Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L_aidI3OGa_pTBeaxAJZ7dDy1zU.roa
File:                     L_aidI3OGa_pTBeaxAJZ7dDy1zU.roa (raw, json)
Hash identifier:          CSthaxHwVu5oUwMkLLN8MpfipQ1B5bvZRd7i2YYXWo4=
Subject key identifier:   2F:F6:A2:74:8D:CE:19:AF:E9:4C:17:9A:C4:02:59:ED:D0:F2:D7:35
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L_aidI3OGa_pTBeaxAJZ7dDy1zU.roa
Signing time:             Fri 25 Nov 2022 04:39:17 +0000
ROA not before:           Fri 25 Nov 2022 04:39:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8427 (0x20eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2FF6A2748DCE19AFE94C179AC40259EDD0F2D735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:f2:9d:8b:ee:43:71:bf:0c:5e:12:6d:6e:
                    fd:64:07:2b:d2:b4:b1:c3:b5:7a:56:d2:43:6e:a6:
                    42:4a:c5:bd:fc:76:75:ca:8c:50:bf:06:7b:de:db:
                    a1:f2:76:99:2b:e1:f0:3a:28:e0:73:eb:3c:5e:be:
                    45:84:76:cb:4a:67:bb:94:0e:79:5f:a1:90:30:fb:
                    d3:95:20:f9:55:f3:e8:0a:79:38:d1:c2:8b:d2:65:
                    29:1a:e3:18:e4:e6:96:53:3d:b2:c5:d0:b9:23:a2:
                    5d:1b:fa:74:20:92:92:59:90:c7:9b:79:5f:3f:d0:
                    ea:21:98:9e:79:38:0b:59:84:78:59:81:e5:4e:c5:
                    39:84:aa:35:60:f5:16:83:cf:40:da:1a:a8:3d:57:
                    2e:55:cc:73:30:2f:17:5c:4d:e6:db:95:81:08:81:
                    43:b9:6c:56:49:ad:09:61:55:4f:ef:8f:f9:eb:08:
                    ab:f1:3f:b6:6b:6a:55:06:cc:c0:3d:cd:41:24:f6:
                    86:52:db:33:56:33:94:34:1d:44:fa:74:43:5f:76:
                    7e:f8:6a:58:95:7d:a4:fb:27:1a:f5:3e:4b:9f:0b:
                    aa:79:bc:4e:d2:2e:c2:c0:0c:f7:22:fa:d2:05:24:
                    8b:a3:16:44:ac:0e:09:8e:fc:74:33:64:6c:4f:5f:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F6:A2:74:8D:CE:19:AF:E9:4C:17:9A:C4:02:59:ED:D0:F2:D7:35
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L_aidI3OGa_pTBeaxAJZ7dDy1zU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:66:72:03:7f:5f:bd:20:bc:a8:d5:ba:49:e3:fd:ce:5a:
         8d:49:43:d0:01:eb:b6:f8:ff:e4:e3:b1:ff:73:d7:7b:5e:b0:
         a9:58:0e:ed:23:f2:cb:da:f5:a5:8b:29:37:bf:af:ba:85:c5:
         cb:42:86:f7:ff:2a:f4:d9:52:38:96:58:59:e5:bb:3d:66:6b:
         20:d7:82:8c:59:29:af:55:99:cc:67:2d:41:b7:7a:31:45:6a:
         7d:c8:e3:f1:3c:ac:81:1c:4c:9b:5c:4d:63:2e:58:a3:88:6a:
         9e:c0:3d:2b:d8:c7:dd:c0:37:ad:58:83:7e:fb:76:9f:51:06:
         ba:9d:09:e4:37:15:d5:16:d2:47:4d:89:39:be:e1:91:06:e9:
         26:d9:97:06:c8:1f:86:2c:1a:a7:54:ef:bc:ff:51:17:3b:da:
         bf:b6:9f:f6:0c:ba:b7:c6:24:e9:5a:d2:81:d4:a1:96:1f:cb:
         21:d5:96:4a:26:98:68:ff:aa:d3:c3:cd:6e:83:e1:b9:c2:a3:
         bc:55:3d:97:b3:89:d8:8d:98:f7:18:67:85:9e:94:5d:77:52:
         ae:d6:a7:95:78:42:b7:e6:b0:4e:4b:a3:5e:12:e2:99:7d:b0:
         b7:f4:88:a1:1d:4a:14:9d:27:e6:98:47:3e:c3:f4:33:f3:47:
         64:84:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:03 2023 by rpki-client on console-fra.rpki-client.org