Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/hvdEkgwaJhxeWPjCQXkS7HnfYGE.roa
File:                     hvdEkgwaJhxeWPjCQXkS7HnfYGE.roa (raw, json)
Hash identifier:          xZJ3NWZzffLBqX3MK0HO4ndcscuVzn7SoNhkMGrWWcg=
Subject key identifier:   86:F7:44:92:0C:1A:26:1C:5E:58:F8:C2:41:79:12:EC:79:DF:60:61
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BD2
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/hvdEkgwaJhxeWPjCQXkS7HnfYGE.roa
Signing time:             Mon 27 Mar 2023 23:14:09 +0000
ROA not before:           Mon 27 Mar 2023 23:14:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24168
IP address blocks:        103.30.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:09 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=86F744920C1A261C5E58F8C2417912EC79DF6061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:a3:b2:1d:f5:48:e4:11:86:94:39:b0:de:
                    f0:93:0a:73:3f:3d:2c:27:df:ca:b7:23:92:b3:c7:
                    71:4c:6b:42:6a:72:41:68:c0:54:2f:00:94:a8:b0:
                    8e:f0:94:6e:d5:cb:01:72:bb:17:5e:84:5a:8e:72:
                    f5:ab:8a:1f:40:d8:dd:1c:50:85:e9:43:69:87:a3:
                    35:aa:50:18:63:ee:4d:58:ac:6c:47:7b:39:b0:99:
                    ed:62:ec:fe:b1:ec:63:eb:e6:0d:24:9d:09:1b:73:
                    cc:85:83:d9:81:18:ac:a6:fe:0f:c7:34:4b:a6:87:
                    24:42:34:7c:03:89:ad:c0:a6:ce:d5:83:e7:36:f1:
                    2d:9f:67:d9:bd:19:05:6f:20:fc:6d:6b:17:1b:97:
                    54:84:f0:75:b7:1c:a5:c2:76:62:d3:20:e9:23:d1:
                    fa:ad:34:6e:49:62:59:96:04:ce:e4:cc:1d:f2:6b:
                    43:5a:76:27:fd:5c:b7:db:16:41:70:f7:7a:53:00:
                    c9:73:b3:30:c7:04:8c:43:7d:0c:69:32:2e:f3:c3:
                    fc:61:47:6d:27:99:b0:47:8d:f7:a2:51:e1:00:f4:
                    4e:21:22:1c:ca:70:3d:b9:b8:bf:0c:1d:c4:29:1c:
                    f9:05:0d:af:09:dd:68:6b:be:24:65:d4:69:74:a5:
                    c5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:44:92:0C:1A:26:1C:5E:58:F8:C2:41:79:12:EC:79:DF:60:61
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/hvdEkgwaJhxeWPjCQXkS7HnfYGE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:d4:7b:2a:c7:0f:0f:85:f1:8e:73:6f:13:f0:fc:df:54:
         d4:a2:8d:0f:39:79:f3:64:c2:af:32:93:24:5f:c9:ff:b2:6b:
         89:7f:07:c0:3b:3f:6a:2a:94:58:ed:f0:13:8f:0e:82:dd:50:
         dc:b3:ce:2c:f7:08:1a:59:70:08:6c:ae:c0:a3:19:65:b3:fd:
         be:a2:c0:ab:95:a9:18:48:6e:c4:16:63:94:2c:8e:33:00:92:
         98:c1:82:20:39:38:e2:f2:6b:8b:ad:82:2f:f8:3e:4f:64:eb:
         9d:ca:13:5e:c7:84:d0:12:99:5f:e7:ba:71:f0:d5:1c:6b:64:
         08:50:54:9b:69:f0:05:e3:37:6e:e0:53:c1:37:e8:89:a1:a1:
         9e:77:85:7e:bf:27:db:46:06:21:d6:30:6d:32:ff:15:be:e1:
         59:47:00:01:62:5b:cc:11:49:8a:05:30:bd:de:f4:1f:04:3c:
         11:4e:3f:01:9e:e9:31:64:db:fc:bf:9d:03:3f:a8:49:f9:cb:
         87:05:20:34:02:e3:57:ee:54:5b:57:29:99:8a:a9:00:12:70:
         81:90:8e:c2:0b:8d:97:3a:b0:ab:4d:cb:a1:43:2c:0c:68:ec:
         df:97:82:92:5d:39:cc:19:56:be:7f:66:b3:cc:e0:ef:ab:97:
         f8:2e:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org