Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ORP4DHUfViD9WAz1o_GkRo1Gd7Q.roa
File:                     ORP4DHUfViD9WAz1o_GkRo1Gd7Q.roa (raw, json)
Hash identifier:          RSh39X0dILzu84Oaxkq5KalBbAJLNuhkTE+1Q+uXpa4=
Subject key identifier:   39:13:F8:0C:75:1F:56:20:FD:58:0C:F5:A3:F1:A4:46:8D:46:77:B4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ORP4DHUfViD9WAz1o_GkRo1Gd7Q.roa
Signing time:             Thu 15 Sep 2022 02:45:56 +0000
ROA not before:           Thu 15 Sep 2022 02:45:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3913F80C751F5620FD580CF5A3F1A4468D4677B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:41:8c:04:00:1c:f0:18:bd:3b:df:ce:a8:
                    d5:eb:f1:a4:38:52:40:fe:fb:4d:e4:9e:e0:3e:9e:
                    0f:10:3f:92:c1:bd:29:80:40:14:eb:e0:fd:a4:11:
                    e0:7f:43:81:3b:e3:52:f3:4f:66:3d:4e:ad:b1:aa:
                    1c:cb:3a:a5:a5:9a:ed:05:5b:18:ce:14:43:fa:a4:
                    5f:9f:1f:62:cf:31:84:96:92:a6:72:4e:26:32:da:
                    77:10:7d:a4:90:f7:02:f2:9b:4e:ce:79:9a:4f:31:
                    da:10:52:53:9d:a7:48:a4:53:51:61:40:5b:57:8d:
                    cf:ca:29:d2:09:11:5e:13:c9:ac:85:cc:5c:ab:40:
                    e7:05:34:c9:29:ba:eb:df:f2:43:5d:74:f0:9c:1c:
                    ab:2a:f8:3d:91:51:71:08:f4:6d:d1:15:2e:f1:d0:
                    51:f2:5c:1b:77:41:c6:65:cb:97:43:ee:05:fb:7a:
                    a0:44:88:59:d9:c4:68:41:88:e5:66:d8:79:a1:96:
                    d0:94:a1:2e:3f:92:c9:10:c2:a0:16:1f:88:ba:19:
                    8e:e5:1a:ec:d0:c3:d3:51:89:dc:79:42:83:70:63:
                    cd:d9:b8:4b:1a:0e:09:17:fe:10:a9:93:83:92:4d:
                    70:ac:18:e6:a0:56:36:e1:06:ef:c4:17:e4:83:0e:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:F8:0C:75:1F:56:20:FD:58:0C:F5:A3:F1:A4:46:8D:46:77:B4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ORP4DHUfViD9WAz1o_GkRo1Gd7Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:f9:d8:3b:94:6d:44:af:7d:59:2e:0a:a4:f6:c3:db:d9:ba:
         cd:f0:66:39:62:26:14:43:64:22:04:bc:53:d6:90:54:c4:bc:
         da:03:a2:4e:ba:83:b8:f5:ce:3b:ca:e6:22:67:c8:b6:5e:59:
         31:e3:9e:0a:2d:49:79:7a:03:f5:69:d6:87:b7:ab:a8:0a:07:
         f5:db:76:af:00:09:2b:4f:71:60:c3:92:11:e8:72:3e:c6:4a:
         38:70:74:e4:0a:85:44:fc:f1:f5:62:e1:37:a7:ab:c8:a6:2a:
         b3:b2:53:b7:d3:65:11:21:c8:5a:56:1f:b7:fc:ca:59:b4:a0:
         ba:e9:ec:c2:d7:5d:ea:01:37:83:cf:89:e8:01:8c:51:4a:8a:
         61:2e:c8:b4:9d:a0:cb:14:7e:e0:1a:ea:9c:5a:71:9c:4a:e0:
         14:48:16:ae:a9:48:f0:87:4e:8f:31:a5:b8:1a:b2:e6:e4:a8:
         fc:c8:35:a0:6c:1e:29:53:b4:9f:a4:db:3a:c1:68:6d:04:2f:
         0b:68:de:4a:0e:4b:b4:5f:16:35:5a:a8:9f:d6:1e:45:ba:ec:
         a2:f1:cf:b9:39:49:45:e2:96:25:61:47:ba:83:1b:26:a1:48:
         b8:ab:21:7a:8b:14:7c:c5:ab:a7:b1:98:c2:b3:d2:40:b3:b3:
         a5:06:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-fra.rpki-client.org