Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rPThUX_xW3dVN8Sefv9vxG5k9uM.roa
File:                     rPThUX_xW3dVN8Sefv9vxG5k9uM.roa (raw, json)
Hash identifier:          i66VTpeUsn60krnTtSgnmtky2YgvJ47l7yrCPbV9IsM=
Subject key identifier:   AC:F4:E1:51:7F:F1:5B:77:55:37:C4:9E:7E:FF:6F:C4:6E:64:F6:E3
Certificate issuer:       /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial:       018C
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rPThUX_xW3dVN8Sefv9vxG5k9uM.roa
Signing time:             Mon 10 Feb 2025 13:44:14 +0000
ROA not before:           Mon 10 Feb 2025 13:44:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     2914
IP address blocks:        202.160.88.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 14:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
        Validity
            Not Before: Feb 10 13:44:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ACF4E1517FF15B775537C49E7EFF6FC46E64F6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:cc:9c:01:fa:23:28:0a:0d:cf:05:3e:38:
                    9c:bc:c5:b1:1b:cb:6b:a4:ab:53:22:f5:45:5c:9a:
                    0c:6b:67:36:54:0c:84:18:8f:e0:74:01:05:2d:55:
                    7c:31:ec:e8:1e:b9:29:cf:bb:ea:eb:1c:d2:59:2f:
                    6a:3a:b6:9e:55:5a:6a:1c:58:a2:42:7a:43:1e:ec:
                    d1:ea:c5:b4:ec:70:08:fc:b8:72:79:9c:30:b0:21:
                    98:3a:5e:9b:23:ac:8e:96:8b:cb:45:a9:33:81:13:
                    7d:83:a1:03:92:93:33:c3:b8:7c:08:0b:05:c3:ef:
                    08:61:c7:72:a3:84:ee:de:e4:9c:f9:d4:d7:6b:b0:
                    00:85:8a:57:24:13:05:05:35:39:45:bf:3b:28:83:
                    93:fa:9c:83:04:32:59:4f:0e:e0:36:76:2b:50:30:
                    55:12:47:dd:76:45:c2:6c:89:ee:c9:ad:d0:b4:5c:
                    6c:e2:c2:c3:dc:24:54:62:e4:17:b0:42:53:e8:8b:
                    a6:65:fe:16:0b:0d:1c:89:2b:69:02:60:b2:17:32:
                    a4:b2:67:c2:8f:fa:20:f5:30:21:8b:b3:d4:1b:9e:
                    f7:97:6f:79:59:06:33:83:39:62:0b:28:b7:53:16:
                    7a:c2:c7:68:c6:e6:5d:00:e8:e6:26:2e:8c:5f:05:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:E1:51:7F:F1:5B:77:55:37:C4:9E:7E:FF:6F:C4:6E:64:F6:E3
            X509v3 Authority Key Identifier:
                keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/rPThUX_xW3dVN8Sefv9vxG5k9uM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:e2:29:3c:d2:c9:6a:a8:47:24:89:5c:57:8e:77:3c:01:
         7e:aa:1b:4a:57:50:a0:52:e6:06:88:68:4e:54:5c:a1:d7:bd:
         ec:78:7b:b5:af:bb:b1:38:ef:17:1a:65:69:5c:ff:03:7e:cf:
         69:0b:17:d7:d6:6d:35:23:00:45:23:32:06:d3:df:b1:44:5c:
         88:04:52:21:50:f3:f9:58:16:5d:17:3f:20:a0:58:2a:d0:eb:
         12:87:f1:22:39:40:b9:32:3c:f9:d8:2b:d7:6a:20:3b:a7:d5:
         e8:16:fb:40:7b:9d:d1:d2:48:08:6a:a8:e4:25:c3:ba:bb:47:
         5a:74:31:52:e5:66:5c:57:dd:5a:b6:06:39:85:15:20:5b:a0:
         22:e9:fa:61:40:1d:15:3c:52:5c:53:a3:39:61:29:1c:eb:4d:
         5e:b2:22:a5:73:15:b0:c2:1e:bb:f5:d4:4c:95:1f:d3:d7:ac:
         fc:a0:fe:e3:ac:13:24:a5:a2:4b:99:10:74:a4:22:07:c4:68:
         e1:dd:91:dc:3b:98:86:53:8c:1c:4f:b2:06:fc:c5:5c:00:6b:
         6f:55:d8:30:01:3e:e1:7c:4f:57:44:43:72:80:57:3f:b3:4c:
         7f:96:05:e0:63:c0:7c:56:6b:2d:3f:92:85:f7:6f:f7:5c:09:
         95:7a:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----