Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DW0GoReNM2FRTdf04eNHAWaTgiA.roa
File:                     DW0GoReNM2FRTdf04eNHAWaTgiA.roa (raw, json)
Hash identifier:          +NKBXwziqk/A29sqPtCHavaeVspFsHaizmCD5LlKnMM=
Subject key identifier:   0D:6D:06:A1:17:8D:33:61:51:4D:D7:F4:E1:E3:47:01:66:93:82:20
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2093
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DW0GoReNM2FRTdf04eNHAWaTgiA.roa
Signing time:             Fri 25 Nov 2022 04:38:53 +0000
ROA not before:           Fri 25 Nov 2022 04:38:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.16.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8339 (0x2093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0D6D06A1178D3361514DD7F4E1E3470166938220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:d5:bc:15:00:88:5c:24:67:02:29:c1:52:
                    7e:59:da:fc:1c:6a:1c:22:4c:de:55:39:df:83:2f:
                    b3:6a:1d:61:54:05:20:d3:f6:fb:29:fd:e8:90:bd:
                    92:0f:2e:6b:9b:0d:eb:9d:4b:4d:46:20:84:d9:ab:
                    07:75:f6:80:d5:97:e1:b9:68:2e:1c:a0:39:cb:ac:
                    13:f3:36:23:c7:e0:13:5c:d2:ea:f3:d4:59:51:12:
                    f5:b6:33:b1:27:a2:5e:fe:32:bf:23:92:0a:b4:b3:
                    ae:71:a2:0d:db:bb:e2:87:da:3e:27:15:d0:46:82:
                    aa:51:8a:37:de:54:6f:05:42:f0:dd:94:89:2f:12:
                    c2:ce:5b:1a:dc:40:30:7d:af:f4:cf:bf:a6:c5:53:
                    25:70:40:e4:c4:e4:d8:d1:25:01:95:0f:91:31:71:
                    a3:b3:39:36:51:42:ed:71:64:56:30:f0:30:89:05:
                    ff:19:08:15:cc:38:20:fe:af:7f:ce:5d:20:93:b7:
                    48:bd:13:2a:29:61:42:ca:6c:43:ae:4d:8b:b2:33:
                    f4:51:3b:34:bc:24:e4:ce:c6:ce:ca:6e:cc:40:c9:
                    89:a2:9f:2a:c7:84:13:dc:7c:fc:16:e0:42:39:82:
                    4c:c8:07:a7:e4:ed:b4:78:9a:c9:76:fe:cc:5a:9b:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6D:06:A1:17:8D:33:61:51:4D:D7:F4:E1:E3:47:01:66:93:82:20
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DW0GoReNM2FRTdf04eNHAWaTgiA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:94:cc:07:af:47:68:dc:53:bd:41:b0:2f:cf:91:5e:86:f8:
         68:ac:f6:e6:01:19:b1:18:0c:2f:bc:66:2b:24:5b:e7:0d:99:
         7b:6b:19:35:7e:64:97:15:c5:5c:4f:9c:f6:5e:f1:0e:5d:28:
         ec:90:04:cb:7a:ff:41:1a:27:21:5b:e4:21:5e:85:a0:61:ee:
         3b:0c:c4:c5:ed:ef:01:c0:b2:58:80:ab:8b:6e:3b:62:a8:92:
         38:33:70:3e:8f:11:d3:7d:e3:21:4a:62:84:1a:8d:4f:ed:82:
         6a:ea:3f:0e:e4:f8:fa:04:97:58:24:dd:05:3b:17:19:64:08:
         11:48:b4:0e:da:c9:68:30:3d:e1:cb:e1:66:94:e9:35:17:d6:
         34:25:e3:fa:ad:90:05:73:f6:8e:fc:40:b0:87:a0:94:58:4a:
         27:e6:bd:4a:c7:9f:ba:dd:f9:1a:14:1e:07:91:e9:8c:36:8b:
         cd:f4:66:8a:5b:78:de:1a:ae:c6:a9:cf:c5:b4:24:1f:ff:a4:
         6e:b8:f8:fe:de:f6:b1:e4:ca:e3:18:bf:5c:7e:90:5f:4d:4d:
         71:aa:61:80:09:fc:e2:6d:e6:8f:61:4d:80:be:7f:6f:8d:83:
         16:49:7b:dc:fa:37:a6:45:67:82:b4:30:fe:57:94:5d:2f:e2:
         69:d1:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org