Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa
File:                     Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa (raw, json)
Hash identifier:          yw3hgFZo7/aUfoDottD6ci+txgVO7EVrzbAuTWP1JDo=
Subject key identifier:   52:FD:97:A0:A7:D2:3A:95:BC:AE:69:1A:93:0A:96:69:9E:91:35:16
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa
Signing time:             Thu 15 Sep 2022 02:37:20 +0000
ROA not before:           Thu 15 Sep 2022 02:37:20 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17809
IP address blocks:        113.61.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Sep 15 02:37:20 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=52FD97A0A7D23A95BCAE691A930A96699E913516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:74:d1:7b:5e:ef:c0:52:76:e3:ac:36:79:
                    f7:28:3a:17:73:c2:8e:01:ae:fc:ef:3f:70:1b:95:
                    cb:dd:af:9f:ef:36:30:c6:70:43:c3:2b:f7:ef:4f:
                    53:15:94:e3:87:8b:a2:ee:1c:30:cd:50:9b:7a:09:
                    07:79:05:ba:2c:fb:42:e1:fd:20:3b:29:5e:08:87:
                    ce:f7:b6:ec:1c:e0:ba:73:dc:2f:00:47:af:5f:82:
                    23:19:4a:5f:83:da:18:71:66:4e:3a:26:07:81:60:
                    f8:3e:e3:e2:ee:86:d9:46:47:10:8a:68:d8:94:6f:
                    40:33:b8:36:5d:32:e8:40:98:a2:eb:dc:9e:8b:3f:
                    78:13:a1:3e:ea:91:53:1a:68:4c:d8:f1:0b:c2:56:
                    d7:e3:89:e1:2c:3d:df:e9:77:6e:30:7c:a2:9a:13:
                    45:3b:2f:2c:4f:92:47:a7:14:da:77:bc:62:bb:f8:
                    8c:52:7c:78:ce:92:2c:4a:19:07:91:f8:c7:35:03:
                    08:b6:07:a0:b1:eb:b4:4f:73:e6:8e:2a:c9:6d:19:
                    5b:0f:0b:dc:83:61:40:24:92:4c:b9:44:ae:8d:98:
                    f5:79:b2:cc:13:12:4b:ac:db:f0:83:05:b9:f1:27:
                    9c:56:a5:c0:ff:87:76:98:f8:19:8f:fb:eb:f9:cc:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:97:A0:A7:D2:3A:95:BC:AE:69:1A:93:0A:96:69:9E:91:35:16
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:27:7b:90:39:82:cf:00:6e:41:9d:d6:4e:1f:a4:f3:a0:ca:
         50:e1:71:28:86:6e:0b:66:69:5b:e0:d2:e8:6b:64:d6:d9:9c:
         7d:57:39:96:12:ae:85:5f:54:3b:4a:e2:8e:f0:d3:4b:87:9f:
         ba:79:11:d2:c8:e2:3c:b7:6c:15:e3:f2:77:6c:78:97:57:db:
         5b:53:68:15:05:e8:5e:17:e0:d1:c5:0f:d5:ac:17:b0:5b:2b:
         21:8f:27:ff:1b:38:28:55:7a:52:44:f0:db:8a:c1:5d:49:e3:
         01:0a:07:1e:90:2f:d6:38:94:57:1a:f0:7c:c0:6f:4f:79:7f:
         99:0d:92:a9:88:67:13:ad:f7:11:df:38:21:01:9f:88:35:c6:
         a5:46:76:0d:77:aa:ca:45:06:2b:1c:1f:57:3a:c0:dc:e1:4b:
         99:eb:91:ee:88:0d:27:ff:97:42:a5:1a:2c:52:85:f7:53:fc:
         44:48:18:0b:17:7b:c3:1c:77:0a:9d:17:a2:7f:03:e0:02:c1:
         e3:62:95:71:05:45:a5:1e:7c:75:20:ac:0c:b0:f8:72:41:85:
         01:05:82:3a:a9:89:76:92:e2:f2:c8:60:a7:80:8d:41:35:23:
         dd:c2:55:7e:d0:9a:73:6c:6a:00:fb:78:e7:d1:8e:94:15:2f:
         76:f3:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:53 2023 by rpki-client on console-ams.rpki-client.org