7:de:97:9f:f7:99:70:cf:73:60:9d:
         5f:6a:c4:3f:8a:91:2e:74:c2:e7:7f:ab:5a:7a:fc:b0:b1:5f:
         e5:03:51:9c:7d:7a:f7:b6:2f:0e:1d:c6:5b:dc:08:7f:cb:d1:
         43:c7:02:09:23:b4:43:53:7c:6f:d2:2d:e3:60:e6:69:98:be:
         2e:cd:48:84:a8:01:5e:f3:41:d7:bf:64:16:de:81:87:37:ea:
         1e:f1:55:09:d2:1a:4d:78:71:2e:c4:91:8e:a7:6a:51:68:43:
         49:02:3f:bc:f5:53:fc:12:e5:25:eb:8f:ac:33:89:1d:e5:b1:
         fb:cf:a5:da:3c:67:a7:1c:6b:49:ae:b6:75:94:84:b9:15:3b:
         12:00:25:3e:34:f5:47:86:63:a3:60:10:67:89:35:d2:78:06:
         3c:55:3b:e1:9a:82:86:c3:89:c4:47:f8:e3:85:c6:6b:68:b2:
         14:95:7a:f1:fb:ad:3d:01:59:be:95:fd:20:57:b3:b2:74:97:
         be:88:82:3d:98:fc:10:dc:05:be:08:e8:f9:b3:4e:7c:c1:fd:
         08:85:10:09:5f:24:17:c6:10:36:77:9b:fd:c1:e6:70:c0:80:
         3d:18:dc:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org