Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hf4FDbR2Kyt2uFJLd-T7IfTNVrA.roa
File:                     Hf4FDbR2Kyt2uFJLd-T7IfTNVrA.roa (raw, json)
Hash identifier:          PswfRYF2gPjZK38Ga1VAd7B/CiD17Z1jvzQBkwxeSlA=
Subject key identifier:   1D:FE:05:0D:B4:76:2B:2B:76:B8:52:4B:77:E4:FB:21:F4:CD:56:B0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hf4FDbR2Kyt2uFJLd-T7IfTNVrA.roa
Signing time:             Fri 25 Nov 2022 04:40:30 +0000
ROA not before:           Fri 25 Nov 2022 04:40:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.112.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8671 (0x21df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1DFE050DB4762B2B76B8524B77E4FB21F4CD56B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:cd:c4:93:11:0a:76:49:f5:24:6c:8d:42:
                    47:dd:0c:38:65:94:83:cc:b6:04:ca:44:64:f2:ed:
                    a1:81:c5:8e:39:28:6e:51:8c:ee:80:5d:df:0e:c4:
                    5b:f9:4f:b6:e8:39:29:5e:c4:03:86:23:ca:37:f6:
                    82:dd:d0:7d:f2:63:cb:5f:a2:52:f3:b1:4e:dc:eb:
                    c0:f1:6e:65:71:f0:91:e6:b9:86:d6:bc:36:4a:80:
                    5c:bb:ef:7f:f2:bf:19:c6:9b:16:0b:c9:1b:20:41:
                    c3:f8:ef:87:a6:d3:2e:95:f2:bc:9c:76:88:c7:02:
                    7f:4c:0c:65:cb:11:84:01:11:ac:ef:12:61:99:75:
                    df:11:1f:fe:f2:e3:3a:73:dd:19:9b:a0:95:dc:17:
                    6f:6f:46:53:fe:a0:7a:2a:b0:4b:84:d0:26:67:72:
                    64:d6:3c:5c:9e:05:54:54:7c:41:f4:ad:8f:9f:3a:
                    f6:d1:8b:5c:a0:5d:fa:c7:7a:7e:0e:e7:38:36:02:
                    68:f7:cc:6a:57:43:5c:e7:99:5f:bb:3e:3c:e5:17:
                    60:cc:4e:eb:a0:a7:50:d9:90:db:de:1a:6e:9a:5b:
                    0a:f6:d6:fc:9c:43:02:16:4f:0e:bd:cd:59:7a:4f:
                    99:91:09:9b:b7:3c:80:bd:ec:a1:c5:b3:f7:dd:78:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FE:05:0D:B4:76:2B:2B:76:B8:52:4B:77:E4:FB:21:F4:CD:56:B0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hf4FDbR2Kyt2uFJLd-T7IfTNVrA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:35:8e:76:08:e6:5b:27:e6:af:88:5f:cb:76:21:61:a4:
         42:be:aa:d5:76:bc:51:c0:3f:47:94:c9:0b:54:63:fe:d1:15:
         89:4d:38:d8:a9:70:0e:74:50:e0:33:f4:48:c4:de:b8:39:6c:
         0d:71:23:e1:80:b4:f5:9c:50:b8:4a:fc:92:14:ab:09:82:d5:
         fd:4a:a6:97:28:84:2f:66:e5:d3:68:50:22:ac:3a:91:c4:d7:
         16:56:ab:d1:3c:9c:50:f2:e6:30:87:ac:84:36:65:ac:46:4d:
         62:38:cc:80:0b:f2:57:b0:cc:23:89:6e:71:e1:67:18:26:2e:
         e0:2c:e7:66:96:d1:53:16:43:a5:95:c5:f5:99:c0:21:08:41:
         62:60:8d:4d:2f:ef:74:49:89:1e:b9:f9:94:5d:d4:69:65:9a:
         c1:2f:15:7d:47:92:ee:65:ca:44:fe:bd:21:be:0c:4a:58:6f:
         3c:30:c9:94:f7:36:3f:5b:8c:59:cc:60:50:60:85:59:28:21:
         be:36:46:70:22:0f:9f:26:cb:c0:fc:38:1c:6f:29:5d:70:69:
         d5:b1:63:b1:22:aa:13:bb:80:0a:c2:ad:e1:d1:30:8c:34:8a:
         4c:64:77:79:78:7a:e2:6b:39:59:09:de:3b:da:26:f7:12:a1:
         bc:63:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:24 2023 by rpki-client on console-ams.rpki-client.org