Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/T57WRI_VwYc4shqyMJkhNZ5gMbI.roa
File:                     T57WRI_VwYc4shqyMJkhNZ5gMbI.roa (raw, json)
Hash identifier:          HwI2elQ3K12Yv4rQ1Yz1Prm8MgnYaxdfdDCP/Bz4gGI=
Subject key identifier:   4F:9E:D6:44:8F:D5:C1:87:38:B2:1A:B2:30:99:21:35:9E:60:31:B2
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/T57WRI_VwYc4shqyMJkhNZ5gMbI.roa
Signing time:             Thu 15 Sep 2022 02:50:32 +0000
ROA not before:           Thu 15 Sep 2022 02:50:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.44.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4F9ED6448FD5C18738B21AB2309921359E6031B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:50:29:b7:c2:9a:cf:ea:cc:c2:d2:c1:fe:
                    66:cf:3c:5b:5b:bb:e3:37:b0:72:a3:8e:dd:c7:3a:
                    e9:59:1b:1d:0e:69:32:8d:be:96:63:06:03:d7:5f:
                    ef:8e:88:01:b4:38:a4:f8:66:80:33:a1:ac:c6:df:
                    89:1d:0b:47:2a:a0:7c:94:11:bc:d0:7c:56:a4:4e:
                    85:2e:33:ab:d7:d8:76:c1:af:e8:67:a8:c5:54:40:
                    2d:78:62:64:d2:d0:76:d7:27:6b:d5:d2:bd:08:ac:
                    35:1e:66:dd:b6:87:26:f6:31:90:3e:9c:1e:61:d4:
                    2c:fc:b2:db:16:44:15:57:4e:f1:3a:ce:99:31:aa:
                    4b:10:e3:8a:32:7a:18:a6:31:b9:07:af:4e:a1:0d:
                    c7:68:bc:80:1d:a6:bf:f3:59:26:8b:16:df:4f:b7:
                    2d:1c:f4:df:47:20:25:2a:f7:0f:d1:bb:c5:68:25:
                    ca:61:91:6a:3f:c4:2e:ea:22:48:bc:56:89:d7:8d:
                    a7:53:cb:4c:fb:68:8c:fd:04:6e:29:df:78:12:f3:
                    0e:75:86:d5:4c:95:e4:13:be:98:04:22:15:47:49:
                    ab:2c:42:e8:a5:db:c6:a8:48:11:01:05:76:0f:cc:
                    a1:2b:b2:10:6c:15:de:d1:da:3c:56:a6:99:c9:dc:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:D6:44:8F:D5:C1:87:38:B2:1A:B2:30:99:21:35:9E:60:31:B2
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/T57WRI_VwYc4shqyMJkhNZ5gMbI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:de:17:28:c8:fa:15:c9:aa:9b:fa:7e:ff:1a:c5:37:ba:8c:
         23:ab:7a:0a:2f:2d:66:23:e5:74:27:d4:1f:b4:2f:2c:43:87:
         4c:9c:47:53:97:d6:0c:27:55:97:b5:4b:11:fa:4b:91:f3:24:
         c0:4e:95:c1:bc:f5:38:c7:cb:04:73:a0:4c:fa:71:5c:b5:42:
         41:0a:ee:08:c4:ac:b6:7e:5e:5d:33:71:91:b0:3d:33:a7:a4:
         b8:a9:79:af:11:81:b9:e6:ed:bd:e4:69:9e:b6:75:09:e7:4e:
         2d:a4:b0:01:62:dd:7c:ea:45:d8:18:78:6c:bd:34:ff:15:f5:
         8e:a2:ef:43:ec:d5:79:90:c1:22:a7:a2:64:12:4c:81:f3:90:
         61:28:1e:a7:21:a7:4f:f1:21:1c:50:9d:78:10:12:31:41:5d:
         05:c1:95:93:10:07:b6:c7:0c:81:df:7f:61:47:e7:48:9e:02:
         f5:3d:a1:50:3a:28:e5:53:76:cf:1c:0d:a1:48:fd:b6:72:c4:
         9a:ae:20:d2:e6:67:89:f0:74:6c:a3:cf:c1:41:a3:79:df:07:
         b1:cd:27:f6:a9:52:fe:07:d6:08:5d:50:9e:26:cb:3b:d3:0a:
         2e:21:8f:65:de:32:ef:d2:ea:92:2b:19:03:07:ff:83:6c:3e:
         da:90:75:0c
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMjA5MTUw
MjUwMzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRGOUVENjQ0OEZENUMx
ODczOEIyMUFCMjMwOTkyMTM1OUU2MDMxQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3D1Apt8Kaz+rMwtLB/mbPPFtbu+M3sHKjjt3HOulZGx0OaTKN
vpZjBgPXX++OiAG0OKT4ZoAzoazG34kdC0cqoHyUEbzQfFakToUuM6vX2HbBr+hn
qMVUQC14YmTS0HbXJ2vV0r0IrDUeZt22hyb2MZA+nB5h1Cz8stsWRBVXTvE6zpkx
qksQ44oyehimMbkHr06hDcdovIAdpr/zWSaLFt9Pty0c9N9HICUq9w/Ru8VoJcph
kWo/xC7qIki8VonXjadTy0z7aIz9BG4p33gS8w51htVMleQTvpgEIhVHSassQuil
28aoSBEBBXYPzKErshBsFd7R2jxWppnJ3FczAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUT57WRI/VwYc4shqyMJkhNZ5gMbIwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1Q1N1dSSV9Wd1lj
NHNocXlNSmtoTlo1Z01iSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnHiwwDQYJKoZIhvcNAQELBQADggEBABPeFyjI+hXJqpv6fv8axTe6jCOr
egovLWYj5XQn1B+0LyxDh0ycR1OX1gwnVZe1SxH6S5HzJMBOlcG89TjHywRzoEz6
cVy1QkEK7gjErLZ+Xl0zcZGwPTOnpLipea8Rgbnm7b3kaZ62dQnnTi2ksAFi3Xzq
RdgYeGy9NP8V9Y6i70Ps1XmQwSKnomQSTIHzkGEoHqchp0/xIRxQnXgQEjFBXQXB
lZMQB7bHDIHff2FH50ieAvU9oVA6KOVTds8cDaFI/bZyxJquINLmZ4nwdGyjz8FB
o3nfB7HNJ/apUv4H1ghdUJ4myzvTCi4hj2XeMu/S6pIrGQMH/4NsPtqQdQw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org