Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cc_0MyPKYThghH8ILJ26Kc-3uKQ.roa
File:                     Cc_0MyPKYThghH8ILJ26Kc-3uKQ.roa (raw, json)
Hash identifier:          yukCZT3Ely3vJucx200TvBDZ4xcFoM3AqlOYAh9stas=
Subject key identifier:   09:CF:F4:33:23:CA:61:38:60:84:7F:08:2C:9D:BA:29:CF:B7:B8:A4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cc_0MyPKYThghH8ILJ26Kc-3uKQ.roa
Signing time:             Thu 15 Sep 2022 02:45:18 +0000
ROA not before:           Thu 15 Sep 2022 02:45:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=09CFF43323CA613860847F082C9DBA29CFB7B8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:59:10:f9:96:b0:9f:43:ac:36:d0:ce:4e:
                    8b:8e:03:49:41:35:d3:c7:f8:75:f1:98:c9:9d:a8:
                    02:40:9e:3a:c1:e9:f0:11:96:64:09:69:52:ad:e1:
                    71:0b:2d:eb:3e:04:12:ff:f4:f7:85:ec:99:c0:40:
                    48:bb:b0:e1:34:38:ea:3c:09:6a:59:38:cc:d8:b8:
                    cb:b1:64:58:fb:ac:86:4e:31:10:6b:c8:c0:8a:46:
                    52:36:83:a3:f7:fd:79:ba:0f:6f:b2:9d:a1:7e:7b:
                    52:15:02:d0:10:ca:35:68:9a:c4:9f:07:0d:4c:28:
                    c7:df:a3:71:49:94:db:26:d6:22:de:96:62:5f:98:
                    38:75:0f:b7:89:bf:dc:fe:e4:10:13:e8:a6:83:b0:
                    ba:68:03:b7:b2:cf:1b:67:db:4b:e5:a2:9c:e4:4d:
                    85:d8:5c:c9:60:f5:c6:e1:c1:fb:33:fb:09:e6:e8:
                    73:74:bc:e8:b8:8f:57:bb:55:6f:3d:0c:9d:36:19:
                    1b:0e:18:47:7b:f6:21:3e:73:4b:77:bc:5c:47:1a:
                    0d:2d:25:ab:fc:e8:5a:ee:41:50:66:55:77:d1:e4:
                    6f:fe:15:b2:e2:fd:2b:c0:97:2f:0a:ff:fb:50:5e:
                    e8:fc:d1:cd:fd:59:e4:83:d6:42:60:16:fd:6c:c5:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:F4:33:23:CA:61:38:60:84:7F:08:2C:9D:BA:29:CF:B7:B8:A4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cc_0MyPKYThghH8ILJ26Kc-3uKQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:66:24:2d:31:21:17:0c:0f:bc:af:39:bc:13:92:34:07:bb:
         b3:33:35:8a:95:fa:c2:78:8e:15:2f:b0:57:f5:c7:53:19:5f:
         b5:c2:e6:3b:af:84:b7:b8:4e:cc:e9:f2:eb:50:ae:99:b4:c3:
         a7:b3:6a:3a:94:a9:bb:ce:df:48:ac:6c:b3:83:91:b7:95:a9:
         02:25:43:10:2f:45:89:3f:97:c6:18:49:9e:fe:03:34:4e:6b:
         ff:e9:69:cc:9f:03:49:3b:19:82:96:43:16:0a:91:cd:27:59:
         93:db:82:05:4f:80:ff:93:99:73:17:eb:90:b8:b9:b0:78:b1:
         94:d4:37:80:e1:fb:43:b0:79:0f:3b:fe:25:0b:b6:3a:aa:59:
         67:75:ed:1b:5e:33:38:1d:83:99:26:fb:7d:11:ab:af:02:00:
         e7:29:7f:ff:d0:72:9b:11:4a:7d:63:a7:43:13:85:0b:f8:54:
         af:44:22:26:8d:72:3b:4c:fe:de:d1:63:06:86:17:25:98:bf:
         b3:8d:03:41:c6:b4:6b:41:65:fc:91:ef:32:b9:1e:72:fe:d0:
         b3:d3:51:66:b5:f1:82:c7:46:8c:6d:e8:37:b5:ad:2c:4b:69:
         53:b7:94:c9:1a:2b:e4:bf:02:f9:71:9b:d9:a2:bb:00:3c:af:
         16:b0:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org