Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GgRUbTpSHZ4SqA0di4w_-uG_1gI.roa
File:                     GgRUbTpSHZ4SqA0di4w_-uG_1gI.roa (raw, json)
Hash identifier:          m8KNmm8/1HOQsqt+CqktDLXz1DXsaOjklDLmhIhImqQ=
Subject key identifier:   1A:04:54:6D:3A:52:1D:9E:12:A8:0D:1D:8B:8C:3F:FA:E1:BF:D6:02
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       202E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GgRUbTpSHZ4SqA0di4w_-uG_1gI.roa
Signing time:             Fri 25 Nov 2022 04:38:25 +0000
ROA not before:           Fri 25 Nov 2022 04:38:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.182.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8238 (0x202e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1A04546D3A521D9E12A80D1D8B8C3FFAE1BFD602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:12:43:aa:4a:9f:f7:51:a7:d1:8b:58:80:
                    96:ab:b3:67:9d:f4:93:58:03:d6:f2:26:4e:13:14:
                    d9:69:30:51:5a:60:59:7c:18:eb:cf:5b:49:dc:02:
                    bb:76:f2:a9:44:8f:b6:b8:06:f4:1d:4f:6e:30:c0:
                    f1:f7:cb:12:fa:a2:af:93:3a:c2:1b:dd:2e:b3:e2:
                    06:a1:be:31:66:6a:dd:48:9e:a9:07:07:15:06:a6:
                    2c:93:94:f9:aa:45:4a:5d:77:a8:de:cd:4c:4a:fd:
                    da:8d:11:c9:75:dc:47:62:2c:70:b8:d8:35:24:b6:
                    fe:78:0a:6a:ae:53:70:00:75:4c:86:86:a7:ad:6d:
                    c1:b6:d5:eb:39:4c:b5:07:e0:a2:fc:7e:55:c9:9e:
                    fc:b8:ba:f2:c9:c9:39:6b:e6:1a:e8:37:5d:0a:06:
                    93:fd:2d:f2:28:b6:cf:2e:b3:6e:2a:6f:1a:f7:c9:
                    3b:dd:ed:8c:e0:1b:52:3d:b6:37:ce:db:71:58:95:
                    29:b0:07:95:20:95:7a:59:e7:14:db:36:40:9e:c7:
                    bc:34:f6:a9:6c:57:24:eb:da:d1:2b:c9:44:13:ef:
                    af:1a:fb:f0:ab:77:82:28:2d:22:04:ef:9d:42:97:
                    d9:63:6d:27:6b:ce:32:54:2a:07:89:7b:e5:52:0b:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:04:54:6D:3A:52:1D:9E:12:A8:0D:1D:8B:8C:3F:FA:E1:BF:D6:02
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GgRUbTpSHZ4SqA0di4w_-uG_1gI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:be:33:56:06:69:0b:54:b6:db:3e:25:de:9e:b8:c1:93:
         41:0e:dc:72:78:e9:d4:7c:1a:ef:d5:68:b7:f4:af:dc:16:5f:
         c7:51:67:66:8d:03:9f:6c:e4:c9:9d:ed:3c:65:9a:b7:ef:0c:
         d3:a8:df:b2:65:54:64:85:3a:52:b9:60:c3:34:db:34:57:d7:
         8d:2f:be:ec:01:5a:6a:60:7e:24:74:80:eb:8d:ad:a9:5e:34:
         4f:a8:bb:22:da:80:8a:12:2d:d6:1f:c0:76:5d:8f:7c:c0:ab:
         db:30:2d:47:67:27:99:6a:d1:8a:1f:e7:e2:c4:cc:cc:cd:5a:
         b1:ee:cc:1d:62:f6:f8:06:b0:58:ad:4b:cb:aa:c7:48:ab:65:
         66:2f:5e:51:e2:a5:d6:6c:f3:c0:3f:49:c3:19:dc:83:0c:58:
         45:1b:13:2e:b8:c7:5e:67:35:60:fd:35:12:5f:b0:89:7d:34:
         56:46:da:5f:85:43:86:8c:e4:4a:33:19:45:65:5e:5e:4d:3d:
         38:74:07:29:1b:84:2e:89:2d:95:84:40:68:d7:00:f6:6a:77:
         6b:90:a4:2b:94:11:e9:93:e1:7a:c8:06:34:86:a6:ef:4e:cd:
         8c:72:83:8c:08:02:0f:97:7b:3f:87:b6:5c:67:f3:3a:79:ad:
         29:3a:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org