Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lw1xnJySnigtNUjv9rF_a0kZHiU.roa
File:                     Lw1xnJySnigtNUjv9rF_a0kZHiU.roa (raw, json)
Hash identifier:          fiCqxYsNhu1Jagw5F8kpygQ9fBfyaMgcz+KekLNrXi8=
Subject key identifier:   2F:0D:71:9C:9C:92:9E:28:2D:35:48:EF:F6:B1:7F:6B:49:19:1E:25
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lw1xnJySnigtNUjv9rF_a0kZHiU.roa
Signing time:             Thu 15 Sep 2022 02:46:01 +0000
ROA not before:           Thu 15 Sep 2022 02:46:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        211.76.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2F0D719C9C929E282D3548EFF6B17F6B49191E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3c:b0:f5:9f:d0:20:bf:61:63:f2:a5:a2:0c:
                    15:e8:cd:1c:5f:f4:c7:d8:6a:e3:19:76:0b:44:cf:
                    82:18:c3:67:4a:89:e0:22:eb:b4:47:3d:ab:c6:45:
                    e4:81:24:97:0c:5d:79:8c:59:80:cf:a7:9e:c0:3a:
                    85:a8:0d:89:0c:f8:5f:c3:6c:43:58:62:ab:3d:c2:
                    b9:fc:f7:1c:5b:8d:03:ca:cb:c9:13:d0:99:68:b0:
                    08:c3:fb:7e:71:44:75:7e:14:a3:69:29:dc:b1:a4:
                    c2:8e:24:1f:eb:1f:cb:10:75:f5:7b:34:2b:bf:bc:
                    a9:3b:3c:58:96:03:2d:1f:e8:99:4b:80:02:f2:e3:
                    37:6b:02:08:87:73:5c:f1:46:d1:33:23:74:d7:70:
                    ee:26:e3:f3:5d:c2:71:95:9e:f5:c4:2d:26:57:e2:
                    e2:1f:19:57:ec:e9:dd:05:02:3a:89:77:5d:60:ed:
                    0a:8f:8c:e1:60:98:b6:75:70:81:e9:66:60:39:64:
                    dd:11:3f:f0:af:ad:0e:3c:97:cc:fa:c6:40:de:f3:
                    36:dd:2c:1f:fb:90:f6:5a:2e:db:bd:02:98:e6:a5:
                    22:39:5e:b2:c3:4e:1f:01:f4:45:ca:14:81:3a:c7:
                    e4:64:5b:cb:6a:d7:29:a1:1c:b6:ab:18:61:bf:a5:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:71:9C:9C:92:9E:28:2D:35:48:EF:F6:B1:7F:6B:49:19:1E:25
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lw1xnJySnigtNUjv9rF_a0kZHiU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:78:d3:60:1e:98:58:43:8f:0a:5b:93:6f:eb:de:67:d1:29:
         c6:8b:e1:3f:9d:d4:07:03:5d:75:97:45:b6:2d:9a:fa:af:56:
         29:59:76:d7:23:21:b5:f2:b0:b4:f5:03:fe:92:74:d3:67:9d:
         c9:05:c6:92:bc:cd:2a:cf:be:ba:65:9b:45:de:6e:5a:56:b1:
         0d:33:11:9d:49:a2:04:88:bf:53:85:fe:2b:62:5c:3b:df:8e:
         0a:78:f2:09:99:30:cb:03:fe:96:4b:e9:dc:ec:fc:c7:f0:92:
         d1:c8:ba:9e:97:77:fb:0c:d6:5e:2a:07:d6:8d:23:c4:c1:15:
         8e:8f:9c:a7:14:31:f5:1a:d0:1e:d9:21:99:05:10:bb:f5:b5:
         58:b9:dd:b7:05:ad:9b:b5:0e:08:12:5d:da:2e:00:4c:01:6a:
         6e:88:2a:4d:a9:ed:8f:d6:49:23:65:10:ce:bc:c9:76:a1:ba:
         34:34:64:66:af:c6:dc:2c:7b:56:69:f9:07:35:fd:7c:1f:1b:
         6b:bc:8d:91:70:c3:5e:e2:d9:0a:5b:54:88:c7:d3:28:c6:3c:
         aa:8f:10:f3:03:45:97:26:35:36:a1:c7:f5:a7:84:4a:fa:64:
         31:6e:81:46:16:28:75:0d:43:1a:7a:26:24:36:d0:8d:86:ac:
         f7:b8:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:17 2023 by rpki-client on console-ams.rpki-client.org