Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MECV-75W7TPa3Us3GEwS-Biapy0.roa
File:                     MECV-75W7TPa3Us3GEwS-Biapy0.roa (raw, json)
Hash identifier:          xoDa4GwuEZOiRn6qJ1didcBVV7ZdW+J/sPgqVE78R4g=
Subject key identifier:   30:40:95:FB:BE:56:ED:33:DA:DD:4B:37:18:4C:12:F8:18:9A:A7:2D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       206D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MECV-75W7TPa3Us3GEwS-Biapy0.roa
Signing time:             Fri 25 Nov 2022 04:38:42 +0000
ROA not before:           Fri 25 Nov 2022 04:38:42 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8301 (0x206d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:42 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=304095FBBE56ED33DADD4B37184C12F8189AA72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:3d:0c:f8:1d:b9:bf:c3:cc:bb:41:38:0e:
                    e6:54:c2:7d:5e:e8:b9:5b:42:9e:81:17:44:67:77:
                    f2:09:c5:f5:ff:47:d1:29:99:8d:e5:92:9c:e9:dc:
                    2d:13:db:17:b0:2e:80:0a:19:26:69:d9:c2:c2:66:
                    a1:40:94:67:02:e8:87:55:d0:87:bb:b1:08:c9:6e:
                    0a:f3:4f:e9:fd:4c:fa:40:08:32:10:fd:cd:0c:35:
                    69:9d:83:93:b8:6b:21:9f:cf:9c:3f:71:76:0b:3f:
                    c5:d2:ae:b3:1d:b6:89:a0:27:35:dd:9a:33:54:f9:
                    29:82:58:16:40:d8:ac:be:57:35:5e:c3:2b:b8:58:
                    9e:3e:d5:b4:79:65:10:56:91:6f:32:8f:b7:15:9e:
                    82:39:eb:eb:b9:e3:97:1a:29:66:fa:f1:9f:05:18:
                    04:e2:b5:22:ab:c7:80:5c:84:cb:4e:dc:17:32:35:
                    c2:0a:74:2e:39:b8:62:55:dc:ab:95:13:89:e0:ec:
                    97:ab:ad:2d:2a:1c:7c:33:2e:e8:6a:86:a3:b2:c8:
                    d9:48:8b:61:76:70:1f:13:11:0e:9e:a6:74:a4:12:
                    ed:e2:71:cb:24:53:0d:de:f3:5b:35:3b:9d:d1:1b:
                    70:c2:58:42:7a:37:6e:8a:36:7d:b2:e2:91:13:3b:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:95:FB:BE:56:ED:33:DA:DD:4B:37:18:4C:12:F8:18:9A:A7:2D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MECV-75W7TPa3Us3GEwS-Biapy0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:39:08:b2:ab:81:ca:36:53:3e:fe:20:7c:07:64:7b:c2:36:
         79:4c:65:fb:3f:97:66:f1:aa:58:d9:a7:9d:ef:e3:fc:35:31:
         a4:8c:33:af:bc:d6:15:46:22:e9:20:02:8e:c9:7a:0f:57:1c:
         91:1a:92:ff:c5:93:73:41:34:d7:01:09:20:27:6c:15:eb:2c:
         8a:c3:3c:39:a4:70:4d:dd:b9:74:ec:f0:d5:e1:2d:cb:9d:bb:
         20:09:d9:52:a6:74:fd:3f:c9:72:ba:ed:05:67:45:d1:83:ab:
         1a:3b:5a:7b:48:49:4b:c7:80:5c:3d:e6:23:4d:2f:ee:9f:c7:
         69:69:14:e0:3a:d4:ca:6e:38:9e:9a:17:3d:af:ce:d5:82:1a:
         73:ff:78:8c:94:3f:21:ec:50:61:f3:05:8d:65:9e:1a:a3:e1:
         27:25:89:86:e7:10:8b:f7:59:26:a3:d1:5e:0c:e2:66:c9:3a:
         cb:8b:1e:95:44:ae:6a:50:5f:65:8d:6a:8f:18:17:cf:aa:1c:
         85:29:18:ce:a8:b1:1a:8f:0e:9d:5f:dd:03:7a:7d:ed:ad:e8:
         4c:55:46:42:30:74:bf:ee:c1:ca:7d:61:f9:8f:08:6e:4b:02:
         b1:69:3d:32:45:62:45:2b:d3:a6:e5:f6:af:52:42:74:14:ff:
         73:b7:8f:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMwNDA5NUZCQkU1NkVE
MzNEQURENEIzNzE4NEMxMkY4MTg5QUE3MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfAD0M+B25v8PMu0E4DuZUwn1e6LlbQp6BF0Rnd/IJxfX/R9Ep
mY3lkpzp3C0T2xewLoAKGSZp2cLCZqFAlGcC6IdV0Ie7sQjJbgrzT+n9TPpACDIQ
/c0MNWmdg5O4ayGfz5w/cXYLP8XSrrMdtomgJzXdmjNU+SmCWBZA2Ky+VzVewyu4
WJ4+1bR5ZRBWkW8yj7cVnoI56+u545caKWb68Z8FGATitSKrx4BchMtO3BcyNcIK
dC45uGJV3KuVE4ng7JerrS0qHHwzLuhqhqOyyNlIi2F2cB8TEQ6epnSkEu3iccsk
Uw3e81s1O53RG3DCWEJ6N26KNn2y4pETO1u5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMECV+75W7TPa3Us3GEwS+Biapy0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01FQ1YtNzVXN1RQYTNVczNH
RXdTLUJpYXB5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6DAwDQYJKoZIhvcNAQELBQADggEBAFQ5CLKrgco2Uz7+IHwHZHvCNnlMZfs/l2bx
qljZp53v4/w1MaSMM6+81hVGIukgAo7Jeg9XHJEakv/Fk3NBNNcBCSAnbBXrLIrD
PDmkcE3duXTs8NXhLcuduyAJ2VKmdP0/yXK67QVnRdGDqxo7WntISUvHgFw95iNN
L+6fx2lpFOA61MpuOJ6aFz2vztWCGnP/eIyUPyHsUGHzBY1lnhqj4ScliYbnEIv3
WSaj0V4M4mbJOsuLHpVErmpQX2WNao8YF8+qHIUpGM6osRqPDp1f3QN6fe2t6ExV
RkIwdL/uwcp9YfmPCG5LArFpPTJFYkUr06bl9q9SQnQU/3O3j4A=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org