Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HQTak9_wH_nmEX4ttkF94O1aH5o.roa
File:                     HQTak9_wH_nmEX4ttkF94O1aH5o.roa (raw, json)
Hash identifier:          I5z/ysO0JhrxCtluFgFs2RPxuUa74DzKBBEZER51AoU=
Subject key identifier:   1D:04:DA:93:DF:F0:1F:F9:E6:11:7E:2D:B6:41:7D:E0:ED:5A:1F:9A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2053
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HQTak9_wH_nmEX4ttkF94O1aH5o.roa
Signing time:             Fri 25 Nov 2022 04:38:34 +0000
ROA not before:           Fri 25 Nov 2022 04:38:34 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.195.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8275 (0x2053)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:34 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1D04DA93DFF01FF9E6117E2DB6417DE0ED5A1F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:66:ee:c3:8f:b4:cd:8f:af:25:8c:b6:18:
                    27:28:5c:4d:6d:75:d4:49:b2:66:00:05:6d:97:7c:
                    42:e0:bc:bb:f4:c6:e8:29:88:a6:16:97:e1:f2:ce:
                    28:d6:df:0c:fa:b3:06:c6:94:82:d5:ce:09:cf:29:
                    17:b1:c1:87:37:c2:dc:76:4a:e7:d5:6c:d3:c6:4c:
                    ac:e1:39:d1:96:b4:61:03:64:d4:54:10:39:d1:d6:
                    ae:29:d4:0b:d8:c7:7c:75:54:89:64:7f:ce:1f:b4:
                    69:ce:c0:1e:64:03:37:78:70:13:ef:42:5b:08:02:
                    f3:9f:ce:15:b6:6c:27:71:fb:5c:04:16:c5:12:1e:
                    8b:d0:93:f6:ca:96:ef:a6:13:4c:80:ed:cb:8d:3a:
                    41:0e:78:ed:49:75:d5:04:a7:3e:e5:27:0e:7a:d9:
                    f0:96:e1:09:e2:65:8a:29:c8:8b:8f:d7:95:a4:e9:
                    b6:18:81:56:63:b7:ae:07:08:2d:6f:3c:21:11:f3:
                    5c:49:6a:43:50:cf:8c:a7:2b:4d:0a:de:cf:33:14:
                    de:45:63:35:34:84:23:8b:6c:a4:9d:a1:06:a2:05:
                    2a:3b:31:13:69:a4:26:b3:8d:d4:0e:ec:d3:97:b8:
                    4c:f8:05:48:7f:0f:dd:ca:06:b2:9e:f3:c9:08:44:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:04:DA:93:DF:F0:1F:F9:E6:11:7E:2D:B6:41:7D:E0:ED:5A:1F:9A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HQTak9_wH_nmEX4ttkF94O1aH5o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:fc:1f:16:89:62:20:88:f5:9e:a4:f3:7d:a3:b3:e9:8f:
         26:c0:fa:cf:fa:25:fb:12:ea:ba:65:d0:ee:61:aa:18:5a:49:
         b2:0d:b0:2c:c6:9a:00:5f:21:f0:63:46:16:6a:24:1c:68:58:
         93:89:e1:17:46:41:9e:6f:45:73:39:c1:84:7c:e9:e4:16:83:
         16:a0:04:f3:12:f7:55:2f:de:57:25:4d:6a:11:a5:1d:68:90:
         18:0f:ab:d0:bd:80:2c:79:af:39:b5:5c:a9:25:d0:d8:10:5e:
         d7:ea:1a:14:66:73:5c:9d:c8:06:13:e7:eb:6f:7b:df:ba:71:
         e9:78:58:cb:94:d8:e4:da:da:b1:87:33:2d:61:25:3c:62:c6:
         89:15:05:87:8a:e7:61:d5:1d:27:61:03:f0:92:81:2c:ff:57:
         3b:0e:44:f8:c5:52:e3:80:b3:c5:10:fc:93:0f:fe:a8:71:41:
         e1:09:cc:a7:d5:7e:34:d5:fb:05:68:86:73:6e:a4:bf:45:37:
         28:6f:4a:c1:49:d7:8f:f2:70:12:00:ad:38:53:62:15:28:fb:
         d3:c4:54:3a:82:64:a7:39:f4:52:8b:ed:cc:79:b4:93:c9:16:
         bc:c2:20:dd:52:b6:7a:6a:e9:fe:b8:27:3f:68:b2:f4:de:a6:
         d1:1c:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org