Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uSo5uPG1wUp1auyE1iyBw3f1Rsk.roa
File:                     uSo5uPG1wUp1auyE1iyBw3f1Rsk.roa (raw, json)
Hash identifier:          w19mODo7Ge8HYrtryjtxRfZBxDegGM1Xcao7XlH4X2A=
Subject key identifier:   B9:2A:39:B8:F1:B5:C1:4A:75:6A:EC:84:D6:2C:81:C3:77:F5:46:C9
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0B7F
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uSo5uPG1wUp1auyE1iyBw3f1Rsk.roa
Signing time:             Thu 12 Oct 2023 07:20:11 +0000
ROA not before:           Thu 12 Oct 2023 07:20:11 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63905
IP address blocks:        103.123.240.0/23 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2943 (0xb7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: Oct 12 07:20:11 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B92A39B8F1B5C14A756AEC84D62C81C377F546C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:b2:a9:c0:22:84:df:b8:f1:34:a2:98:bf:
                    4b:c5:f0:58:fe:83:27:41:9d:44:c4:f3:b5:01:f4:
                    d7:54:14:f2:54:3b:6e:62:94:23:75:6f:84:56:cf:
                    b2:79:3c:da:4a:da:89:33:6b:3d:e8:55:5e:71:d8:
                    0f:3d:1f:9d:90:6c:73:00:6f:a2:6e:af:71:f9:06:
                    1a:ee:5d:82:bd:9f:10:57:8b:6a:6f:b8:ef:94:f3:
                    22:b8:05:47:22:b3:4d:f6:e3:6c:ac:29:ff:9a:5c:
                    6d:41:fc:8c:a7:5a:86:63:8a:27:7f:c4:d2:03:f4:
                    bb:96:df:d5:2f:2e:2b:00:9c:67:60:76:a4:0a:b6:
                    b6:a1:56:2d:e0:fa:8b:fe:23:4b:de:8e:cb:16:f6:
                    7c:c3:3e:b3:37:e1:6c:38:42:64:76:d0:76:35:13:
                    2d:0d:bc:3b:10:bd:22:f1:bd:95:14:4e:90:aa:dd:
                    a4:0c:0e:fa:67:ce:f3:d6:40:4e:e1:8c:90:75:01:
                    1e:b0:63:3d:3d:51:86:c7:5c:5d:ca:bd:a3:09:ce:
                    92:d0:00:e6:a6:20:61:66:6f:b2:f7:c8:46:e8:20:
                    10:1b:af:9a:d5:15:fe:9e:cc:e8:e4:5a:f8:7b:eb:
                    ba:cc:e2:3f:b2:92:db:d5:95:e2:28:44:37:eb:05:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:39:B8:F1:B5:C1:4A:75:6A:EC:84:D6:2C:81:C3:77:F5:46:C9
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uSo5uPG1wUp1auyE1iyBw3f1Rsk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:df:27:dc:f3:de:32:8b:33:18:3a:67:9c:ab:24:8f:73:b5:
         6c:42:44:0c:b4:b0:f6:f6:af:10:cc:a1:55:fe:bf:8a:ca:e5:
         c7:e0:9d:6f:31:7b:2b:52:74:36:77:a8:87:c0:9e:71:1e:e6:
         13:81:c9:f2:d6:91:83:84:a3:c3:e7:8e:02:98:cb:9b:1d:33:
         05:79:b4:d0:50:28:69:b0:0e:ea:5f:db:2c:90:6a:28:3e:5a:
         88:e5:8a:26:35:04:50:98:a5:d1:cd:89:20:98:0e:19:26:55:
         1a:ec:85:ca:9f:5d:3e:f8:71:6e:1d:bb:2a:22:5a:4f:cb:bb:
         f8:de:18:cf:2f:34:8e:ea:45:77:5b:4c:80:d3:1b:45:51:3f:
         84:7f:9f:ee:67:d4:3c:61:22:d5:b1:da:99:2e:ad:1c:ee:a3:
         07:c6:ca:f4:20:fd:eb:14:d0:11:10:70:fd:f3:c9:ed:bc:16:
         7a:cf:4c:c8:8c:cd:49:3a:4b:be:d3:16:fc:d1:6a:bc:50:82:
         90:18:50:ba:00:ee:75:a0:e4:44:f0:14:ec:28:71:49:f6:39:
         bf:19:34:4f:f6:f8:f2:9b:05:1f:3f:a1:eb:cd:f3:ed:bb:97:
         bc:28:9a:38:28:b6:22:ca:6d:46:cb:15:81:80:c3:62:ae:5a:
         12:4b:77:22
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 18 03:18:33 2023 by rpki-client on console-fra.rpki-client.org