Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2b1xVEwdWGe6aj_9riejr9JHPl8.roa
File:                     2b1xVEwdWGe6aj_9riejr9JHPl8.roa (raw, json)
Hash identifier:          o4TMPkJyshAW4ZriLKkTrn9e/++8qijVbLhghyhJ660=
Subject key identifier:   D9:BD:71:54:4C:1D:58:67:BA:6A:3F:FD:AE:27:A3:AF:D2:47:3E:5F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2b1xVEwdWGe6aj_9riejr9JHPl8.roa
Signing time:             Thu 15 Sep 2022 02:53:45 +0000
ROA not before:           Thu 15 Sep 2022 02:53:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D9BD71544C1D5867BA6A3FFDAE27A3AFD2473E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:ac:66:e6:83:9c:7c:09:b8:5d:b5:4c:9b:
                    3d:c6:1c:37:4e:69:5b:40:f5:60:4b:1f:9b:54:09:
                    8a:9d:07:36:8c:57:51:90:06:c2:ba:1c:eb:52:3e:
                    bf:01:16:39:ac:ee:24:a2:4e:78:34:d1:a4:8d:6e:
                    4f:6b:da:71:ca:c1:4a:34:0a:5b:d3:f8:96:20:4e:
                    51:2b:25:18:9f:79:b5:f5:2a:5a:68:4b:71:ff:5f:
                    83:53:cd:f1:f9:f3:fc:3b:2c:01:da:10:33:30:5f:
                    c8:1d:98:5c:2b:48:a5:ca:a6:9c:90:63:ab:0a:23:
                    5a:e2:02:f7:37:32:5d:16:29:27:ba:96:d0:3d:ec:
                    65:6f:d5:e6:1f:3c:21:19:f3:80:b8:f6:2a:81:99:
                    27:2c:be:9f:cd:74:28:1f:94:17:26:9f:1a:c8:0e:
                    b5:a3:30:e3:18:cd:a8:9e:31:d8:c8:2d:cb:d4:ee:
                    0a:21:72:eb:bf:00:44:90:99:e4:40:20:89:f5:24:
                    59:ed:f1:ee:61:4a:73:4d:bd:14:10:5e:70:84:b3:
                    f1:d6:b7:63:6b:f8:eb:78:9b:9f:9f:a2:ac:93:2b:
                    8c:31:1a:71:e9:ff:38:35:a4:8d:5e:e0:8f:f6:92:
                    61:55:e1:94:75:69:54:13:0d:e2:dd:b8:ba:60:34:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:71:54:4C:1D:58:67:BA:6A:3F:FD:AE:27:A3:AF:D2:47:3E:5F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2b1xVEwdWGe6aj_9riejr9JHPl8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:28:b5:c9:4d:3a:bf:b9:39:b4:58:d2:37:ee:30:9c:41:
         e6:c1:7c:0c:0b:08:5a:ba:8c:ce:b5:15:f2:c0:3d:66:2f:f7:
         8e:b8:c5:53:6c:84:36:02:35:12:d8:db:db:e5:e7:79:b5:55:
         b9:a9:dc:b9:33:8e:8f:c9:18:89:32:a0:96:f7:45:51:6f:23:
         06:24:b2:ca:1b:88:46:73:07:7f:25:ab:f3:e0:44:ea:e5:cc:
         25:ef:4b:82:a2:c6:cd:30:b4:8b:64:e8:f7:05:f7:38:09:77:
         f4:58:5d:e9:0b:1a:f9:4a:82:bd:e8:2a:84:1a:c9:70:d5:8f:
         64:c0:f6:76:22:ea:fc:6b:a7:fa:1c:a1:63:b5:fd:c2:e9:4b:
         02:13:e5:8b:15:70:50:3f:73:13:45:fc:d0:78:6a:be:60:b7:
         76:a1:a3:b4:dc:0a:4d:20:24:6d:e0:1e:11:38:c2:7e:aa:32:
         25:a5:06:bc:a6:c1:9c:a9:90:ef:80:c2:17:f1:2b:15:54:1d:
         a0:70:e6:1d:84:ec:91:7d:1a:f5:13:77:05:ee:9c:11:88:f8:
         f8:e6:59:34:33:fb:20:4a:9a:27:87:52:0c:7a:fd:fd:69:b3:
         79:9f:b7:62:a1:fe:f1:73:1e:a3:40:ce:f2:e5:44:91:53:a7:
         41:04:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org