Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OX_H5Gj39fWaNIT-BJRMyvU2MrU.roa
File:                     OX_H5Gj39fWaNIT-BJRMyvU2MrU.roa (raw, json)
Hash identifier:          18AiZOHQmZJGsZHNllnxjMEyV/5ftTDWfE+esdM1HHU=
Subject key identifier:   39:7F:C7:E4:68:F7:F5:F5:9A:34:84:FE:04:94:4C:CA:F5:36:32:B5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2085
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OX_H5Gj39fWaNIT-BJRMyvU2MrU.roa
Signing time:             Fri 25 Nov 2022 04:38:49 +0000
ROA not before:           Fri 25 Nov 2022 04:38:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.228.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8325 (0x2085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=397FC7E468F7F5F59A3484FE04944CCAF53632B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:77:dc:d8:da:40:88:ec:bb:a7:34:e5:c8:63:
                    73:ef:ec:48:f4:c9:6f:fb:3f:25:6a:a6:1a:67:a7:
                    24:f3:15:28:d2:bf:c9:d0:3d:b7:98:fd:90:d5:5b:
                    25:a8:52:df:84:35:2f:83:1e:ad:79:e0:9f:09:22:
                    19:f7:ed:09:3b:82:a1:6a:c8:68:c2:b6:40:b0:f6:
                    ad:45:0c:28:f4:af:2c:51:76:e1:ed:03:0b:85:aa:
                    a7:da:43:52:66:3e:0e:2c:10:64:5c:96:55:5f:b3:
                    f7:1a:33:98:08:14:50:43:f8:8f:52:dc:bc:54:b4:
                    02:7b:6f:2b:75:4f:14:a7:de:04:77:9c:7c:5b:50:
                    2e:ba:2b:27:7c:22:29:e0:2a:b5:7e:dc:77:f9:fb:
                    6e:1a:be:a2:97:f6:4e:d9:e2:95:0d:cb:b9:ee:2b:
                    a7:ed:37:7d:13:b0:16:32:28:ca:6c:f0:2e:1a:ba:
                    70:97:7c:15:4b:15:9a:8e:a1:0b:4d:1f:3b:01:a9:
                    05:35:be:e4:84:98:5f:c9:0f:15:28:e9:fc:1b:91:
                    54:2a:4c:7e:68:33:86:45:86:9c:a7:0f:cd:d0:93:
                    99:30:55:80:45:e6:ea:85:e0:b1:34:be:79:ff:34:
                    9d:64:6b:24:a2:f1:b1:ef:17:52:7b:e0:fb:7d:c7:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:C7:E4:68:F7:F5:F5:9A:34:84:FE:04:94:4C:CA:F5:36:32:B5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OX_H5Gj39fWaNIT-BJRMyvU2MrU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:0b:2e:2e:1e:a4:29:66:cf:03:5f:f4:fc:c0:8a:38:07:b7:
         d8:e7:b5:10:ef:7c:d2:13:fc:8d:14:28:0c:ec:69:46:8e:e8:
         9f:d7:4e:43:78:20:6d:42:c5:9a:2f:88:26:0b:76:ac:4e:b6:
         c7:bc:14:24:eb:e9:fa:a3:16:05:92:9f:ca:85:f1:e0:ce:e4:
         54:fe:9d:ff:3a:a8:ef:ef:0a:a3:b7:36:8e:e9:23:fd:4b:bc:
         4f:b1:14:61:d8:41:28:1b:b6:68:29:d2:53:b6:6d:40:45:73:
         8a:12:0b:1b:40:84:11:49:11:d5:2f:93:63:3e:30:87:f3:83:
         d2:9a:cb:02:3a:6a:f0:85:16:7c:7d:7b:3e:e8:6e:17:f2:ac:
         e9:dc:ef:db:55:d0:12:f0:4a:3c:11:6c:cb:56:8c:e8:18:39:
         1b:29:5e:68:fd:7b:30:99:94:94:da:4f:dd:fd:03:25:df:c3:
         24:b3:ec:d2:a7:ba:ed:8b:02:4d:28:1b:8a:cd:84:3f:17:6f:
         e2:b8:44:f6:d0:0b:14:f4:fa:c5:01:6e:06:b8:7e:0f:87:c8:
         03:ba:1c:aa:0b:55:44:a3:85:0c:f7:9a:48:b0:da:62:54:9e:
         38:b9:0c:4d:44:79:0a:30:7a:f3:b1:a2:f6:04:7b:32:77:0c:
         60:3a:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----