Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2CNbMyHPz13qioqWzV-v8UcanU.roa
File:                     K2CNbMyHPz13qioqWzV-v8UcanU.roa (raw, json)
Hash identifier:          WPMAzqvoqS3Dbke4Tuzbz6+U0rtSc2RuF2X0DJtunEM=
Subject key identifier:   2B:60:8D:6C:CC:87:3F:3D:77:AA:2A:2A:5B:35:7E:BF:C5:1C:6A:75
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2CNbMyHPz13qioqWzV-v8UcanU.roa
Signing time:             Fri 25 Nov 2022 04:40:24 +0000
ROA not before:           Fri 25 Nov 2022 04:40:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.194.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8649 (0x21c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2B608D6CCC873F3D77AA2A2A5B357EBFC51C6A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:eb:13:34:ef:77:bc:01:2e:01:8f:11:5d:
                    04:ce:13:6d:cc:5a:50:47:82:44:a4:d1:84:e1:a5:
                    89:a9:01:78:4c:8f:62:93:ad:bb:11:59:04:53:c2:
                    40:a5:46:4e:35:d9:fc:a8:76:73:11:52:97:06:3c:
                    1e:72:78:6b:80:90:54:9a:7a:76:8d:9a:30:a4:e9:
                    58:49:e2:ce:71:6b:2d:1e:8b:d1:c3:63:c5:36:bf:
                    e4:bc:cd:38:08:14:1b:c0:e2:9a:db:d8:d9:52:fd:
                    b4:23:9e:68:03:77:7e:37:a2:d9:aa:2f:3f:83:84:
                    e2:c0:6b:07:e7:71:b2:1b:11:71:01:89:3f:eb:27:
                    84:3b:cc:20:30:e0:71:97:82:39:30:40:07:67:96:
                    3b:f4:c0:3e:86:75:ed:8f:be:ee:98:3d:53:f7:06:
                    fe:d5:a5:7d:8f:66:0b:9c:83:2f:14:b6:3a:0e:72:
                    d1:8d:97:24:38:4f:e9:fa:5f:28:0d:ab:dd:a1:e8:
                    a7:ea:d1:f1:b7:19:32:d6:8a:cb:4d:02:86:2d:af:
                    86:cc:f4:24:19:a7:a3:4d:29:33:d4:b4:75:9d:1c:
                    98:39:99:4d:1b:38:fc:d8:6c:5a:80:10:e8:37:b2:
                    a2:66:18:5c:fb:d7:a0:42:27:e1:c6:7b:a3:3b:ec:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:8D:6C:CC:87:3F:3D:77:AA:2A:2A:5B:35:7E:BF:C5:1C:6A:75
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2CNbMyHPz13qioqWzV-v8UcanU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:2c:b6:ea:f0:e1:41:c5:a8:82:79:39:af:dc:08:06:e2:f7:
         64:78:a8:a2:14:9b:b8:b5:85:d9:fc:aa:52:6c:ce:34:72:11:
         cf:09:5d:20:50:b4:66:3c:cb:87:b5:20:e4:3b:a6:e8:4b:59:
         dd:fd:5f:c0:39:3c:92:96:1b:ec:74:46:c1:a7:79:01:32:22:
         c5:ea:28:ac:ce:cc:af:21:e2:2c:01:79:84:50:05:6c:65:0b:
         52:85:85:aa:b2:42:21:09:41:c3:7b:02:d4:0e:20:bd:91:16:
         cc:97:7d:c0:35:ad:3b:be:85:df:eb:68:24:d1:23:c0:78:62:
         65:a0:44:71:90:2d:43:b4:2e:b6:62:68:6b:88:bd:c1:10:8c:
         cd:b0:05:b5:84:b4:bb:96:de:88:8d:0a:d2:4d:a5:79:b8:99:
         dc:86:bb:a7:c5:57:10:b3:7d:ce:6d:d6:97:3c:db:b8:68:02:
         16:ad:98:ba:d8:4e:6a:ca:d0:56:67:13:f3:dc:4f:3e:64:3a:
         c4:4e:49:6c:d3:b8:fb:e6:b0:99:af:e2:4b:a8:24:1c:d9:3e:
         49:05:08:b8:ae:c1:4c:8d:23:ac:04:49:6a:66:38:b4:46:38:
         31:5d:1f:84:57:f9:9f:eb:40:3a:aa:e8:fd:7c:03:70:61:1c:
         f0:19:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:03 2023 by rpki-client on console-fra.rpki-client.org