Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/6O-5nihLw6XvZtbD-BcnfCowxVY.roa
File:                     6O-5nihLw6XvZtbD-BcnfCowxVY.roa (raw, json)
Hash identifier:          7/f5mKhbyjl6ysVDbdrO6z+okoYtpiY6+qecI5g08xU=
Subject key identifier:   E8:EF:B9:9E:28:4B:C3:A5:EF:66:D6:C3:F8:17:27:7C:2A:30:C5:56
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6O-5nihLw6XvZtbD-BcnfCowxVY.roa
Signing time:             Thu 15 Sep 2022 02:48:04 +0000
ROA not before:           Thu 15 Sep 2022 02:48:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     54994
IP address blocks:        202.39.156.0/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:48:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E8EFB99E284BC3A5EF66D6C3F817277C2A30C556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:31:a8:c4:51:f8:06:a5:c6:e6:a0:80:46:
                    d6:4a:68:d9:de:55:d2:91:da:ed:23:7d:29:db:07:
                    00:c2:21:ae:e7:c4:99:70:a6:81:41:dc:bb:da:44:
                    cb:77:75:93:41:51:2f:29:42:5d:99:8e:9c:88:33:
                    48:bd:82:68:14:61:10:6b:ea:3d:ab:17:f4:cc:ff:
                    65:2a:3d:f2:38:9e:62:10:e8:1d:5e:cc:a1:f3:32:
                    4c:42:8e:79:a0:76:63:93:fe:40:89:b1:2b:24:e2:
                    71:ed:7c:b4:a6:16:ae:d3:4f:8a:b4:e9:43:ec:92:
                    e4:5f:f9:11:f1:af:ec:9f:ec:a5:74:2f:c5:bc:98:
                    c4:97:6e:71:9b:e3:8c:c2:51:fc:89:8a:32:ee:e5:
                    ac:90:39:9e:ed:a5:d6:3b:c7:a7:f7:e7:42:ea:b0:
                    59:47:4d:7a:72:3a:41:22:6c:b4:f1:aa:e3:5f:5b:
                    de:be:bd:ff:4b:0b:58:3e:da:b9:b3:96:e2:70:98:
                    ef:25:bc:41:25:85:e9:10:8d:10:15:60:84:cc:04:
                    90:f2:b5:8d:58:4d:7c:74:ec:b1:d4:29:2d:fe:5e:
                    7c:3f:08:fa:58:e7:bb:a1:0e:b6:aa:47:7a:cd:60:
                    9e:36:ab:c3:b6:ea:5d:c6:ae:c3:00:c0:8d:46:50:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:B9:9E:28:4B:C3:A5:EF:66:D6:C3:F8:17:27:7C:2A:30:C5:56
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/6O-5nihLw6XvZtbD-BcnfCowxVY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.156.0/26

    Signature Algorithm: sha256WithRSAEncryption
         58:4f:1a:3a:8e:a1:71:a0:78:d6:a8:a8:3a:4f:65:c3:9e:d5:
         33:c2:06:1c:4e:5c:4e:0a:fa:dd:ff:99:67:11:b8:25:65:1f:
         ae:7c:16:e1:af:8d:21:d2:82:be:ea:da:6a:79:58:1d:8f:ed:
         54:5e:db:a4:c1:83:25:c9:5e:64:3a:ea:26:e7:65:0f:f9:ce:
         03:51:1e:88:2a:02:58:36:b6:ce:9a:6c:27:b4:31:50:fb:1f:
         c3:3d:72:7b:1d:55:4a:8a:f0:70:ca:69:86:e7:67:ca:e7:6a:
         1a:98:03:99:97:14:14:39:05:6a:1c:87:08:84:5e:dd:f2:43:
         0d:00:07:82:47:bf:2b:05:af:fd:f9:b0:e5:db:ee:3c:63:24:
         62:c1:94:31:c1:d2:66:20:20:20:c6:6e:31:14:00:9b:ce:96:
         ed:bf:16:e4:39:9a:cf:fe:7a:73:f5:fb:d9:ca:c0:61:c9:69:
         3b:66:98:ac:02:43:bc:83:f8:2d:cf:36:1c:d5:61:79:74:b6:
         23:b8:42:e5:0f:02:cf:86:58:52:b2:38:b9:73:04:91:86:7e:
         61:ea:26:97:07:f3:a9:02:84:9c:d7:80:05:46:b4:3a:a4:a6:
         76:e6:e1:6b:91:82:4f:31:ab:eb:8e:46:8c:11:d6:64:d7:0b:
         93:3c:cb:a6
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4RUZCOTlFMjg0QkMz
QTVFRjY2RDZDM0Y4MTcyNzdDMkEzMEM1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFjzGoxFH4BqXG5qCARtZKaNneVdKR2u0jfSnbBwDCIa7nxJlw
poFB3LvaRMt3dZNBUS8pQl2ZjpyIM0i9gmgUYRBr6j2rF/TM/2UqPfI4nmIQ6B1e
zKHzMkxCjnmgdmOT/kCJsSsk4nHtfLSmFq7TT4q06UPskuRf+RHxr+yf7KV0L8W8
mMSXbnGb44zCUfyJijLu5ayQOZ7tpdY7x6f350LqsFlHTXpyOkEibLTxquNfW96+
vf9LC1g+2rmzluJwmO8lvEElhekQjRAVYITMBJDytY1YTXx07LHUKS3+Xnw/CPpY
57uhDraqR3rNYJ42q8O26l3GrsMAwI1GUN55AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU6O+5nihLw6XvZtbD+BcnfCowxVYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC82Ty01bmloTHc2WHZadGJELUJj
bmZDb3d4Vlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGyiec
ADANBgkqhkiG9w0BAQsFAAOCAQEAWE8aOo6hcaB41qioOk9lw57VM8IGHE5cTgr6
3f+ZZxG4JWUfrnwW4a+NIdKCvuraanlYHY/tVF7bpMGDJcleZDrqJudlD/nOA1Ee
iCoCWDa2zppsJ7QxUPsfwz1yex1VSorwcMpphudnyudqGpgDmZcUFDkFahyHCIRe
3fJDDQAHgke/KwWv/fmw5dvuPGMkYsGUMcHSZiAgIMZuMRQAm86W7b8W5Dmaz/56
c/X72crAYclpO2aYrAJDvIP4Lc82HNVheXS2I7hC5Q8Cz4ZYUrI4uXMEkYZ+Yeom
lwfzqQKEnNeABUa0OqSmdubha5GCTzGr645GjBHWZNcLkzzLpg==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org