Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AU1RCLHMc1qKVFC6WNYsvXBJC8Q.roa
File:                     AU1RCLHMc1qKVFC6WNYsvXBJC8Q.roa (raw, json)
Hash identifier:          TQmTtiTPgmqYPHFpbC3qA+s8JMJMMilz38MjGvHBIII=
Subject key identifier:   01:4D:51:08:B1:CC:73:5A:8A:54:50:BA:58:D6:2C:BD:70:49:0B:C4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AU1RCLHMc1qKVFC6WNYsvXBJC8Q.roa
Signing time:             Fri 25 Nov 2022 04:41:37 +0000
ROA not before:           Fri 25 Nov 2022 04:41:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.205.16/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8898 (0x22c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=014D5108B1CC735A8A5450BA58D62CBD70490BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:22:1d:e9:0f:36:87:08:58:b2:79:5a:69:45:
                    60:5d:17:f8:7d:ac:40:fc:c0:1c:23:4a:9d:50:28:
                    3e:1a:5f:aa:a9:77:35:af:f7:d1:c4:c6:f8:7c:36:
                    c6:9e:ce:5a:9a:33:f6:48:a5:1d:82:93:1f:b6:84:
                    a8:ba:95:cb:f0:28:f5:d5:58:03:2e:d0:b2:7b:35:
                    eb:66:2b:e2:eb:72:b4:f2:0d:15:33:7f:bc:83:96:
                    58:0d:5c:ff:2c:03:32:56:34:a8:92:b1:9c:ba:be:
                    68:ab:28:84:76:ac:fa:3b:0c:2b:fe:09:6a:d5:ab:
                    d5:9b:70:79:76:bb:2e:4e:61:40:13:08:ab:dd:38:
                    69:a3:5f:98:e7:4d:d9:0a:d4:f7:6c:a2:12:59:f4:
                    de:48:4d:0f:27:bc:da:f3:06:36:69:3d:73:e4:ed:
                    63:5d:a1:be:64:30:1b:37:5d:76:a4:21:d1:5c:3b:
                    d4:30:bb:51:32:8a:a9:2c:c2:b0:11:4c:01:dd:0a:
                    fe:84:e7:04:41:18:5b:17:bf:c7:8b:2a:e3:d0:ce:
                    d1:35:8a:5f:62:69:1d:b5:40:1d:b0:40:8a:c9:74:
                    56:da:2c:b9:7f:d4:60:ed:be:87:61:7c:42:3a:31:
                    7d:ec:61:11:57:c0:28:7a:c7:52:cc:26:d6:73:9b:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:51:08:B1:CC:73:5A:8A:54:50:BA:58:D6:2C:BD:70:49:0B:C4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AU1RCLHMc1qKVFC6WNYsvXBJC8Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.16/28

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:84:fd:79:39:26:99:29:68:15:38:a1:94:93:06:06:64:
         0f:aa:c3:c5:55:1e:39:02:29:5a:f7:2c:c8:45:bb:22:fb:40:
         17:0a:74:dc:6b:d9:5d:77:c9:aa:67:3e:bd:b1:35:ea:13:a8:
         7f:cd:83:c5:8c:63:99:80:48:f4:54:96:7f:17:14:b7:86:7b:
         c9:e6:c1:0c:ca:8c:15:2e:db:f2:72:14:3b:89:e0:c4:a8:df:
         48:04:73:ac:42:09:9f:4c:9f:12:20:65:ae:e4:1d:f2:8f:1c:
         fc:02:50:16:0b:f6:de:93:d4:dd:f3:82:74:9a:f7:9a:f6:bb:
         b9:f8:2b:4f:d1:f7:3c:e6:ff:06:7e:d3:85:7b:fe:b2:7f:79:
         44:ff:88:5e:aa:4c:0b:94:64:61:ae:28:9c:29:42:a5:0e:fe:
         6d:1f:c7:78:bc:e9:79:44:08:87:f1:b6:44:e5:42:4b:9c:3d:
         8d:cd:d5:40:61:ce:14:ce:a2:45:e3:95:01:a3:42:eb:22:eb:
         e9:b1:4d:40:bc:c2:53:dc:7f:01:e2:d9:06:c4:3b:0f:96:1c:
         9d:d4:43:aa:88:50:ce:8e:28:ae:c9:19:ad:8d:87:89:61:e4:
         ff:44:bf:4d:84:6f:6a:c5:52:bb:aa:a5:42:3d:51:41:9c:26:
         4f:e9:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----