Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/II7BmGQHBTt7Pp81Ai0Y4MOVJVo.roa
File:                     II7BmGQHBTt7Pp81Ai0Y4MOVJVo.roa (raw, json)
Hash identifier:          DOEEQlbGABhwdgLMX4tjpSTYRS5UQC1nkv7a4/nAIj8=
Subject key identifier:   20:8E:C1:98:64:07:05:3B:7B:3E:9F:35:02:2D:18:E0:C3:95:25:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/II7BmGQHBTt7Pp81Ai0Y4MOVJVo.roa
Signing time:             Fri 25 Nov 2022 04:38:59 +0000
ROA not before:           Fri 25 Nov 2022 04:38:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.113.128/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8366 (0x20ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=208EC1986407053B7B3E9F35022D18E0C395255A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:87:6f:fc:14:f0:63:f0:e9:e6:fc:30:d7:
                    f6:10:59:5b:fa:3a:ca:69:9b:07:20:0c:39:45:c6:
                    84:b9:d2:a6:be:5b:64:fa:7f:70:81:9f:5a:c4:c0:
                    90:01:bc:ba:ad:96:1f:84:b3:14:16:47:50:60:0c:
                    4a:e0:22:95:74:ca:86:3a:7c:be:8d:49:08:56:17:
                    0f:7e:ae:c0:93:95:b5:12:af:0b:7c:b5:69:84:72:
                    1f:c5:27:7b:cd:d3:77:d2:21:19:04:a6:9b:a0:09:
                    fb:6c:a7:a4:85:55:3d:e4:f7:12:ec:e1:49:0f:cb:
                    30:42:58:31:b4:cd:1a:25:52:98:ab:fd:2a:2b:1d:
                    fb:f3:bc:08:61:8f:4a:c0:f2:03:af:17:26:64:48:
                    55:2b:6e:ff:36:45:8c:50:23:70:fa:bf:43:ad:20:
                    bc:9a:b5:20:b6:be:f0:16:0b:74:0c:e5:70:b0:f7:
                    82:81:8a:a8:8f:c8:e2:1e:35:ac:5f:6b:b2:7a:d0:
                    34:4a:06:fc:aa:c5:85:62:45:66:71:b1:9f:af:6d:
                    dd:ba:94:2c:25:77:a6:ad:be:af:00:69:55:81:08:
                    b6:a7:c4:2a:bb:d6:ac:4c:44:76:b4:a9:7b:fa:33:
                    e1:fe:5d:d2:17:a2:23:13:da:e5:83:e6:e8:d2:01:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8E:C1:98:64:07:05:3B:7B:3E:9F:35:02:2D:18:E0:C3:95:25:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/II7BmGQHBTt7Pp81Ai0Y4MOVJVo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.113.128/25

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:5b:ec:ed:de:63:90:fb:21:d0:6f:53:4c:23:db:22:af:
         a6:6b:69:e1:47:ca:2d:3e:2e:7e:10:41:f9:be:6b:f7:dd:e0:
         0a:86:ff:5b:44:bc:13:0b:d4:d7:8d:7f:b5:db:ef:34:29:04:
         89:87:0d:8d:04:50:bd:c7:6c:a8:34:ad:b3:84:b3:bc:04:50:
         8e:77:a6:1c:41:a6:2b:80:6f:01:81:67:60:60:f2:d7:53:8b:
         22:c0:03:ce:69:4d:8b:03:90:7f:8b:29:eb:44:8b:c1:f0:a1:
         2c:4f:b7:68:5e:64:c6:62:98:98:71:32:78:28:0d:04:3c:69:
         be:dd:ad:0a:68:49:35:11:97:f4:67:08:9c:f3:1c:7d:d5:b5:
         f0:4c:d3:8e:c7:1b:de:40:8a:84:c3:c7:fa:d7:bd:46:18:b0:
         80:6c:1b:9b:54:b4:65:48:a8:11:13:84:de:cb:dc:1e:cc:7f:
         37:af:c6:c8:bd:59:31:75:98:ff:68:67:21:64:ba:7e:2c:34:
         71:4b:7a:0e:cc:93:21:96:28:ef:2b:af:3e:d8:7c:f6:38:f7:
         08:c8:bf:0f:17:ff:f7:ab:6b:36:57:ff:dc:a4:2a:31:dc:4e:
         65:b8:26:6f:38:c5:dd:52:33:fe:8c:52:13:23:60:8c:72:aa:
         05:79:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org