Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINAN/F2xsjrglnGwTYymytbaw8oVzlLA.roa
File:                     F2xsjrglnGwTYymytbaw8oVzlLA.roa (raw, json)
Hash identifier:          UgzrxIymwXthM9QGM7gB6pt8ebqX8fAM/jfRWJCPTiA=
Subject key identifier:   17:6C:6C:8E:B8:25:9C:6C:13:63:29:B2:B5:B6:B0:F2:85:73:94:B0
Certificate issuer:       /CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
Certificate serial:       03
Authority key identifier: 27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/F2xsjrglnGwTYymytbaw8oVzlLA.roa
Signing time:             Mon 21 Aug 2023 10:27:35 +0000
ROA not before:           Mon 21 Aug 2023 10:27:35 +0000
ROA not after:            Fri 16 Aug 2024 15:30:25 +0000
asID:                     131642
IP address blocks:        103.64.20.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 07:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
        Validity
            Not Before: Aug 21 10:27:35 2023 GMT
            Not After : Aug 16 15:30:25 2024 GMT
        Subject: CN=176C6C8EB8259C6C136329B2B5B6B0F2857394B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:30:96:01:26:22:75:cb:21:4c:08:e1:5e:
                    92:c7:1d:f9:06:df:40:0b:41:d0:20:97:94:9d:c7:
                    62:73:25:c9:95:fa:29:fa:70:66:19:79:04:e0:dd:
                    67:3c:af:3d:26:f9:e0:3c:20:b9:2f:9f:18:ca:9d:
                    f1:ad:94:a1:95:4e:6b:6d:a1:73:1b:5e:ca:51:50:
                    42:8c:ec:35:32:48:a3:55:b9:cd:24:f5:4a:28:98:
                    6f:45:08:ef:46:9e:d0:9f:c4:f4:69:c0:3f:0d:63:
                    81:4c:a8:dd:82:c1:14:97:a9:3b:85:d2:fd:0b:1f:
                    89:7b:49:6c:57:db:74:36:59:22:ad:40:71:61:50:
                    16:b2:6d:02:0a:ad:1e:d3:04:a0:e6:35:0b:3b:e2:
                    38:b3:d3:54:d1:dc:23:62:2b:05:6a:d6:f3:65:b4:
                    2e:62:7c:56:0c:12:b4:6a:a2:58:24:8e:c1:5e:ed:
                    e9:24:08:f2:bf:53:35:fa:b8:44:98:ad:0e:fe:59:
                    4b:05:14:68:85:1a:41:00:be:1b:5f:f9:97:7e:c2:
                    e0:4e:5f:06:6c:5c:7f:59:47:96:13:20:73:d2:6a:
                    fe:99:17:4e:b7:78:2f:90:9b:11:09:4a:e6:82:23:
                    d0:f5:08:b8:49:e4:98:aa:d5:11:24:99:b2:b5:fd:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6C:6C:8E:B8:25:9C:6C:13:63:29:B2:B5:B6:B0:F2:85:73:94:B0
            X509v3 Authority Key Identifier:
                keyid:27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/F2xsjrglnGwTYymytbaw8oVzlLA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:13:c7:1a:71:c9:eb:31:a1:a2:28:c4:75:52:e9:ef:a8:
         48:97:70:33:01:fc:87:21:97:12:64:4d:df:9b:ce:0e:66:0e:
         a7:e7:99:ee:bd:b1:2c:e0:ee:2c:36:c8:c1:81:0c:57:bc:36:
         ec:6d:36:28:67:2e:ed:5e:ba:a3:12:25:6e:af:87:9a:ab:c8:
         1d:00:01:0f:4f:47:56:15:57:cd:8b:05:4b:80:4a:50:bb:97:
         ed:30:a8:24:76:86:49:40:6b:3c:1d:4b:bb:c5:45:b9:21:ed:
         f8:df:dc:6d:54:1a:d7:bc:c3:e9:2f:45:bd:ef:de:56:9f:e5:
         5d:6b:63:b3:55:71:85:ff:ae:78:78:6e:8d:85:cb:9c:21:da:
         da:56:c1:1f:da:57:3c:e2:a9:ae:dc:2e:30:b8:a0:79:40:10:
         a1:10:8e:31:0e:9a:1f:fa:d0:48:4c:f4:8e:07:d6:50:fa:30:
         dc:2d:e5:a2:3d:11:66:7a:89:c1:8c:cd:6f:54:0c:aa:41:af:
         68:f3:eb:c8:df:fb:0f:be:86:12:be:24:cb:a4:30:4a:41:96:
         2e:c5:54:16:28:81:f6:b8:6f:40:b5:0e:cc:02:ac:01:ab:53:
         c3:f5:7e:0d:ce:88:4d:96:72:08:86:91:89:ca:38:af:43:78:
         8a:5d:6f:c5
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyN0Ux
Njk5QzZDRkJENzcwRjk0M0E2QkRGMzhGNkJGNDgxQkIxRTk3MB4XDTIzMDgyMTEw
MjczNVoXDTI0MDgxNjE1MzAyNVowMzExMC8GA1UEAxMoMTc2QzZDOEVCODI1OUM2
QzEzNjMyOUIyQjVCNkIwRjI4NTczOTRCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANqoMJYBJiJ1yyFMCOFekscd+QbfQAtB0CCXlJ3HYnMlyZX6Kfpw
Zhl5BODdZzyvPSb54DwguS+fGMqd8a2UoZVOa22hcxteylFQQozsNTJIo1W5zST1
SiiYb0UI70ae0J/E9GnAPw1jgUyo3YLBFJepO4XS/QsfiXtJbFfbdDZZIq1AcWFQ
FrJtAgqtHtMEoOY1CzviOLPTVNHcI2IrBWrW82W0LmJ8VgwStGqiWCSOwV7t6SQI
8r9TNfq4RJitDv5ZSwUUaIUaQQC+G1/5l37C4E5fBmxcf1lHlhMgc9Jq/pkXTrd4
L5CbEQlK5oIj0PUIuEnkmKrVESSZsrX9JqkCAwEAAaOCAewwggHoMB0GA1UdDgQW
BBQXbGyOuCWcbBNjKbK1trDyhXOUsDAfBgNVHSMEGDAWgBQn4WmcbPvXcPlDpr3z
j2v0gbselzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9YSU5BTi9K
LUZwbkd6NzEzRDVRNmE5ODQ5cjlJRzdIcGMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0otRnBuR3o3MTNENVE2YTk4NDlyOUlHN0hwYy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1hJTkFOL0YyeHNqcmdsbkd3VFl5bXl0YmF3
OG9WemxMQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y
cmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnQBQw
DQYJKoZIhvcNAQELBQADggEBALIZE8caccnrMaGiKMR1UunvqEiXcDMB/IchlxJk
Td+bzg5mDqfnme69sSzg7iw2yMGBDFe8NuxtNihnLu1euqMSJW6vh5qryB0AAQ9P
R1YVV82LBUuASlC7l+0wqCR2hklAazwdS7vFRbkh7fjf3G1UGte8w+kvRb3v3laf
5V1rY7NVcYX/rnh4bo2Fy5wh2tpWwR/aVzziqa7cLjC4oHlAEKEQjjEOmh/60EhM
9I4H1lD6MNwt5aI9EWZ6icGMzW9UDKpBr2jz68jf+w++hhK+JMukMEpBli7FVBYo
gfa4b0C1DswCrAGrU8P1fg3OiE2WcgiGkYnKOK9DeIpdb8U=
-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:29 2024 by rpki-client on console-ams.rpki-client.org