Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EELxRfB346v5TGn92vVpTWb234M.roa
File:                     EELxRfB346v5TGn92vVpTWb234M.roa (raw, json)
Hash identifier:          6+DthaHgJrrTNwFXrmzh+t7u+NAhlb5ILwGufWvgkqU=
Subject key identifier:   10:42:F1:45:F0:77:E3:AB:F9:4C:69:FD:DA:F5:69:4D:66:F6:DF:83
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2175
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EELxRfB346v5TGn92vVpTWb234M.roa
Signing time:             Fri 25 Nov 2022 04:39:57 +0000
ROA not before:           Fri 25 Nov 2022 04:39:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.40.0/21 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8565 (0x2175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1042F145F077E3ABF94C69FDDAF5694D66F6DF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:0b:5d:bc:4e:80:52:d0:ca:5d:0e:e6:76:
                    0d:f5:a1:5c:bf:22:27:aa:8c:81:ec:71:bc:65:0a:
                    f8:f4:dd:48:66:85:5c:ae:ef:e2:01:a3:83:6f:3d:
                    46:ad:0d:d1:b1:7e:52:3f:2f:07:24:a9:7b:38:29:
                    b4:da:83:30:ab:97:15:74:16:60:c0:7b:0a:16:d7:
                    30:6b:ce:35:99:8a:69:f0:5c:1d:f3:b9:a6:6f:71:
                    3b:9d:85:2c:b6:82:13:90:29:c9:6f:c5:db:cf:96:
                    7d:41:87:1c:d8:60:86:b2:99:88:ff:23:05:e0:fa:
                    d8:c2:48:0e:db:2a:05:23:1c:82:48:40:1f:70:cc:
                    a2:33:d1:c0:5f:9c:c0:64:ad:ae:c4:3e:ca:f8:2c:
                    db:64:70:7f:1c:25:7e:d3:a9:83:f3:6a:48:95:03:
                    1a:d3:17:e0:0c:73:f9:18:6e:86:75:0a:6a:b2:37:
                    90:55:5d:a6:4b:60:99:50:ec:b5:c0:8e:53:47:e8:
                    0e:a9:11:04:73:1d:fe:12:ff:46:76:b5:9b:95:93:
                    53:6d:41:8f:b5:cd:ab:dd:e1:56:5a:e3:ed:a3:f3:
                    d2:dc:64:c7:b0:89:c2:48:45:57:ac:2d:8a:46:31:
                    1e:5a:b2:ea:fd:a7:48:35:36:2f:ce:9d:5b:cd:82:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:F1:45:F0:77:E3:AB:F9:4C:69:FD:DA:F5:69:4D:66:F6:DF:83
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EELxRfB346v5TGn92vVpTWb234M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:c5:7a:bb:2a:d2:ee:59:21:2a:7e:e7:0a:b6:da:28:92:
         5b:3c:ac:1d:0f:eb:27:1a:1c:db:0f:f0:62:4e:5a:69:fb:70:
         e6:86:88:2e:34:3e:b7:43:7f:07:4a:98:6c:43:05:b8:7d:4f:
         d2:be:fc:42:b0:06:06:ce:7c:d0:d2:4b:ec:fb:f9:7b:b3:af:
         cf:67:97:4a:27:9a:a2:6f:67:81:f6:65:b7:75:58:f7:e3:90:
         23:a8:67:49:0b:9d:d1:96:c4:d5:81:2b:78:62:92:b3:6b:41:
         63:35:c4:22:69:58:10:87:5c:65:fe:3b:49:c8:09:ba:b2:72:
         8a:76:ad:11:56:b5:cf:28:bb:25:2e:93:47:7d:92:20:04:f6:
         d4:bd:a3:13:ef:d0:86:59:68:f0:02:95:69:17:6e:30:ff:b8:
         fb:90:e8:5c:7d:e2:2d:d6:aa:fc:35:a8:e4:01:4a:5a:e5:9a:
         36:87:0b:cc:d3:45:be:46:00:01:d8:bc:1c:16:39:58:c7:7f:
         25:92:83:19:27:1b:22:94:99:71:aa:f4:27:5e:fb:50:7f:0c:
         f4:07:40:ac:22:1c:9f:2d:8c:53:06:ad:ee:bf:fc:47:0f:dc:
         86:52:ba:7c:c6:71:e5:93:64:8f:5c:60:40:a9:b0:9a:e0:88:
         2e:05:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:23 2023 by rpki-client on console-ams.rpki-client.org