Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SVU3La6LqsvseXd7Wl78qynulh0.roa
File:                     SVU3La6LqsvseXd7Wl78qynulh0.roa (raw, json)
Hash identifier:          qGqWcrGQtOd70R+d7z4gKQl03FrTPSGCNXnyhcLCH3Q=
Subject key identifier:   49:55:37:2D:AE:8B:AA:CB:EC:79:77:7B:5A:5E:FC:AB:29:EE:96:1D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SVU3La6LqsvseXd7Wl78qynulh0.roa
Signing time:             Thu 15 Sep 2022 02:53:08 +0000
ROA not before:           Thu 15 Sep 2022 02:53:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.116.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4955372DAE8BAACBEC79777B5A5EFCAB29EE961D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:5f:e0:bd:bd:c8:23:01:32:09:92:11:0b:
                    40:f8:72:9a:b5:3e:ef:25:75:2f:33:34:95:17:1c:
                    da:3d:15:14:f5:8f:24:5f:3a:5b:9e:f7:ff:d8:79:
                    f7:ac:8a:ca:a3:1e:61:65:8a:2c:f8:44:3a:8a:60:
                    e8:59:a4:b4:48:f6:ee:b9:63:7f:21:e6:57:fd:42:
                    d6:02:93:00:0b:1c:d8:1f:d4:9b:b6:d0:cd:39:1e:
                    4e:dc:69:95:c8:73:6d:0b:b0:15:25:6f:c7:d8:03:
                    a5:9f:21:60:c8:a3:57:59:17:ef:28:5e:6e:69:f2:
                    67:0b:72:7c:31:85:2c:0e:7f:42:d2:18:89:5d:e5:
                    34:19:63:2e:94:13:e7:69:43:f6:b0:4a:89:ee:4f:
                    cb:f4:6d:d7:b4:15:f0:54:b0:ec:bd:aa:9c:04:de:
                    61:67:4b:a0:88:62:01:16:05:e0:7c:99:dd:1a:c2:
                    ea:c8:ea:b4:38:87:6f:f0:b2:88:ca:0d:0a:d1:6d:
                    e4:9c:e3:04:d3:7a:e8:ae:7d:13:5b:62:96:60:f9:
                    fe:ac:40:ad:40:1d:41:ed:7a:3c:b1:9e:af:be:7c:
                    fb:5f:2f:26:3f:94:63:20:65:11:ba:22:c6:e7:41:
                    2a:1f:4f:37:52:ba:61:08:ef:4b:c5:e5:eb:6f:0e:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:55:37:2D:AE:8B:AA:CB:EC:79:77:7B:5A:5E:FC:AB:29:EE:96:1D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SVU3La6LqsvseXd7Wl78qynulh0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:94:50:2c:6b:fc:e6:54:c0:55:8b:8e:45:11:47:9e:f9:99:
         13:c1:8e:a6:35:0c:aa:12:68:f7:5b:df:6d:98:43:9e:10:54:
         6c:17:ff:21:6e:83:a7:3d:51:fa:43:5a:47:0c:21:46:61:74:
         16:28:6d:39:ae:bb:3d:3e:35:18:4f:a4:e3:2f:0f:a2:ff:9a:
         2c:29:09:24:b9:e2:c3:4d:57:04:20:03:65:05:e3:65:d5:c7:
         66:8c:48:34:b2:12:94:b3:31:ae:83:be:fb:02:58:de:c0:ac:
         a8:48:9e:55:b4:8b:3e:f9:ef:eb:56:1d:31:e3:d7:c1:99:a7:
         69:5c:9a:10:70:87:fd:98:91:56:63:f7:5d:71:00:5f:de:be:
         2e:c0:ce:91:03:6e:2c:64:cc:f5:75:83:6a:68:77:30:6a:2d:
         e2:6c:65:61:1b:5a:cc:1d:4d:1b:d1:eb:01:fa:a8:0f:40:a6:
         46:b9:9f:ff:cf:58:60:e5:f7:fd:3f:fa:02:53:a0:a3:af:9c:
         3a:cd:c5:f2:6b:4b:73:1b:9f:2d:83:a5:bf:bd:c9:6b:93:17:
         94:33:7d:81:a7:a2:38:3d:51:2f:88:51:f3:c6:a6:2f:3f:2b:
         04:f8:47:ed:b2:23:43:8b:f1:7c:81:e8:1d:60:95:9a:ef:4c:
         88:22:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org