Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DD5CuljKpzEJxHx4eswb5jRRGyc.roa
File:                     DD5CuljKpzEJxHx4eswb5jRRGyc.roa (raw, json)
Hash identifier:          8eM9I56gurt36GwwfUGD328mLvfOXFVYxy0DNibO2r4=
Subject key identifier:   0C:3E:42:BA:58:CA:A7:31:09:C4:7C:78:7A:CC:1B:E6:34:51:1B:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2131
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DD5CuljKpzEJxHx4eswb5jRRGyc.roa
Signing time:             Fri 25 Nov 2022 04:39:37 +0000
ROA not before:           Fri 25 Nov 2022 04:39:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.126.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8497 (0x2131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0C3E42BA58CAA73109C47C787ACC1BE634511B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:bf:1f:15:cf:f0:1a:47:45:9b:36:04:6a:
                    5d:4c:40:7f:ff:d4:04:13:9a:74:db:02:f7:0e:7e:
                    58:1d:f0:08:8c:2b:2c:ca:1d:b3:73:9f:f3:d2:b7:
                    ae:dd:ef:88:17:9a:13:5e:3f:eb:16:0a:9b:d2:96:
                    57:c4:5e:6a:36:e5:92:87:3e:d1:e7:4d:04:ed:cb:
                    20:2c:95:c7:a5:4b:80:d8:45:f9:50:6b:31:80:15:
                    07:94:60:bc:05:97:e3:e5:57:9e:bc:2a:d6:ab:81:
                    48:0d:e2:67:40:1f:f0:e7:8e:e3:09:e2:a2:47:1f:
                    a1:8e:ee:68:62:1e:15:d4:41:1d:77:e5:1d:1d:47:
                    3b:c8:9f:96:a9:98:08:d8:27:5a:8d:72:34:7b:a7:
                    ef:27:f2:09:21:a9:b8:12:b7:0c:94:cb:7d:c1:f3:
                    e1:92:80:66:f4:41:de:01:33:13:c3:a0:c7:e1:bd:
                    f5:e9:53:87:6e:12:4f:03:33:ab:bf:25:fe:4b:2d:
                    a6:89:9d:6f:71:90:3d:a3:7f:1c:77:87:71:8d:4a:
                    93:f1:a3:a9:fa:2b:cc:3a:4b:05:ac:73:31:1f:e0:
                    53:3e:a8:d5:9e:f2:19:59:dc:43:90:fe:d6:a4:9a:
                    32:57:54:f4:3d:fd:ba:f0:e8:38:c1:b3:41:20:a3:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:42:BA:58:CA:A7:31:09:C4:7C:78:7A:CC:1B:E6:34:51:1B:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DD5CuljKpzEJxHx4eswb5jRRGyc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:55:b8:19:c2:d8:a1:6a:b7:c5:84:8e:49:94:08:05:88:
         0f:e4:dd:7a:0f:f0:82:34:a7:2a:22:13:f5:4f:c6:2e:44:bd:
         ff:26:8e:fc:b9:99:44:52:df:91:34:42:7c:1e:a1:23:4a:cd:
         3d:fa:b2:0b:46:6a:66:21:2c:32:21:3b:b5:b4:6c:c6:fd:9a:
         3f:cd:90:22:b6:b4:7d:48:ca:9b:01:8e:95:89:44:c1:e3:a0:
         00:85:4b:b4:ed:71:0c:d2:55:6b:2c:8e:98:67:52:de:d1:63:
         9b:1b:0f:1a:65:1a:6f:c9:86:a9:4e:a8:50:ca:1a:3d:b5:76:
         29:72:a8:d9:77:f9:2f:68:3d:ce:82:28:17:ad:16:f5:26:37:
         6e:cc:92:e3:52:d3:f3:45:ca:76:bb:a3:3b:35:c9:00:e8:cc:
         21:6f:ab:c1:38:f2:fa:73:be:4b:0e:32:51:f0:3c:36:d1:67:
         6e:06:ef:7d:1f:2a:5a:d7:1a:58:fe:1e:0a:84:0d:6e:e0:3d:
         8d:3e:53:a6:52:82:43:58:3b:8e:dc:00:a2:b7:77:03:29:78:
         28:2e:44:9c:cf:4c:a6:56:9a:17:ec:54:24:6b:e8:66:81:ed:
         0b:9a:29:a4:f1:59:71:13:23:d3:25:18:2d:5e:bd:d0:d4:24:
         7b:da:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org