Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AwvwCWpYQNbb1Y4LaNB_2xFEek0.roa
File:                     AwvwCWpYQNbb1Y4LaNB_2xFEek0.roa (raw, json)
Hash identifier:          9Di/lkKsGHnLIn2bhe1UKfPP56EUOUEVwN5yDILEO2Y=
Subject key identifier:   03:0B:F0:09:6A:58:40:D6:DB:D5:8E:0B:68:D0:7F:DB:11:44:7A:4D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2166
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AwvwCWpYQNbb1Y4LaNB_2xFEek0.roa
Signing time:             Fri 25 Nov 2022 04:39:53 +0000
ROA not before:           Fri 25 Nov 2022 04:39:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8550 (0x2166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=030BF0096A5840D6DBD58E0B68D07FDB11447A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:96:2f:01:56:ac:38:3b:a9:5a:e7:28:f0:
                    1f:d7:36:51:78:52:7f:b2:f2:c8:b7:08:41:31:c2:
                    0f:18:da:8b:a2:3a:53:5e:7b:68:bb:08:98:ee:3d:
                    f0:ad:23:37:1b:1b:5e:30:37:61:58:7a:ec:e5:70:
                    45:a9:d3:a4:6a:94:c9:4e:f0:c4:84:a3:77:2d:c3:
                    4e:67:f7:de:9d:d3:f7:58:8f:8a:43:65:a8:d3:2c:
                    e2:f5:76:1c:84:c5:5f:31:0d:3e:1a:80:38:58:f7:
                    31:32:6a:db:4a:ca:27:70:fc:65:47:5c:1d:0b:94:
                    1f:12:e7:e8:99:b4:68:09:b3:1d:17:fd:88:25:4c:
                    aa:91:e1:2b:92:9e:a6:4c:1c:92:b1:a3:22:20:67:
                    f6:b9:90:e2:5b:aa:e5:82:3e:73:3e:11:f4:7f:0c:
                    6c:83:11:e8:96:55:0d:21:2b:81:92:18:b2:8b:a4:
                    66:a9:8c:cd:7f:b3:aa:f2:86:cd:2a:cc:b8:c9:5a:
                    a7:59:0c:db:c3:a6:dc:c8:de:e1:7f:07:6c:5f:09:
                    9f:30:8a:ae:d8:d4:9f:3d:1d:ca:66:4c:ad:63:8b:
                    f5:10:8f:14:f1:0c:8a:14:95:01:ec:03:75:e8:ce:
                    4c:b6:97:ef:be:22:fc:80:5c:e4:dc:66:e9:13:37:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:F0:09:6A:58:40:D6:DB:D5:8E:0B:68:D0:7F:DB:11:44:7A:4D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AwvwCWpYQNbb1Y4LaNB_2xFEek0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:1b:ab:9b:61:8b:46:cf:8c:04:b9:dc:85:b8:2e:73:f8:f2:
         80:1a:77:26:bd:4c:2e:2d:ee:90:8f:6d:36:a4:eb:4e:b4:c5:
         08:70:4e:06:28:12:10:bf:54:65:84:7e:83:ac:40:63:6e:11:
         b5:4c:f9:f6:fc:09:76:7a:16:b1:d1:f5:c0:af:e7:4d:2f:8f:
         70:1b:28:33:10:8f:cb:93:21:cc:31:db:b0:9b:fd:78:cf:ce:
         bb:28:40:54:79:09:a6:ca:6f:18:ad:1c:e9:58:44:48:3e:3f:
         7c:18:81:0b:bf:f8:91:e2:06:e6:5f:ac:68:a1:08:a5:62:ea:
         99:85:7b:6e:6e:9d:55:85:16:06:9a:ab:73:dd:83:b1:bb:b5:
         76:d3:6d:bf:88:3e:12:77:cd:28:67:2b:ea:54:80:48:7e:55:
         9d:3a:a2:61:ea:2a:11:19:54:f4:f0:ef:70:c3:a5:53:67:34:
         3f:c2:49:b1:55:31:0d:1c:4d:14:9c:da:c2:05:ae:0e:8d:e9:
         4d:3f:5b:44:fd:a5:e3:0f:f1:a9:44:12:d1:42:9f:3c:de:f6:
         0a:55:92:c2:cb:90:d6:74:71:c1:4a:a2:a5:4c:88:35:df:e0:
         9a:26:6c:41:64:2e:7e:03:1b:1b:a6:30:83:5b:21:65:95:70:
         f0:3b:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org