Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-wkorMZtbFKLJDbTTrYpKNgY70I.roa
File:                     -wkorMZtbFKLJDbTTrYpKNgY70I.roa (raw, json)
Hash identifier:          LQTQ6If4vBfEDYudLQtsbugaKOoiHStRlXOSOHsIe/w=
Subject key identifier:   FB:09:28:AC:C6:6D:6C:52:8B:24:36:D3:4E:B6:29:28:D8:18:EF:42
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-wkorMZtbFKLJDbTTrYpKNgY70I.roa
Signing time:             Thu 15 Sep 2022 02:45:53 +0000
ROA not before:           Thu 15 Sep 2022 02:45:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FB0928ACC66D6C528B2436D34EB62928D818EF42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:82:15:1b:ad:99:e6:df:c0:b0:5b:2b:d1:
                    ec:7c:1c:12:32:be:0d:e5:f6:2b:f1:96:96:26:51:
                    cf:70:af:90:fa:96:15:a8:54:9d:c1:a4:e9:79:06:
                    27:28:ec:13:c5:b9:aa:01:30:07:28:36:fd:55:46:
                    7b:60:b1:26:64:99:e1:db:ec:1b:96:e1:40:a0:d1:
                    a8:e8:65:ed:2b:e5:8c:ec:b7:9b:9a:c7:37:e0:5b:
                    fa:02:98:3b:28:5d:c1:25:1a:1c:8a:3b:4b:fe:68:
                    8b:51:79:dc:7a:7b:5d:a1:05:e8:14:34:61:c2:62:
                    72:a6:3b:4c:e3:78:69:5a:b7:55:b2:6d:d0:d5:5b:
                    f2:f8:94:93:8c:dc:a7:61:6d:89:22:41:9e:c0:1c:
                    41:6f:f0:37:10:a2:7b:87:38:83:b1:f5:e4:ea:66:
                    a5:ed:63:e8:5e:fb:a6:bd:d2:e7:27:f8:6f:dd:ed:
                    f5:4c:3d:21:f3:04:64:66:6d:a7:da:c9:67:12:fb:
                    f9:8a:6f:bf:e4:f9:0c:9f:96:35:d3:65:a2:24:ae:
                    c6:8a:4e:8b:c4:f7:3a:c1:92:f8:f1:29:d7:99:72:
                    10:2c:e1:1c:89:2b:aa:cc:d4:f8:e3:57:1b:51:8d:
                    b5:4d:47:61:5e:f4:af:44:86:bf:7c:57:b4:24:c3:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:28:AC:C6:6D:6C:52:8B:24:36:D3:4E:B6:29:28:D8:18:EF:42
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-wkorMZtbFKLJDbTTrYpKNgY70I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:b2:ba:6a:03:a8:71:84:80:af:c4:64:79:b4:e5:42:28:aa:
         36:ed:b5:ed:4f:ff:02:09:66:85:00:e0:2e:b4:d7:77:57:04:
         7d:0d:b1:06:7b:00:c3:cc:ee:30:14:f6:d6:60:cb:64:32:1f:
         0a:a4:d3:36:e9:ef:d0:28:78:c5:03:3d:af:01:ef:72:fd:29:
         c3:4f:65:89:b3:f3:a9:5e:71:4e:66:88:9e:cd:72:14:fc:6a:
         04:e6:f4:98:63:31:46:7d:ed:3d:a6:14:69:35:a9:f7:06:c1:
         20:45:a0:b4:e4:e2:12:88:62:a4:9e:d9:5a:be:f3:b8:5f:ec:
         15:a8:37:6f:99:c8:a3:bc:05:18:3e:cf:ed:61:3e:8b:6a:8b:
         f6:25:8d:c2:80:09:5b:3e:54:8f:b1:63:f0:b1:0d:72:aa:7e:
         b8:ce:6d:6c:9c:d6:37:14:15:6a:e8:f1:64:05:bf:89:a4:43:
         2b:b9:6b:35:b3:16:a4:d0:e6:55:12:b2:c6:5c:0d:39:a4:ef:
         2a:1d:f9:6c:f3:a8:e6:ae:78:47:15:e4:29:f3:55:ef:9e:a3:
         d7:96:98:c1:43:f1:bd:c7:32:f4:28:46:ca:50:f2:64:53:9a:
         9c:dd:a0:7b:2f:ff:34:e4:c9:f6:4e:df:d4:28:20:c3:5f:00:
         18:ce:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-fra.rpki-client.org