Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AbrJkxshobmtHlm_9o-uoFmBNl0.roa
File:                     AbrJkxshobmtHlm_9o-uoFmBNl0.roa (raw, json)
Hash identifier:          jJyd8PmhwCpQ59a0debgFrG+JqQM5AAbp4PiBZUTp7c=
Subject key identifier:   01:BA:C9:93:1B:21:A1:B9:AD:1E:59:BF:F6:8F:AE:A0:59:81:36:5D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2103
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AbrJkxshobmtHlm_9o-uoFmBNl0.roa
Signing time:             Fri 25 Nov 2022 04:39:25 +0000
ROA not before:           Fri 25 Nov 2022 04:39:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8451 (0x2103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=01BAC9931B21A1B9AD1E59BFF68FAEA05981365D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:44:3f:18:3e:fa:0a:92:a2:6e:3c:fc:50:
                    52:d7:95:94:bd:7d:81:d1:dc:df:30:50:ea:3d:e2:
                    ae:15:c3:67:54:d2:d4:e4:0c:5e:56:e5:e2:bb:c8:
                    36:6d:93:d8:d2:38:29:ed:87:bd:f5:3c:db:69:fd:
                    e6:d0:24:07:b5:d3:f0:c5:2b:c5:17:e6:5e:d3:a9:
                    c9:2e:c0:83:01:92:8d:96:18:58:6d:6c:df:ef:42:
                    26:24:f7:24:2d:6f:f4:23:c9:06:e5:49:16:d0:dc:
                    86:5a:bc:eb:e4:9b:c9:26:06:76:66:c4:a0:00:a7:
                    f5:2c:4f:da:18:c6:fb:25:c8:97:f5:5c:ce:bf:a8:
                    66:5f:68:36:7d:8c:12:f5:1d:a4:6e:90:18:d0:50:
                    25:7c:40:38:38:e9:40:cf:9b:77:84:32:2a:81:f4:
                    2d:c5:4c:7a:4f:e1:e7:e8:7b:72:ed:5f:2e:a3:5d:
                    5c:b5:92:9d:45:0c:1b:fc:e6:73:ae:b5:69:d4:54:
                    14:fc:33:f0:41:0e:f5:6e:69:e3:e5:5a:a2:ab:82:
                    9e:e4:28:32:fe:71:ff:d5:84:97:48:7b:09:70:34:
                    e8:bd:34:10:2b:e0:b2:c9:d8:22:47:aa:7e:61:12:
                    8d:b2:42:90:e1:04:5b:63:7c:c9:10:26:05:9a:f8:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:C9:93:1B:21:A1:B9:AD:1E:59:BF:F6:8F:AE:A0:59:81:36:5D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AbrJkxshobmtHlm_9o-uoFmBNl0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:65:b6:e1:ff:51:75:65:05:be:20:7b:e1:34:c4:38:32:83:
         6f:73:f4:b5:da:89:84:e1:12:1d:b1:47:2b:43:c4:d4:f1:07:
         c4:7f:d8:27:e0:32:af:f1:67:57:4a:87:1e:a9:bd:78:b6:69:
         e3:b0:f6:59:fc:c7:46:3b:45:be:08:3b:9e:f3:7d:36:fd:0f:
         e9:4a:2e:da:b3:d2:2d:5c:4c:d1:01:77:22:24:5d:9f:e2:c0:
         4e:8b:1f:8b:bc:3f:a3:a6:12:3b:ef:a9:e7:9c:2f:83:95:34:
         52:39:b1:12:4a:86:80:fa:dd:b1:ae:c8:4e:da:c9:8c:36:cb:
         15:51:b0:f6:6d:0b:f9:b9:a1:01:fa:43:b4:3a:c7:b5:53:70:
         39:18:aa:2c:de:5a:85:1c:32:0c:9c:b5:bb:47:bf:04:a3:b8:
         ce:f0:50:f2:06:8e:9c:a6:cb:70:9e:84:52:ca:72:77:4a:69:
         8c:73:6a:d1:b6:98:35:80:84:f7:54:21:55:8b:9b:a6:ad:a6:
         a0:e3:e0:e8:c7:f1:a9:9b:2a:f9:8e:26:37:6c:c9:40:12:5f:
         0b:34:07:48:84:eb:ab:a9:b1:b5:bf:0b:1d:97:8a:88:63:87:
         cd:ad:20:84:72:48:03:5b:17:4f:c9:7e:bf:25:db:67:6d:29:
         67:74:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org