Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IUxXTe3Lsp6jEILmWG5Ixgo5jCM.roa
File:                     IUxXTe3Lsp6jEILmWG5Ixgo5jCM.roa (raw, json)
Hash identifier:          HEwHzEppobV2K7xOOBiy2KWHlAE4Og5YyuwK82/UlRE=
Subject key identifier:   21:4C:57:4D:ED:CB:B2:9E:A3:10:82:E6:58:6E:48:C6:0A:39:8C:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22B6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IUxXTe3Lsp6jEILmWG5Ixgo5jCM.roa
Signing time:             Fri 25 Nov 2022 04:41:33 +0000
ROA not before:           Fri 25 Nov 2022 04:41:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8886 (0x22b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=214C574DEDCBB29EA31082E6586E48C60A398C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:23:d6:9b:4a:a9:d8:a9:5f:a2:98:e4:23:
                    06:1e:92:5f:00:bb:b7:de:bf:33:6f:98:58:1e:a3:
                    b6:45:67:92:10:8d:11:56:10:6e:b9:5c:d9:8a:8f:
                    8b:04:cf:f4:f8:9e:18:82:fb:b0:13:42:21:73:a3:
                    9c:72:3f:0a:c1:49:a6:a9:92:c3:6f:60:64:cd:bc:
                    1f:a4:39:72:78:d4:ac:bd:20:ef:24:3a:4e:17:1c:
                    d5:b1:70:ae:d9:ff:b6:44:06:ca:ad:50:15:a8:38:
                    51:d6:93:53:05:16:f3:77:66:1a:b4:ac:2b:e2:f3:
                    a8:b3:16:57:cf:f5:e3:5e:0d:47:51:00:ca:56:ed:
                    e6:78:2d:58:a2:cb:50:62:55:f2:9d:6e:6e:9e:3b:
                    53:74:46:17:88:64:96:a6:ac:aa:24:4c:e5:8b:ff:
                    ed:5e:92:e3:9f:d4:8f:d0:aa:05:f1:36:ec:16:45:
                    0f:35:9f:41:58:34:42:45:6d:a4:b7:46:d8:ed:2b:
                    51:c9:6f:ff:77:a7:10:97:5e:e7:6b:af:d3:06:9d:
                    64:e6:e5:a4:ef:28:36:82:7d:26:c3:b8:12:03:23:
                    0e:bc:a8:12:06:f3:ed:56:74:fc:36:d6:99:8e:91:
                    ab:73:29:fb:6d:46:d9:a0:42:e6:72:9f:bf:0f:8b:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4C:57:4D:ED:CB:B2:9E:A3:10:82:E6:58:6E:48:C6:0A:39:8C:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IUxXTe3Lsp6jEILmWG5Ixgo5jCM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:61:43:d3:c5:8b:90:3f:a6:49:c0:41:cc:bc:eb:10:ce:
         b9:0e:66:ce:7f:6d:01:07:17:9e:bc:f7:20:2b:e3:0d:7c:b8:
         e4:7c:e5:84:21:61:8e:b8:5b:1b:3f:2f:2e:2a:91:b5:1d:c8:
         11:40:d6:75:55:48:85:2c:38:12:a5:d3:ba:1a:8b:ee:c5:f2:
         7a:b0:dc:73:da:67:f3:c4:d7:46:de:03:30:ee:67:f5:9d:13:
         44:c1:c1:ef:51:59:f7:a7:57:6c:6f:eb:e0:ec:4b:d6:91:40:
         2d:21:5f:a9:4e:66:6f:b1:c3:5c:d5:cb:b6:2f:a9:c1:e6:69:
         8d:9a:a0:7f:03:6e:cc:79:ca:72:c9:6e:b9:bf:45:61:6a:38:
         03:1e:f5:c2:43:5e:49:59:02:3e:fd:19:06:5c:8f:b5:6f:cf:
         11:e0:dc:58:a0:a8:0a:44:ae:a9:c3:bf:ca:ea:43:59:b4:e9:
         3a:00:2c:70:ee:d7:2a:66:17:73:16:fb:30:a1:dc:69:f2:f4:
         a1:ec:da:36:91:9a:2b:05:1a:1d:cd:56:67:d2:ff:51:e7:04:
         2c:26:27:1e:36:5f:eb:18:1e:7b:6e:5e:16:80:d0:e7:47:76:
         9c:fe:81:1e:0b:0b:36:6d:71:ab:05:33:36:26:76:46:d2:94:
         dc:f3:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----