Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oWVOh669Y72JHSMcu4MD7dKsUqs.roa
File:                     oWVOh669Y72JHSMcu4MD7dKsUqs.roa (raw, json)
Hash identifier:          RO2qOWvN2hY3/cp+i/7u/JbGoQk/WCR32KILsCtuiwc=
Subject key identifier:   A1:65:4E:87:AE:BD:63:BD:89:1D:23:1C:BB:83:03:ED:D2:AC:52:AB
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oWVOh669Y72JHSMcu4MD7dKsUqs.roa
Signing time:             Thu 15 Sep 2022 02:50:29 +0000
ROA not before:           Thu 15 Sep 2022 02:50:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A1654E87AEBD63BD891D231CBB8303EDD2AC52AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:03:a6:a1:75:8b:bf:5e:3c:35:e2:1f:7a:
                    20:c8:f7:62:db:b6:d7:72:4e:b5:36:62:c1:0d:59:
                    fc:65:c4:d9:37:36:72:1b:56:f3:40:4d:91:72:e9:
                    e0:a6:0f:38:b6:98:05:c8:fe:fb:6b:c3:d0:fb:21:
                    64:d6:8f:47:b9:bc:3b:a7:d7:d2:88:cf:60:4d:ea:
                    83:5e:5e:0c:ad:d3:6c:11:07:a4:6c:6d:44:ba:a8:
                    8a:a8:ab:0e:9b:d6:9b:6a:55:6f:59:4f:f1:4f:b5:
                    8a:8e:b4:43:27:f8:92:15:0d:a0:00:2b:a9:16:17:
                    27:9f:89:31:a0:55:e2:7a:13:2b:30:1e:d4:3f:aa:
                    ea:69:42:44:5f:6c:e0:d6:a6:74:0e:31:ee:96:57:
                    89:e3:78:e2:83:29:4f:eb:3b:ec:97:11:b9:3b:ef:
                    d5:1a:ff:53:93:02:9a:ee:2e:49:7c:ad:72:17:af:
                    c9:66:fd:0d:40:2d:ac:9f:c1:44:55:91:a1:92:e9:
                    7f:cb:bd:62:96:bc:20:44:77:93:ae:f8:cd:7b:a1:
                    06:69:99:88:67:ba:bb:b0:be:15:fa:aa:43:c0:f2:
                    f8:1a:62:76:d1:25:24:d0:ff:82:1e:4a:f2:bb:76:
                    d4:e5:44:23:93:e9:be:81:6e:21:2b:d1:cf:ff:83:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:65:4E:87:AE:BD:63:BD:89:1D:23:1C:BB:83:03:ED:D2:AC:52:AB
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oWVOh669Y72JHSMcu4MD7dKsUqs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:4d:e4:14:59:f2:e3:b4:54:da:64:70:c7:86:ed:17:cf:
         59:90:d9:e7:c7:5b:ac:a9:63:ab:3b:10:cf:fd:60:60:cb:e3:
         1f:a6:49:e5:44:cb:be:c3:cf:11:f3:8c:37:ee:fa:46:65:f3:
         44:d6:ce:41:5c:9c:f1:ac:11:a7:c7:e5:9b:16:6f:27:af:81:
         9c:8c:87:ce:9e:ea:2b:0b:f6:0b:1e:44:b7:cc:e5:9c:78:c8:
         7e:7d:06:59:90:0b:e9:37:2b:a8:a4:c5:76:ed:4e:d3:11:7c:
         91:88:d7:32:c4:1d:28:cd:a4:43:4b:fa:97:e8:fd:57:92:32:
         8b:85:ea:aa:d9:d1:2a:3b:23:14:13:e5:b1:5e:e1:a2:ed:df:
         05:83:41:c4:9c:ee:33:ee:2e:19:3e:db:3a:7b:bc:88:cc:ff:
         15:f8:18:1b:35:3a:29:94:73:61:00:31:ff:c5:16:c6:40:07:
         c6:d5:95:01:08:36:a5:d1:73:5d:51:e5:b7:26:e1:ec:a5:fc:
         79:1d:0b:f6:95:da:e0:4a:f6:64:69:1e:25:c3:5f:65:a7:c1:
         ec:03:f3:08:95:b3:1a:e6:86:ea:1c:aa:25:d4:d5:62:6d:2b:
         d8:fd:47:e7:81:39:94:12:2a:9e:c8:e5:ac:09:3a:82:8d:d0:
         f4:a3:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org