Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LJYkhhzNa65R_jHqD6fUjPL9yUg.roa
File:                     LJYkhhzNa65R_jHqD6fUjPL9yUg.roa (raw, json)
Hash identifier:          wwYfpG7axWSgd4/PvTM6rNqKD7jIbTbmei7xr8OgUAU=
Subject key identifier:   2C:96:24:86:1C:CD:6B:AE:51:FE:31:EA:0F:A7:D4:8C:F2:FD:C9:48
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LJYkhhzNa65R_jHqD6fUjPL9yUg.roa
Signing time:             Thu 15 Sep 2022 02:53:09 +0000
ROA not before:           Thu 15 Sep 2022 02:53:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.195.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2C9624861CCD6BAE51FE31EA0FA7D48CF2FDC948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:4e:14:25:50:7f:2b:45:ca:ae:3a:56:62:
                    fe:67:bb:72:6c:05:2e:87:d3:fb:41:92:9a:62:51:
                    6e:b4:10:67:52:a6:5c:7e:6a:3d:89:75:5f:f2:0f:
                    50:6d:bf:5a:1c:1f:da:6c:79:36:c0:77:fc:06:2d:
                    53:1b:01:34:e7:d5:9a:8d:e5:da:e0:25:b4:75:7d:
                    3d:a9:f4:ff:8c:ed:ac:55:0c:e8:42:41:d9:0f:4b:
                    73:a6:8d:9c:11:3e:c8:30:ac:32:57:2d:3b:d0:39:
                    22:55:5c:3b:d4:ac:44:f1:1c:40:eb:da:02:6e:d6:
                    b8:53:87:bc:7e:73:c3:5f:d4:f6:07:0a:e7:8f:b9:
                    26:d3:7d:61:6f:56:a9:e3:2d:3e:60:eb:f8:f6:1d:
                    b5:ca:2a:00:5c:11:7c:ab:e9:64:05:14:86:73:6a:
                    3a:e4:c0:a3:24:c3:3d:a7:c7:31:9d:d9:af:0a:cf:
                    bb:39:df:97:ce:45:08:e1:f9:a8:4a:4f:dd:68:b8:
                    f9:82:42:66:19:0a:34:b4:0e:86:9d:f3:71:04:b5:
                    43:49:0d:85:63:fe:29:e4:6b:92:b8:c8:6c:e2:bf:
                    ad:df:e9:78:28:b1:eb:cc:bc:06:48:77:cd:55:b4:
                    59:a1:55:b2:3a:40:8c:66:2c:5a:07:eb:bf:2b:36:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:96:24:86:1C:CD:6B:AE:51:FE:31:EA:0F:A7:D4:8C:F2:FD:C9:48
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LJYkhhzNa65R_jHqD6fUjPL9yUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:af:6b:e3:18:31:f6:4f:c8:41:ad:37:d4:0c:5b:c8:0f:
         81:23:a9:11:b6:5d:ab:7f:c0:2b:55:29:37:7d:44:24:b6:9c:
         d2:4b:02:63:ca:e0:35:41:14:3d:c2:ff:ec:31:d9:ff:eb:79:
         a8:37:a1:3a:ca:38:d2:15:16:99:83:a7:f4:19:ff:7b:c4:41:
         5a:f2:cb:7e:7b:7d:bf:30:9e:21:a2:17:e7:a7:d9:44:37:97:
         65:56:73:a3:fd:b5:ca:0f:cf:79:c0:84:04:e0:1d:d8:79:09:
         46:1a:98:0b:8a:10:c2:42:f5:8a:16:83:ea:7b:92:c5:28:bd:
         db:ab:69:be:c1:01:4e:29:16:82:15:4e:99:9b:c7:1a:97:88:
         5a:a1:47:05:cc:ba:7d:1e:ea:bd:59:97:5b:82:e7:57:b7:15:
         42:ed:b5:ff:df:17:09:e8:4e:a3:eb:a9:59:0e:1e:37:06:11:
         04:6e:c0:8a:3e:05:6c:ea:9a:bb:08:21:83:55:81:f5:7f:16:
         f0:53:a8:45:50:19:1c:92:3b:ff:37:bb:b4:5a:4d:8e:91:61:
         5c:d0:5a:3a:10:1b:54:21:e5:59:6c:ee:ae:b5:80:a9:90:ec:
         ca:1b:e4:d9:e5:b6:d7:d6:4c:28:e2:7d:9c:5b:fa:57:87:74:
         24:fa:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org