Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa
File:                     5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa (raw, json)
Hash identifier:          SqZ/pfmzK4JCKKgv25xroDwpz4X8ZqnyfaIDYIj8kwo=
Subject key identifier:   E7:F8:47:2F:49:FF:31:30:3C:7D:47:97:0F:63:DB:BC:BC:17:C9:4E
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa
Signing time:             Thu 15 Sep 2022 02:42:47 +0000
ROA not before:           Thu 15 Sep 2022 02:42:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.146.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E7F8472F49FF31303C7D47970F63DBBCBC17C94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:82:56:86:44:e1:77:38:6e:d8:d5:f6:c7:
                    cb:71:ac:e6:ce:2b:b0:4a:00:33:ed:eb:2f:8e:6c:
                    a0:60:d1:83:d2:47:e7:88:3d:98:05:72:af:ac:22:
                    2c:25:43:d8:20:2b:93:99:11:4c:58:ac:d1:62:93:
                    ae:5e:b8:75:5f:cd:91:22:78:cb:cb:37:dd:10:b0:
                    39:78:a1:6c:72:2f:79:39:49:19:f1:4f:6d:1c:6b:
                    4f:03:d1:ec:8c:d0:b7:72:18:46:58:4d:2a:9b:3a:
                    15:28:63:ef:71:8e:6f:84:fa:83:8b:21:27:c5:77:
                    1f:62:93:3b:a1:d8:f5:06:39:c7:00:62:4e:91:a9:
                    ec:56:81:09:52:f7:a3:3f:3c:67:57:45:9f:db:fc:
                    5e:65:b5:b0:63:75:33:3f:92:2b:61:b6:2e:1d:62:
                    29:e9:a9:54:d2:aa:68:bc:71:ae:0a:43:cd:cd:eb:
                    6e:28:a7:d6:dd:a3:ac:ac:3e:46:db:c1:7b:76:50:
                    8a:59:5e:29:b9:6f:cd:98:0f:cc:69:da:4b:ec:0d:
                    4f:c5:97:1f:15:51:11:e5:93:4b:97:fe:23:f0:40:
                    5d:43:cc:c9:7f:0e:5d:d3:d7:9c:e6:39:3c:9c:9f:
                    e6:9a:49:c3:f3:cc:03:6a:41:f4:34:49:22:11:5d:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F8:47:2F:49:FF:31:30:3C:7D:47:97:0F:63:DB:BC:BC:17:C9:4E
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5_hHL0n_MTA8fUeXD2PbvLwXyU4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:f0:0b:18:d9:86:9d:39:39:27:4d:5b:6a:c7:12:07:d1:
         d2:4f:a5:18:ad:c0:85:91:04:6f:9a:1d:05:02:f1:5f:9a:b3:
         69:5c:f9:40:e2:c5:33:3b:75:80:60:fd:1f:32:7f:24:c4:be:
         30:c2:39:63:00:0b:6a:51:72:d1:7d:11:c1:6a:01:be:67:b2:
         3d:8d:a1:56:e2:7c:ae:d1:a9:c9:07:b8:be:3a:87:4f:a1:e0:
         1d:bc:d3:e9:bf:b8:ce:90:d0:8a:d9:63:d8:a9:87:62:05:49:
         27:50:88:10:8d:ec:72:d8:3c:56:29:d4:2b:9c:de:9a:cb:33:
         71:de:da:b7:3a:a4:3a:73:e2:f0:be:66:86:a3:b5:84:23:88:
         a1:d2:64:4b:68:a9:84:be:6a:9e:5e:11:91:c7:61:39:7a:d3:
         f8:46:b7:28:86:33:e2:b9:8e:8b:5e:96:09:36:8f:98:47:7b:
         25:07:04:e9:cd:ec:78:cf:46:5a:0b:3b:17:8c:42:ec:91:ad:
         40:b7:5a:d3:02:04:41:0c:4c:91:5a:72:9f:03:aa:02:71:f0:
         7b:91:21:d7:36:ee:3e:f5:d2:aa:fa:e9:bf:76:e6:ec:a9:01:
         03:e1:2b:94:f1:29:bf:30:8f:53:4c:6c:da:46:d8:55:00:89:
         d1:ac:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org