Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9qdIE6Hg1BIVYDWDWhr0CKzNjV0.roa
File:                     9qdIE6Hg1BIVYDWDWhr0CKzNjV0.roa (raw, json)
Hash identifier:          6pUWF/ETYhDia2f9UTG7h6wKRNYe6MdrN77RbHbozZg=
Subject key identifier:   F6:A7:48:13:A1:E0:D4:12:15:60:35:83:5A:1A:F4:08:AC:CD:8D:5D
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9qdIE6Hg1BIVYDWDWhr0CKzNjV0.roa
Signing time:             Thu 15 Sep 2022 02:43:52 +0000
ROA not before:           Thu 15 Sep 2022 02:43:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        175.180.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F6A74813A1E0D412156035835A1AF408ACCD8D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:f6:2c:9d:70:b9:58:17:ef:fe:3d:2f:ad:
                    b4:a2:cf:69:7c:4c:fe:27:f4:77:36:65:59:16:99:
                    60:2e:99:fa:c9:87:24:b4:ca:ed:35:88:90:8f:67:
                    05:d4:ef:b4:db:05:b8:f0:2e:2b:62:8d:71:dc:78:
                    a5:a7:50:a7:d4:79:90:72:39:24:44:d8:ed:43:94:
                    f7:e2:2d:13:7d:10:df:07:e6:ed:01:d5:f7:41:99:
                    8a:e0:19:dd:41:1c:c5:3b:77:c3:dc:1f:62:c2:40:
                    48:e4:63:c4:41:0e:f4:fa:f5:a5:65:79:4d:f3:97:
                    44:93:ee:96:78:e5:79:3f:da:6a:a6:d4:2e:5e:29:
                    e5:1c:6e:21:68:5c:ac:dd:30:5e:0d:bf:78:b9:d7:
                    45:b0:cb:6a:78:de:9b:7e:d3:9b:20:72:d3:83:69:
                    b4:26:54:1e:1b:c8:ef:9d:1a:45:b5:2a:5c:d0:c0:
                    59:a8:45:41:c7:6c:2f:6d:a0:4c:2f:ad:8d:76:b5:
                    97:7f:70:e2:63:ca:89:31:db:c6:a5:1f:7f:9e:60:
                    62:d8:f3:b0:85:02:79:2a:4c:9a:07:a3:40:99:5e:
                    2c:36:78:47:76:a3:b6:84:0a:4b:a8:60:82:a0:0b:
                    d6:32:e6:5e:15:bc:43:b8:f8:f7:ad:a4:4b:83:4b:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A7:48:13:A1:E0:D4:12:15:60:35:83:5A:1A:F4:08:AC:CD:8D:5D
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9qdIE6Hg1BIVYDWDWhr0CKzNjV0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:44:a6:05:6e:6a:33:1c:d0:9e:1f:62:41:45:72:50:4d:
         73:4f:df:82:10:aa:4b:b9:5a:26:71:7c:92:bf:00:a5:16:8f:
         62:10:96:42:1d:3a:82:cc:36:6b:90:16:5e:57:09:c3:5b:6f:
         bf:e7:d1:bc:35:7b:cd:7d:37:a2:a2:ce:57:ac:f0:8f:c5:9f:
         0d:da:c4:ae:a1:a8:83:dc:40:f0:60:1e:24:56:53:03:a0:1e:
         a8:ab:8e:60:9e:d3:f0:f6:fd:15:e3:ce:15:d6:14:5b:2a:81:
         93:51:94:12:25:b9:4f:79:e2:e5:19:81:6f:d9:ef:24:31:8f:
         c3:61:27:9c:56:3b:d0:5c:bf:2e:b0:a0:17:08:c1:c7:01:71:
         ad:43:17:7f:c9:34:a3:87:0f:3a:e7:ec:96:25:bb:8a:a2:69:
         68:db:9c:2d:69:48:bf:69:2c:f2:e3:6a:b8:7b:fa:f8:11:71:
         90:65:00:39:e0:1a:3c:bb:0b:0f:4c:c7:2c:4f:47:76:d6:d0:
         79:37:46:c5:79:fd:b6:7f:e5:f9:10:a6:61:fd:3e:65:46:3b:
         98:89:38:a1:d1:53:7a:18:64:2d:16:33:6b:23:af:71:e6:cf:
         9b:92:3c:a7:a1:7e:d7:be:0d:2a:a4:5f:2d:72:d2:08:66:0c:
         f2:59:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org