Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R0Vup9tOsIBfsviFjbPehqaMGmA.roa
File:                     R0Vup9tOsIBfsviFjbPehqaMGmA.roa (raw, json)
Hash identifier:          POoMh193PyC1yXGA6GG1vQ7Mn/5YFZbSLZgcgUy21Z4=
Subject key identifier:   47:45:6E:A7:DB:4E:B0:80:5F:B2:F8:85:8D:B3:DE:86:A6:8C:1A:60
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22BA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R0Vup9tOsIBfsviFjbPehqaMGmA.roa
Signing time:             Fri 25 Nov 2022 04:41:35 +0000
ROA not before:           Fri 25 Nov 2022 04:41:35 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff04::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8890 (0x22ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:35 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=47456EA7DB4EB0805FB2F8858DB3DE86A68C1A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:67:a8:5f:62:59:6f:65:8f:7c:5e:85:a1:
                    ff:c6:c5:de:5d:ff:64:c4:f2:7e:36:e0:10:1e:da:
                    e5:6b:5c:de:1b:e7:bc:ce:df:55:ca:c1:5c:c5:75:
                    60:90:28:00:eb:5e:e5:ce:cb:41:e2:24:a1:2d:17:
                    61:3f:64:06:60:27:0c:89:1b:1d:a8:48:d3:84:c0:
                    6c:3e:9d:f3:8b:ff:f0:59:bf:56:1c:3c:92:00:63:
                    8c:62:37:cd:9e:dc:c4:22:7e:fb:8c:05:aa:0d:49:
                    41:b0:06:c4:29:8d:8c:44:02:79:07:67:84:87:9c:
                    f5:71:7a:0d:98:cf:d8:46:61:a0:8e:99:49:59:24:
                    03:43:5c:b2:6b:30:be:3b:1e:d0:04:d3:68:5e:6f:
                    06:16:fe:f2:dd:56:8d:91:c1:2a:ec:5e:cb:db:ac:
                    8e:af:de:5d:de:fe:d8:67:07:9c:af:8b:f3:91:a6:
                    17:9d:62:68:13:10:1d:a5:27:28:09:f1:04:2e:55:
                    a3:f3:7e:02:aa:66:0a:38:aa:37:0c:04:f3:56:8a:
                    2b:19:3c:30:d3:b6:be:0c:4a:fd:1a:9f:ee:4b:7c:
                    eb:76:42:7d:a8:bc:14:e9:cc:0d:dc:89:a0:0e:98:
                    c1:49:de:f7:52:a6:58:5c:4c:e4:73:ee:36:3a:be:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:45:6E:A7:DB:4E:B0:80:5F:B2:F8:85:8D:B3:DE:86:A6:8C:1A:60
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R0Vup9tOsIBfsviFjbPehqaMGmA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff04::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:36:93:ac:a6:f4:82:6f:81:ea:42:2e:f7:40:7f:fa:4a:
         5d:ed:40:2a:8f:e2:d0:a0:0b:f0:30:02:c1:63:9f:bd:1e:15:
         d6:39:9e:53:65:63:30:4c:59:a5:16:8d:29:0b:fb:6d:29:e4:
         c4:2a:2b:8b:2c:7d:66:8b:ba:66:89:1b:fa:ca:81:8e:1d:89:
         12:57:f1:16:db:f7:26:9e:97:1e:2f:7c:bd:63:07:08:b2:24:
         94:d0:90:02:4b:62:4a:71:2b:31:5d:30:72:b3:9f:74:c5:09:
         49:23:05:1c:89:20:dc:30:bd:92:3c:95:61:90:03:0e:c7:78:
         25:a0:2d:6c:b3:17:df:23:0d:29:ef:a5:02:be:24:25:a5:04:
         6d:7d:c0:e6:d7:71:1b:36:d1:67:f9:94:99:7d:da:9e:73:f1:
         03:df:5c:21:a0:61:f8:01:ce:dc:0a:74:04:c5:2f:ce:a0:b7:
         d6:b2:46:ce:d1:6b:b7:38:10:e4:ae:a3:c0:e4:62:ae:fb:1d:
         2a:ed:53:8d:a6:1d:76:b9:79:fb:74:cb:ae:6e:83:9b:2d:67:
         64:8a:32:4e:e1:61:e4:5b:97:75:2d:8c:64:cf:d3:a3:be:3c:
         3c:d3:bd:63:7e:20:00:95:07:fc:1e:75:3c:5b:31:22:13:bc:
         9f:2d:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org