Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jyfY57h1N-9my4bN3KSGGw70mk.roa
File:                     8jyfY57h1N-9my4bN3KSGGw70mk.roa (raw, json)
Hash identifier:          X8Q6A3EnUkr6stb9l61p+XubsrwOG0oA+qJaJWg2Q88=
Subject key identifier:   F2:3C:9F:63:9E:E1:D4:DF:BD:9B:2E:1B:37:72:92:18:6C:3B:D2:69
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jyfY57h1N-9my4bN3KSGGw70mk.roa
Signing time:             Thu 15 Sep 2022 02:53:52 +0000
ROA not before:           Thu 15 Sep 2022 02:53:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.8.64/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F23C9F639EE1D4DFBD9B2E1B377292186C3BD269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:ff:16:ab:2c:11:0f:6d:86:e3:c0:90:77:
                    ed:e4:cc:05:2e:f8:9d:73:07:6a:e2:12:ee:f1:b4:
                    e6:c3:c2:b1:93:3a:b2:9c:8e:23:bf:d8:d1:ea:3e:
                    82:59:df:2a:f8:cd:32:e1:38:ae:9f:9b:2d:fb:b4:
                    be:2a:4a:89:39:bc:50:0e:83:f9:db:01:31:bd:9f:
                    7d:32:15:5c:62:c6:42:81:2f:fb:44:c1:58:f2:5d:
                    d7:d9:b9:e5:aa:68:40:3f:2a:89:2b:f6:76:09:1c:
                    59:ac:9e:23:be:7d:04:cb:85:0d:61:55:02:4d:8d:
                    6c:82:4f:0e:5f:2c:14:28:2f:24:e9:4d:7e:3a:3c:
                    a0:48:7d:ab:d7:a4:f7:a5:98:0c:19:cf:7f:6d:63:
                    2e:a0:a7:b4:1c:33:bf:5c:1e:45:e1:dc:98:22:4d:
                    eb:5b:ff:9a:38:ee:bf:19:d3:8a:18:fd:74:a5:c1:
                    97:68:25:3f:fe:09:26:38:6e:a1:91:0c:1c:3d:33:
                    5f:db:72:dd:2f:12:7f:89:2f:27:d1:12:75:40:1f:
                    3a:ec:8d:a4:92:7a:1e:95:05:be:cf:ab:5c:0d:d9:
                    da:7d:e6:14:b6:d9:29:51:f4:f8:d3:98:1b:be:03:
                    21:1a:5b:b6:cb:16:4d:8b:35:80:a1:13:f4:2a:15:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3C:9F:63:9E:E1:D4:DF:BD:9B:2E:1B:37:72:92:18:6C:3B:D2:69
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8jyfY57h1N-9my4bN3KSGGw70mk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.64/26

    Signature Algorithm: sha256WithRSAEncryption
         30:df:30:64:2f:04:47:4f:cd:e3:fc:49:1f:89:cf:6a:6b:46:
         d2:da:bb:58:d1:7f:f7:95:0f:f2:85:9c:40:f5:20:ac:a1:cc:
         9d:a6:62:69:63:3d:dd:19:31:98:74:72:fe:48:32:18:c1:90:
         97:5a:96:2a:b4:45:0f:5c:14:0a:fe:78:f4:47:0d:83:37:f3:
         cf:0c:6a:6e:67:af:59:d6:01:87:5b:91:8f:f1:58:5b:9d:86:
         ce:ed:57:2b:38:aa:5d:5b:43:52:44:03:4c:ac:21:12:42:43:
         4e:f2:59:c0:08:e3:46:cb:23:bb:20:93:64:8a:46:97:b4:fe:
         e3:aa:7c:fd:78:c1:1d:46:74:44:22:45:76:6a:cb:60:e8:28:
         dd:32:67:cc:53:2e:a9:e5:a6:e8:96:fe:ac:9b:e8:dd:c1:8a:
         bf:05:c3:65:38:c5:04:46:fd:d2:f8:18:20:c7:34:2e:36:cb:
         61:8b:49:c7:78:87:21:10:76:a0:81:03:80:2f:22:e8:99:10:
         ac:0f:ec:86:a5:ee:b3:ed:d9:4a:ef:f9:2a:c8:97:fd:84:ac:
         93:d9:70:48:68:3a:ac:c6:a1:9a:b2:19:31:4c:bc:10:a0:bb:
         b9:50:7e:34:63:ac:75:5e:7d:6a:c5:fa:c3:3e:d2:40:8a:9c:
         fa:13:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:10 2023 by rpki-client on console-ams.rpki-client.org