Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/t1AaqtjRGGkHOKVG9CNRp8O71qc.roa
File:                     t1AaqtjRGGkHOKVG9CNRp8O71qc.roa (raw, json)
Hash identifier:          N5kMKpZsXzcgECHB4LGr35JNbY0ash0YBNYGV9BdBCc=
Subject key identifier:   B7:50:1A:AA:D8:D1:18:69:07:38:A5:46:F4:23:51:A7:C3:BB:D6:A7
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BD6
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/t1AaqtjRGGkHOKVG9CNRp8O71qc.roa
Signing time:             Tue 28 Mar 2023 10:49:00 +0000
ROA not before:           Tue 28 Mar 2023 10:49:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        2405:8700:9900::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 28 10:49:00 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B7501AAAD8D118690738A546F42351A7C3BBD6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:05:4f:37:92:58:b8:2b:2b:cb:0f:31:1e:
                    18:eb:8a:5e:3c:58:2d:df:e3:b4:8f:0e:76:4f:e5:
                    aa:59:34:29:a6:2f:93:35:2d:29:fe:29:9e:f6:ac:
                    05:fa:35:c7:ee:0d:f0:27:7e:08:b9:86:6a:52:98:
                    10:0c:fa:54:3a:48:e4:09:70:98:d7:76:74:69:6a:
                    cd:df:f6:a2:76:ff:46:42:cb:70:ac:b8:ce:e4:ff:
                    f4:7e:2b:a8:cf:7d:fa:fc:48:9c:a9:c5:92:ef:19:
                    f2:2f:d8:2f:8f:98:ea:9f:b4:e3:d4:92:08:c1:33:
                    5a:92:54:db:bd:36:cc:dd:58:e0:cb:aa:11:8b:7a:
                    dc:b3:d8:ee:f5:b9:f4:15:c8:ef:5c:f0:21:48:b7:
                    a9:3c:a6:3c:cb:c2:e2:3b:82:7a:d3:04:00:cc:98:
                    ac:3f:ea:b0:95:9f:29:a0:f0:c1:b1:ca:3c:c1:51:
                    d5:ee:75:0e:06:c1:9f:d6:8e:47:dd:b2:04:43:c5:
                    e3:03:45:8f:e1:59:43:70:43:8a:32:38:33:94:0c:
                    40:a7:3e:ec:be:2d:37:ba:e2:09:58:ec:e7:d1:ea:
                    51:6f:2d:d7:b0:13:0a:94:6b:52:40:75:bb:ae:2c:
                    25:0c:61:22:4a:f7:f7:39:7f:86:57:79:40:9a:de:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:1A:AA:D8:D1:18:69:07:38:A5:46:F4:23:51:A7:C3:BB:D6:A7
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/t1AaqtjRGGkHOKVG9CNRp8O71qc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:9900::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:c3:86:ad:44:94:15:60:75:ba:45:14:a9:3c:88:11:f3:dd:
         56:d8:57:63:16:19:6d:59:68:2f:e2:c3:40:4c:2f:cb:a7:0d:
         de:45:69:ed:69:52:10:88:19:e3:6a:0d:9a:e3:9e:f5:48:5e:
         bf:ae:2b:41:30:3f:56:b2:29:38:98:ca:9c:69:a4:87:11:73:
         ca:be:7b:b7:55:d1:78:0d:df:86:f6:c5:27:3c:70:6c:60:22:
         b9:c7:99:26:4c:f7:60:45:f1:ae:8f:66:af:32:55:fe:e3:c3:
         9c:ce:9c:c9:87:d2:2e:4c:95:75:88:f6:eb:b9:9d:40:1d:57:
         de:e7:4b:19:0f:2e:a6:78:14:5c:b7:c1:d0:a4:26:c2:df:10:
         e4:0f:ff:38:a9:fc:4b:2e:29:29:63:2e:69:3d:00:f8:dc:0b:
         d2:60:c5:17:8d:f5:71:aa:fb:fc:3e:1f:97:2a:3a:f9:77:11:
         e7:76:67:9d:83:6a:67:78:8c:e9:c9:4a:52:3b:6e:2d:f0:9b:
         c9:a5:a1:0e:4f:6c:20:53:69:fe:62:4d:3c:24:6b:37:97:2f:
         33:cc:6b:77:65:a1:97:06:ac:06:1c:3a:c7:7f:46:30:36:f9:
         b7:af:59:29:ea:a8:cc:49:3c:e3:f9:27:40:61:33:8b:58:84:
         e8:fc:e2:fd
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzAzMjgx
MDQ5MDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI3NTAxQUFBRDhEMTE4
NjkwNzM4QTU0NkY0MjM1MUE3QzNCQkQ2QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmLAVPN5JYuCsryw8xHhjril48WC3f47SPDnZP5apZNCmmL5M1
LSn+KZ72rAX6NcfuDfAnfgi5hmpSmBAM+lQ6SOQJcJjXdnRpas3f9qJ2/0ZCy3Cs
uM7k//R+K6jPffr8SJypxZLvGfIv2C+PmOqftOPUkgjBM1qSVNu9NszdWODLqhGL
etyz2O71ufQVyO9c8CFIt6k8pjzLwuI7gnrTBADMmKw/6rCVnymg8MGxyjzBUdXu
dQ4GwZ/WjkfdsgRDxeMDRY/hWUNwQ4oyODOUDECnPuy+LTe64glY7OfR6lFvLdew
EwqUa1JAdbuuLCUMYSJK9/c5f4ZXeUCa3svZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUt1AaqtjRGGkHOKVG9CNRp8O71qcwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL3QxQWFxdGpSR0dr
SE9LVkc5Q05ScDhPNzFxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkBYcAmQAwDQYJKoZIhvcNAQELBQADggEBADbDhq1ElBVgdbpFFKk8iBHz
3VbYV2MWGW1ZaC/iw0BML8unDd5Fae1pUhCIGeNqDZrjnvVIXr+uK0EwP1ayKTiY
ypxppIcRc8q+e7dV0XgN34b2xSc8cGxgIrnHmSZM92BF8a6PZq8yVf7jw5zOnMmH
0i5MlXWI9uu5nUAdV97nSxkPLqZ4FFy3wdCkJsLfEOQP/zip/EsuKSljLmk9APjc
C9JgxReN9XGq+/w+H5cqOvl3Eed2Z52Damd4jOnJSlI7bi3wm8mloQ5PbCBTaf5i
TTwkazeXLzPMa3dloZcGrAYcOsd/RjA2+bevWSnqqMxJPOP5J0BhM4tYhOj84v0=
-----END CERTIFICATE-----