Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7jPst4RoZdvc7zgRGgJoOrJn9ms.roa
File:                     7jPst4RoZdvc7zgRGgJoOrJn9ms.roa (raw, json)
Hash identifier:          hWLxuFMW0IpS8mP3OgVUNDBZkShx5EhgDmLgu3X3qOo=
Subject key identifier:   EE:33:EC:B7:84:68:65:DB:DC:EF:38:11:1A:02:68:3A:B2:67:F6:6B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7jPst4RoZdvc7zgRGgJoOrJn9ms.roa
Signing time:             Fri 25 Nov 2022 04:39:04 +0000
ROA not before:           Fri 25 Nov 2022 04:39:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8387 (0x20c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EE33ECB7846865DBDCEF38111A02683AB267F66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:60:76:d6:0f:8c:c4:fe:57:07:18:e9:3b:
                    5c:b1:57:26:b9:54:17:2a:3f:1f:a5:3b:4d:dd:e6:
                    53:d3:2c:b5:2d:24:b3:2c:3f:68:59:f9:0e:54:91:
                    4e:df:8f:87:ec:e4:22:e2:e0:f9:5e:4e:e9:f6:7a:
                    3a:a5:a7:24:b4:88:da:83:b3:5f:75:5b:bc:42:03:
                    31:e6:82:d3:b1:97:05:4e:e1:b3:e9:81:d0:5c:2d:
                    6a:95:4f:48:36:12:77:08:eb:3a:70:80:be:de:7e:
                    1c:f9:a8:be:15:42:c8:1d:ab:36:7c:87:79:05:8d:
                    f4:e6:3c:af:c0:d3:fa:ca:01:49:a8:7d:04:14:1f:
                    26:2c:71:52:f2:d5:31:a7:fe:1f:de:ca:d7:be:e2:
                    bb:99:42:82:59:55:9a:ab:b1:20:85:0b:a0:cd:ab:
                    e2:e2:ad:4c:dc:4f:a9:6d:01:d5:63:16:6b:5a:13:
                    2b:ca:d9:0a:ad:c9:ff:9a:d0:7f:e0:74:4b:8f:38:
                    f4:35:3f:d7:9f:f2:85:b1:f4:d5:73:55:15:ad:d3:
                    54:c7:3d:04:19:59:8d:f4:9f:76:90:7b:e1:49:0f:
                    80:20:22:39:a5:77:9e:1c:f4:f3:32:6f:fe:fc:6d:
                    b1:e5:df:13:ed:c5:b1:f7:dc:55:29:61:b3:22:15:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:33:EC:B7:84:68:65:DB:DC:EF:38:11:1A:02:68:3A:B2:67:F6:6B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7jPst4RoZdvc7zgRGgJoOrJn9ms.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:0b:dc:be:7b:bb:ec:f7:88:b3:ec:b4:c2:b8:21:7f:05:
         f9:51:5f:01:39:ce:9c:2e:1c:6c:0c:05:e5:79:dd:fb:b5:b5:
         36:1c:b1:c0:13:dc:2d:32:ee:e8:b3:9b:fc:23:24:f0:41:3e:
         77:71:7a:b6:22:43:93:b3:ce:fd:27:7a:ca:db:70:2f:7b:c7:
         84:45:88:e4:37:99:eb:b7:a7:8c:58:c4:8a:12:e5:19:08:e7:
         19:b6:19:09:2e:f8:b8:c0:ea:20:4d:c7:a6:94:33:43:7e:7c:
         bf:8b:9b:76:50:42:9a:04:6e:a5:56:04:20:63:0a:11:a5:ec:
         4b:3d:80:1d:00:7b:28:7e:16:01:ed:07:1d:5d:a9:51:32:14:
         25:ac:0a:8d:df:4e:c1:61:28:60:fc:20:82:5e:a2:84:5e:aa:
         b3:3a:49:a4:77:51:c3:be:68:19:1a:24:5b:83:7c:ee:1b:e2:
         a3:69:84:88:4c:11:6c:ae:eb:08:91:bb:db:4a:2e:ab:99:f3:
         35:41:b3:16:9b:fa:44:6b:e1:32:d9:37:6c:67:73:b3:da:98:
         78:0f:5b:9f:8d:7a:3b:c5:a7:67:2e:55:54:c8:76:98:01:57:
         60:63:75:ec:b3:6e:99:38:ce:75:11:fc:26:c0:04:c1:e2:5e:
         2f:a8:a2:36
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVFMzNFQ0I3ODQ2ODY1
REJEQ0VGMzgxMTFBMDI2ODNBQjI2N0Y2NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6KGB21g+MxP5XBxjpO1yxVya5VBcqPx+lO03d5lPTLLUtJLMs
P2hZ+Q5UkU7fj4fs5CLi4PleTun2ejqlpyS0iNqDs191W7xCAzHmgtOxlwVO4bPp
gdBcLWqVT0g2EncI6zpwgL7efhz5qL4VQsgdqzZ8h3kFjfTmPK/A0/rKAUmofQQU
HyYscVLy1TGn/h/eyte+4ruZQoJZVZqrsSCFC6DNq+LirUzcT6ltAdVjFmtaEyvK
2Qqtyf+a0H/gdEuPOPQ1P9ef8oWx9NVzVRWt01THPQQZWY30n3aQe+FJD4AgIjml
d54c9PMyb/78bbHl3xPtxbH33FUpYbMiFR9TAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7jPst4RoZdvc7zgRGgJoOrJn9mswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdqUHN0NFJvWmR2Yzd6Z1JH
Z0pvT3JKbjltcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6bQwDQYJKoZIhvcNAQELBQADggEBAJmKC9y+e7vs94iz7LTCuCF/BflRXwE5zpwu
HGwMBeV53fu1tTYcscAT3C0y7uizm/wjJPBBPndxerYiQ5Ozzv0nesrbcC97x4RF
iOQ3meu3p4xYxIoS5RkI5xm2GQku+LjA6iBNx6aUM0N+fL+Lm3ZQQpoEbqVWBCBj
ChGl7Es9gB0Aeyh+FgHtBx1dqVEyFCWsCo3fTsFhKGD8IIJeooReqrM6SaR3UcO+
aBkaJFuDfO4b4qNphIhMEWyu6wiRu9tKLquZ8zVBsxab+kRr4TLZN2xnc7PamHgP
W5+NejvFp2cuVVTIdpgBV2Bjdeyzbpk4znUR/CbABMHiXi+oojY=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org