Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/tau1fRBrpDnScaufPt_ilZCn82A.roa
File:                     tau1fRBrpDnScaufPt_ilZCn82A.roa (raw, json)
Hash identifier:          UAB53J4WeDEhMQqTnysa7gf7N+p9k/k+iTVObzN5d5M=
Subject key identifier:   B5:AB:B5:7D:10:6B:A4:39:D2:71:AB:9F:3E:DF:E2:95:90:A7:F3:60
Certificate issuer:       /CN=75BD930C745D23E9EA585C04D6B99F95A96322E5
Certificate serial:       09F0
Authority key identifier: 75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/tau1fRBrpDnScaufPt_ilZCn82A.roa
Signing time:             Thu 15 Sep 2022 02:49:42 +0000
ROA not before:           Thu 15 Sep 2022 02:49:42 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131143
IP address blocks:        175.184.240.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544 (0x9f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75BD930C745D23E9EA585C04D6B99F95A96322E5
        Validity
            Not Before: Sep 15 02:49:42 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B5ABB57D106BA439D271AB9F3EDFE29590A7F360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:83:2c:9f:18:67:1b:64:ec:c3:5a:55:e7:
                    17:bd:8c:3b:50:19:16:11:f9:51:d2:f8:4d:57:a3:
                    17:22:31:da:66:e6:0e:86:42:b4:da:97:63:23:75:
                    d6:ec:40:0f:a5:8b:32:1f:fd:da:21:95:b0:01:96:
                    9d:87:1d:e0:63:ca:26:4b:36:54:f2:58:1a:9f:2f:
                    2e:46:88:77:21:73:61:f3:61:a4:7a:50:ae:e7:a1:
                    1f:72:5f:da:54:91:43:fb:6e:7e:84:56:88:df:df:
                    c2:f4:89:58:62:19:5d:b4:2d:a3:cd:a7:90:89:5e:
                    54:b1:4b:20:e0:40:aa:66:ef:3f:a8:85:d8:79:08:
                    f9:9a:f2:32:c8:74:0c:5e:34:ba:24:96:d9:4c:e1:
                    08:a7:60:99:e4:10:b0:76:c4:65:70:bd:0f:05:ab:
                    01:04:14:0b:c9:83:d0:3f:82:b6:91:48:16:39:6c:
                    99:45:07:8f:4d:61:86:fc:25:bd:04:3a:ba:d7:d2:
                    aa:f9:db:9c:c4:03:29:a6:54:61:87:7b:2e:c6:d7:
                    14:47:9d:f9:0f:d3:db:90:00:a7:d3:98:b9:6c:7f:
                    a6:ec:a9:c6:9a:8e:8a:39:87:99:98:f0:c8:e2:d8:
                    7d:e7:3c:d5:b8:78:e9:7c:03:54:2c:a5:73:04:7a:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AB:B5:7D:10:6B:A4:39:D2:71:AB:9F:3E:DF:E2:95:90:A7:F3:60
            X509v3 Authority Key Identifier:
                keyid:75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/tau1fRBrpDnScaufPt_ilZCn82A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.184.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:ba:c4:11:d3:09:d0:39:c7:43:2f:72:fb:ad:b4:ac:59:be:
         0b:53:89:d4:52:82:d7:33:99:cf:01:c5:61:c6:0b:6d:d1:bf:
         94:9a:83:c4:6d:40:3b:e9:f2:87:da:9f:f1:8b:51:a2:d3:59:
         90:76:d8:a8:6e:86:70:68:55:22:da:bf:d6:cd:16:03:43:b9:
         4d:48:0b:f4:2b:dd:21:75:48:bd:34:c2:f8:df:9d:7f:68:a6:
         ba:95:c0:49:f0:c1:6e:e7:42:0b:d1:1d:15:b4:bf:4f:86:b4:
         d3:c0:d7:40:47:1d:20:f3:76:3c:bd:5b:55:5a:05:0c:f8:c7:
         08:2c:2c:b9:bc:e5:36:a7:f3:e2:34:01:ed:67:88:07:49:4c:
         21:1c:6d:4e:04:40:6e:12:fa:d5:7d:9e:6e:c7:3f:d7:51:5c:
         d7:38:a3:2c:59:9b:c7:fa:bb:f9:aa:f0:6c:02:f6:aa:03:cb:
         da:43:8a:98:c7:87:b9:bd:88:c8:4d:2f:4a:2d:ce:25:2d:aa:
         4a:bc:7f:e7:6e:ae:e4:76:7a:fb:45:f3:8d:eb:00:ba:4e:9c:
         2e:6e:bd:a1:84:24:a4:0a:a3:45:e0:bb:9f:fc:bd:ff:3d:a7:
         17:76:12:b6:78:ff:e3:9b:c3:5f:47:e0:4f:f3:1d:03:21:fb:
         07:80:46:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:37 2023 by rpki-client on console-ams.rpki-client.org