Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/sDxTwJZ_4Jmk4I9fkxwRgJgR2lI.roa
File:                     sDxTwJZ_4Jmk4I9fkxwRgJgR2lI.roa (raw, json)
Hash identifier:          LR8Eou5QON8rEKTrbIiMTZlsk5hMxl4d3w3ipVDsrQw=
Subject key identifier:   B0:3C:53:C0:96:7F:E0:99:A4:E0:8F:5F:93:1C:11:80:98:11:DA:52
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BCC
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/sDxTwJZ_4Jmk4I9fkxwRgJgR2lI.roa
Signing time:             Mon 27 Mar 2023 23:14:07 +0000
ROA not before:           Mon 27 Mar 2023 23:14:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.44.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:07 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B03C53C0967FE099A4E08F5F931C11809811DA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:24:9a:ba:13:a0:62:eb:f7:15:c7:41:a3:
                    22:c6:fe:21:cd:c2:b5:d9:ca:98:de:f7:ac:df:04:
                    50:cb:fc:63:6d:7c:8d:10:fb:33:06:5c:92:b2:86:
                    42:3d:1c:fd:8b:2c:0a:7d:06:57:da:df:96:2c:b3:
                    68:d8:a3:ba:bc:84:83:fe:2f:76:5c:f4:e1:9d:6c:
                    cd:e6:aa:33:fd:01:bb:34:41:2b:2f:51:23:4a:fe:
                    b8:0c:db:68:65:01:a3:5b:34:b7:3a:87:be:56:bd:
                    37:c4:2f:5e:f3:dd:69:0f:90:9b:1d:12:d0:bc:c1:
                    c1:34:41:0c:f4:bc:8b:ab:27:0c:8a:c4:4f:dd:04:
                    d2:24:d9:c7:9e:78:db:29:57:8b:e6:da:a5:46:c3:
                    6e:ee:40:2e:b7:a2:10:b3:43:92:dc:7c:f1:09:48:
                    d9:c7:fd:c7:89:f4:a9:80:8b:43:73:0b:a2:1b:92:
                    a7:f0:20:e7:35:e3:ee:c8:a1:a6:58:59:cd:49:da:
                    4b:a2:17:04:98:f4:fc:80:11:8e:19:bc:bf:b3:55:
                    21:ea:3a:3c:87:7a:22:72:c7:06:20:e9:c1:65:f8:
                    5f:78:bf:8c:e8:bb:00:b1:22:92:79:2b:d4:aa:15:
                    d3:a7:9b:78:58:42:e7:cb:33:07:12:5a:cf:38:50:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:53:C0:96:7F:E0:99:A4:E0:8F:5F:93:1C:11:80:98:11:DA:52
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/sDxTwJZ_4Jmk4I9fkxwRgJgR2lI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:89:77:b5:32:1a:77:79:97:2b:d8:6a:03:fe:4c:3c:81:4a:
         0e:4d:70:70:58:19:c7:0b:e2:2b:7b:59:b3:26:ca:6c:4b:10:
         ba:da:1e:f2:45:3d:6b:07:8d:1d:a1:fc:f3:e7:db:5b:66:61:
         34:a5:5b:3d:66:32:32:63:73:0c:56:e1:fe:f8:21:dd:1c:1e:
         65:a1:69:ea:ad:b0:59:97:65:e6:3b:f2:e2:6d:2d:cf:1c:3d:
         80:ef:53:bb:1f:81:9f:20:a8:5d:0f:9c:56:51:16:4f:cf:bd:
         b4:50:60:28:c4:a7:88:fb:a0:9e:4c:a7:af:86:98:94:c7:51:
         9c:69:e0:04:a3:9f:b8:a6:96:a5:75:1b:1b:3d:5d:f9:43:4f:
         1c:fe:cd:98:6e:49:98:ac:36:43:d1:d1:bc:0e:4d:10:99:bc:
         73:e2:44:4c:2d:2c:bd:e4:c0:1b:0c:53:1f:d7:1f:14:84:9f:
         67:56:90:3a:ba:a6:20:bf:19:ad:8c:da:41:1a:d1:b9:c1:ac:
         aa:2d:04:ea:28:78:59:ff:1d:26:78:93:71:aa:71:3f:82:e1:
         93:bb:01:f9:86:a1:7e:00:05:fa:5c:ea:4f:c5:63:8d:3c:93:
         3f:ea:0e:d0:e7:80:a9:4e:35:1a:ec:b2:cc:4c:71:ea:43:62:
         1f:a3:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org