Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa
File:                     6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa (raw, json)
Hash identifier:          t9niwWGhC7Lv6xqpEs3eYbsxMBE4ChprWRnwWFhY8BA=
Subject key identifier:   E8:E1:C6:9B:09:BD:E4:56:00:B7:E0:C2:09:7D:B2:2F:B0:10:D9:62
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa
Signing time:             Thu 15 Sep 2022 02:43:54 +0000
ROA not before:           Thu 15 Sep 2022 02:43:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        175.180.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E8E1C69B09BDE45600B7E0C2097DB22FB010D962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:b0:6b:4f:a9:ca:73:38:26:11:9b:66:b4:
                    6d:6e:b9:c9:01:76:1b:45:56:24:f5:59:90:4a:b9:
                    fc:c0:5a:a6:5a:fd:05:77:4e:10:d8:67:79:69:1f:
                    5f:4f:04:83:f7:bf:04:4f:22:86:f9:8b:1b:f1:cf:
                    38:74:d4:54:3b:a5:4e:a7:e5:9a:66:41:72:72:b9:
                    cd:33:c3:5a:b3:fe:b8:75:11:14:af:79:c5:b4:b3:
                    fc:e6:a3:6a:b9:e6:34:e4:83:bf:4c:99:c6:f5:f3:
                    da:1a:cd:8c:6d:e2:d7:94:54:f8:40:e6:95:8f:0d:
                    ea:a8:2c:e0:07:36:6e:26:88:79:f9:9c:9a:47:92:
                    72:b9:84:d6:9a:8a:75:21:1f:61:a2:b1:e1:27:dc:
                    e9:ff:0d:a8:b6:33:00:27:2d:34:8e:3f:7b:12:3c:
                    19:5b:95:f1:8b:8c:ae:d3:a0:80:be:a2:5f:c7:db:
                    be:d4:77:6b:4b:5a:61:22:0b:58:9b:f4:21:42:c6:
                    f3:95:f5:ec:bc:ac:5e:b7:1e:0e:73:05:0a:35:b6:
                    7c:e7:e2:6f:e1:9b:ae:02:30:13:3d:b3:2e:7d:90:
                    f3:48:4d:9c:0b:ca:61:6c:e2:55:55:e2:df:e3:9c:
                    0e:4b:62:ba:26:73:71:8e:5a:09:13:35:05:31:8b:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:C6:9B:09:BD:E4:56:00:B7:E0:C2:09:7D:B2:2F:B0:10:D9:62
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6OHGmwm95FYAt-DCCX2yL7AQ2WI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         78:48:1a:6d:ef:90:41:39:aa:f7:15:f6:0e:8b:d9:4a:b8:43:
         8a:91:95:be:92:ff:84:71:d6:9f:09:38:f0:0c:c9:e5:f4:ec:
         52:34:c9:eb:46:1a:7a:06:4f:7a:22:06:9d:26:7d:1e:e2:b2:
         41:5c:68:ce:12:d9:33:e3:07:90:08:66:8f:06:ab:c5:a1:64:
         f9:42:fc:90:f2:cd:dc:c0:ba:26:06:3e:c5:16:06:f1:8d:03:
         30:91:49:de:b7:a8:fb:4d:c4:bc:3a:c5:70:81:a1:c7:60:e5:
         8a:98:55:82:ea:63:b0:d7:db:68:d9:5a:0a:57:e0:5d:5b:8f:
         22:c5:50:49:8a:55:1f:27:be:9c:77:3f:7a:6a:56:0f:75:69:
         f4:aa:4e:87:87:35:d8:b5:7f:da:32:15:1a:7a:b1:4c:15:2c:
         35:bd:9c:66:f2:60:1b:71:ee:91:84:7a:4b:79:f1:e6:e8:69:
         26:29:00:30:e9:fe:b1:56:f4:b3:f7:8e:92:fd:a0:76:aa:2a:
         9e:d7:91:63:f2:aa:a7:ad:70:2a:fe:f2:ea:57:8b:53:4f:df:
         4c:e1:78:53:ed:90:6f:d0:42:3f:c5:f2:84:64:72:da:93:62:
         34:07:d8:67:41:45:be:0b:23:ea:b1:54:a7:ee:e2:99:ba:2a:
         35:38:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org