Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6v8NCdF3-W-hu_ID_roiHSIaAD4.roa
File:                     6v8NCdF3-W-hu_ID_roiHSIaAD4.roa (raw, json)
Hash identifier:          QN1rXNx89HACli3NbVLmWZiOQLSlnKWRHHvi67y4HkU=
Subject key identifier:   EA:FF:0D:09:D1:77:F9:6F:A1:BB:F2:03:FE:BA:22:1D:22:1A:00:3E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6v8NCdF3-W-hu_ID_roiHSIaAD4.roa
Signing time:             Thu 15 Sep 2022 02:45:43 +0000
ROA not before:           Thu 15 Sep 2022 02:45:43 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:43 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EAFF0D09D177F96FA1BBF203FEBA221D221A003E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:bc:6a:22:ac:93:2b:81:23:f3:4c:2b:1b:
                    fd:63:2f:1f:0f:8e:48:46:ef:53:26:6b:b7:c2:fb:
                    43:f9:78:0e:82:82:65:c8:01:12:ca:25:5f:f2:b8:
                    f3:40:bf:8d:78:43:b0:9b:80:ec:33:dd:30:6b:aa:
                    e1:03:a2:fc:01:22:34:ea:8b:dd:7f:ba:1c:31:e2:
                    fe:6c:70:65:34:5d:15:d7:7a:78:55:ab:98:19:f0:
                    4d:72:5c:38:23:3c:19:12:00:d8:bf:67:11:e7:39:
                    d3:58:3f:03:cd:a6:c1:ff:2d:d4:af:95:72:92:b8:
                    81:79:d2:e1:c6:b8:c9:3a:f6:78:ba:b4:3e:e4:8f:
                    18:23:8c:65:95:29:a2:69:61:d2:b5:3d:83:73:26:
                    10:0d:fc:b3:7a:20:e2:ed:26:a6:24:09:a0:98:88:
                    ec:66:07:62:cb:b9:b0:84:f3:1c:a8:39:c4:29:da:
                    a6:a0:5e:a3:67:22:16:f5:40:8a:e7:15:ba:f2:45:
                    21:c7:6c:94:0b:5c:4f:9c:d7:05:45:b9:b8:56:16:
                    30:61:4b:7d:02:e1:55:dd:25:f6:dd:32:bf:9b:78:
                    10:dd:f2:e0:0e:2f:e6:78:44:65:43:b5:82:08:04:
                    82:69:fb:0a:fb:8d:e1:20:0c:5e:e1:21:ef:4e:f5:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FF:0D:09:D1:77:F9:6F:A1:BB:F2:03:FE:BA:22:1D:22:1A:00:3E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6v8NCdF3-W-hu_ID_roiHSIaAD4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:15:c6:69:1b:a0:56:33:a7:09:d9:49:55:6f:96:6b:48:
         44:aa:1c:39:d0:3c:db:cd:eb:0e:99:93:5a:f6:67:b7:05:1c:
         52:1b:ec:5e:7d:9e:04:58:ca:ca:63:e3:00:d8:11:c9:e6:cd:
         d6:26:b4:ee:15:27:d3:42:6c:c5:18:fa:d5:45:04:6e:68:7f:
         7d:ec:da:79:a9:b3:bb:81:0d:c1:dc:13:59:a7:3b:03:ee:0a:
         e1:08:7e:91:f1:ac:04:c6:99:ad:dc:b5:c1:86:e8:7f:9e:7c:
         97:ac:9a:3f:e7:33:e1:33:df:2c:66:1c:7d:39:fe:9f:95:38:
         8b:0b:e0:74:7d:07:20:f4:81:06:a4:b0:1d:8b:a9:b6:9d:59:
         25:45:72:f2:fc:54:ec:a5:96:98:cf:6b:e6:74:0e:73:8c:d1:
         9e:01:3e:b3:42:06:c0:c4:95:72:74:03:67:08:46:f7:1c:5b:
         49:3e:fe:6b:69:24:d9:f0:ee:f0:c7:03:c8:9b:af:b1:72:b5:
         20:2d:f2:e7:4e:b6:0b:10:bf:8e:a5:4b:fd:10:85:2c:82:79:
         53:5f:db:e3:9b:2a:cd:04:89:56:9a:87:b1:1a:09:f3:6d:23:
         49:c7:ae:16:7b:bb:8d:67:94:3a:49:29:42:ba:6d:7f:bf:a4:
         f2:eb:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org