Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TC0DGUphoE3RhJ0koHuHo3yE5SI.roa
File:                     TC0DGUphoE3RhJ0koHuHo3yE5SI.roa (raw, json)
Hash identifier:          9dz/7d5BCqEi7WzM2r5jDA++FxDBtKSUBjG/ajvmLGU=
Subject key identifier:   4C:2D:03:19:4A:61:A0:4D:D1:84:9D:24:A0:7B:87:A3:7C:84:E5:22
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TC0DGUphoE3RhJ0koHuHo3yE5SI.roa
Signing time:             Thu 15 Sep 2022 02:53:59 +0000
ROA not before:           Thu 15 Sep 2022 02:53:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.240.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4C2D03194A61A04DD1849D24A07B87A37C84E522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:c9:0b:fd:c7:42:0c:69:97:8a:a8:02:ee:
                    e0:49:d8:67:00:7b:8b:bf:d1:48:84:8b:2d:2d:73:
                    e9:67:ea:2b:bb:90:be:4f:1d:ea:9a:3b:ea:bb:82:
                    bf:1f:c0:19:df:66:84:09:53:96:2b:84:01:48:16:
                    b2:62:aa:e8:ce:bf:fe:ce:5a:3e:2f:19:60:aa:70:
                    cc:fd:d4:f5:48:4b:2d:30:23:c8:be:55:b8:14:f0:
                    9b:1d:74:8c:02:a4:3e:28:d1:c2:d3:f1:ad:a4:d5:
                    0e:b5:6f:c0:f8:40:1c:9b:c1:ee:79:67:37:10:4e:
                    24:d4:b4:c4:19:87:15:11:fa:84:cb:b9:36:0f:60:
                    d2:23:77:de:3a:9e:1f:06:8c:90:f4:7a:ca:b2:1a:
                    27:54:dc:f8:53:d6:bb:0d:1d:e9:a0:47:0a:f9:3f:
                    ca:8c:55:a0:67:d5:fa:6e:57:93:ea:c1:83:91:79:
                    19:ec:3a:7f:ff:ec:e8:8c:dd:94:57:df:b4:7b:c6:
                    c1:01:f8:c2:f5:00:6d:d6:ef:31:ab:b0:8d:ac:9e:
                    da:d8:36:13:0b:1b:f1:5b:e9:87:f7:3f:ca:0d:50:
                    7c:c5:a7:e4:9b:ce:d0:6c:fc:93:fe:39:ea:12:64:
                    a2:32:bc:fb:1c:cf:a4:ef:5c:20:fe:da:45:12:a1:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:03:19:4A:61:A0:4D:D1:84:9D:24:A0:7B:87:A3:7C:84:E5:22
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TC0DGUphoE3RhJ0koHuHo3yE5SI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:dc:36:7f:f0:1e:b8:3b:d3:67:0d:63:fb:d2:40:21:ca:
         bf:d6:58:7d:6f:e9:95:73:fa:38:57:98:d9:3b:84:c4:86:cf:
         2e:e1:87:66:7a:f8:0d:5d:ca:a9:1c:50:52:96:63:62:d4:3d:
         a5:37:25:05:a1:ce:91:c7:99:24:04:d1:ea:41:ed:89:89:e5:
         4c:64:26:a4:be:35:e4:76:7e:3b:91:51:cd:a7:14:8a:09:b1:
         d8:29:cb:e5:bf:59:91:37:69:f4:42:36:60:7e:9d:40:87:e0:
         40:c5:95:9f:7d:81:67:8a:12:e9:58:91:c3:c6:de:36:3e:9c:
         d9:fb:8c:8c:16:e2:81:cc:15:6a:45:fd:7f:03:b0:a2:f6:cc:
         77:64:5f:69:ae:c6:d2:06:3c:83:34:55:57:fb:79:0c:56:a5:
         5b:f1:12:db:6b:7e:a0:5a:4e:60:2d:a1:f6:aa:e9:51:f7:bd:
         9b:8c:f6:6d:28:e2:f3:4a:01:97:c4:15:2a:b1:f9:6d:f2:9e:
         82:ec:2c:a4:09:d8:c2:00:b2:c2:de:1b:99:06:e0:9f:6e:bf:
         ce:93:16:4a:50:be:a4:c9:48:97:8d:c1:8f:6e:84:48:b4:23:
         4f:2b:cc:a6:41:64:c0:5a:1d:e0:40:87:9f:08:55:35:f1:8c:
         a5:be:72:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org