Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZswNIkijYMRMesse5ZspX5F_F3I.roa
File:                     ZswNIkijYMRMesse5ZspX5F_F3I.roa (raw, json)
Hash identifier:          fApz7uU61m85plFyloTkAiPhZzDbt22fFZVNMVBHlHM=
Subject key identifier:   66:CC:0D:22:48:A3:60:C4:4C:7A:CB:1E:E5:9B:29:5F:91:7F:17:72
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BC4
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZswNIkijYMRMesse5ZspX5F_F3I.roa
Signing time:             Mon 27 Mar 2023 23:14:03 +0000
ROA not before:           Mon 27 Mar 2023 23:14:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24168
IP address blocks:        121.50.144.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3012 (0xbc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:03 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=66CC0D2248A360C44C7ACB1EE59B295F917F1772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:c1:3b:35:67:b2:a8:1b:d7:04:cf:cf:98:
                    63:2e:d7:d9:97:fe:cd:9e:6b:0b:c4:4f:05:f3:ce:
                    6a:5e:74:83:48:54:95:69:46:47:17:b8:83:51:a7:
                    4b:25:10:76:7d:96:f9:4c:61:ea:4c:b8:60:07:3b:
                    ba:08:b0:67:0b:83:cb:b3:4f:d3:f2:02:c8:46:0a:
                    0d:4f:21:8d:1e:ac:0c:7e:02:a6:98:70:e3:98:28:
                    e8:d7:86:be:22:cd:e4:e4:a1:19:e3:5a:1f:73:8e:
                    0c:93:a9:ee:8a:cc:f1:d8:e4:e2:b9:2b:7b:0c:df:
                    52:97:4c:52:a0:81:68:ae:9b:47:41:14:38:59:9a:
                    59:ea:37:64:b4:5a:e1:6b:19:a3:c9:a8:02:cf:f0:
                    1f:57:02:53:df:e3:76:49:dd:a2:63:92:1b:46:4a:
                    95:6f:5f:e1:ee:99:46:fa:a7:89:e2:8d:ac:ae:f0:
                    94:64:78:cf:8f:23:5d:7b:02:bd:bb:4b:b5:93:23:
                    3e:f9:5d:be:77:f7:7a:de:89:95:e9:f2:9c:df:07:
                    5a:0f:ab:c0:d9:66:0c:3d:2c:1c:bb:7f:ec:b6:3e:
                    1a:43:f9:da:c4:c5:ec:62:0d:6d:9f:c3:c8:7c:ed:
                    df:d5:1f:b3:a0:9e:89:4a:df:02:37:58:dc:33:4b:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CC:0D:22:48:A3:60:C4:4C:7A:CB:1E:E5:9B:29:5F:91:7F:17:72
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZswNIkijYMRMesse5ZspX5F_F3I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:97:7d:9c:56:33:51:b3:b1:13:88:3d:b1:50:c2:b1:05:85:
         af:2d:f6:eb:2b:1a:54:42:1c:c1:97:ba:b4:83:55:e3:0b:e0:
         15:40:00:55:e2:b6:a7:57:43:92:6b:e1:9f:77:be:7a:33:e6:
         8c:b9:10:ed:01:51:90:7c:1d:cf:1e:80:fc:d8:3e:91:e2:1d:
         35:0f:c5:25:3a:df:2c:24:f7:79:80:25:a6:91:4d:e5:0d:fe:
         01:3f:64:e1:52:7e:94:d5:f2:29:39:09:c9:a7:e6:57:53:1c:
         b6:39:08:75:a9:5e:a7:87:85:9e:d9:76:03:a1:0b:16:44:ca:
         7e:80:cb:97:55:70:ac:e9:61:51:c4:c4:61:09:be:1d:f0:b1:
         bb:a3:f2:b7:ac:47:33:36:e6:97:d9:6e:15:72:50:aa:4e:82:
         61:d4:0f:c3:b9:9a:b0:72:be:fb:e5:7a:00:04:38:be:b4:45:
         91:5f:34:39:a0:d6:91:c1:0d:5a:b1:16:1b:d1:21:c0:3f:59:
         f6:57:7c:f9:c2:21:67:44:58:23:9f:85:b4:e5:d8:1f:3f:43:
         48:1a:7d:7c:54:99:0b:98:65:67:cd:3b:55:c1:2f:24:35:0d:
         ed:66:d8:4c:c2:9a:7a:39:87:2c:65:e9:a0:88:4e:a5:14:da:
         f8:84:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org