Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/x_u5m1nl7RgUtAQYdzzGlys5XEY.roa
File:                     x_u5m1nl7RgUtAQYdzzGlys5XEY.roa (raw, json)
Hash identifier:          ShxAvgaLCO1ymyjAXiAzAz2l0IEm0VQXO6+F1oAs6vg=
Subject key identifier:   C7:FB:B9:9B:59:E5:ED:18:14:B4:04:18:77:3C:C6:97:2B:39:5C:46
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x_u5m1nl7RgUtAQYdzzGlys5XEY.roa
Signing time:             Thu 15 Sep 2022 02:43:51 +0000
ROA not before:           Thu 15 Sep 2022 02:43:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        61.56.192.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C7FBB99B59E5ED1814B40418773CC6972B395C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:17:60:53:ca:e5:0b:cc:84:4e:fc:2f:fb:
                    9a:16:31:d2:ca:af:0c:38:01:32:5d:5f:63:58:93:
                    fc:a3:19:99:07:df:bc:f7:a8:fd:80:45:2e:97:e8:
                    79:c8:f6:be:54:8b:4b:38:36:0a:fd:41:bc:e1:98:
                    9b:d0:ed:47:e3:a1:13:26:71:f1:f6:29:dc:e7:62:
                    e0:a3:91:2c:08:2e:60:45:4b:b6:9b:ad:a5:80:38:
                    12:06:32:0a:36:55:87:53:63:39:ea:f7:d8:9f:52:
                    66:08:d5:9d:15:cf:09:09:f3:d0:13:79:2d:e4:f4:
                    92:83:98:af:ba:67:98:c9:40:7f:52:fc:38:02:1c:
                    37:49:9e:f2:61:6d:37:ef:fd:f7:5b:20:79:4c:e1:
                    bd:96:e1:b9:0c:5b:18:a7:c4:2f:02:56:cb:01:a0:
                    00:62:62:fa:09:c3:c6:0e:2d:00:4d:17:27:ea:68:
                    ef:ad:5d:9e:d6:37:3c:d3:ae:db:64:71:22:a7:77:
                    0f:e0:b2:79:41:37:21:4e:a2:80:bb:25:a9:27:f8:
                    fc:d5:9f:75:29:91:31:99:56:9f:e4:40:29:e2:00:
                    fc:1a:b8:40:11:dc:e8:9f:1f:75:61:96:78:fb:41:
                    b4:d5:05:21:36:1d:9c:96:d2:88:22:10:77:bb:51:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:B9:9B:59:E5:ED:18:14:B4:04:18:77:3C:C6:97:2B:39:5C:46
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x_u5m1nl7RgUtAQYdzzGlys5XEY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:8e:2f:e2:41:a2:bf:a8:d7:85:9a:54:97:97:72:ec:7e:22:
         44:a9:17:00:d8:cb:b9:2b:c2:ea:bd:02:84:18:9b:ee:aa:05:
         d9:4e:08:f8:7c:b9:03:22:7b:a8:d3:6a:24:dc:1a:70:27:f0:
         45:ca:27:9b:8b:c4:10:73:4c:e5:94:11:ae:38:31:7e:57:08:
         ff:76:d2:d7:ff:b6:4d:f9:72:74:b7:b1:83:ee:f0:5a:ac:ec:
         73:68:38:d9:69:81:41:25:92:20:ce:61:d5:79:8d:89:4a:d9:
         52:f2:5e:e6:16:69:f3:b0:a6:1e:7f:1f:be:99:06:96:69:51:
         e6:fa:8e:9b:b9:cd:74:9c:27:73:8d:b1:7b:eb:d5:f4:e6:dc:
         4b:05:c9:7a:8d:e7:93:ec:1f:71:51:a2:5d:b5:89:0b:97:53:
         d5:19:f7:c1:21:9f:e5:c1:92:25:2c:95:b2:15:dd:ab:ca:31:
         28:b4:ca:23:00:23:5c:79:d7:5a:88:ef:6a:3c:9d:7d:67:13:
         da:84:18:8a:e1:19:7f:5b:63:cf:85:64:34:13:d6:23:79:1d:
         41:9e:18:1b:59:59:5c:45:83:76:f9:a0:4c:1b:59:9c:b9:d4:
         20:2e:59:ce:48:f7:a7:a5:81:2e:6b:37:39:56:a1:ff:7e:21:
         db:f6:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org