Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDqNceeU8T8PXI6iWr2JFhEn29Q.roa
File:                     TDqNceeU8T8PXI6iWr2JFhEn29Q.roa (raw, json)
Hash identifier:          Vmgf4iIg5w3Tb/3d/WQb7PGMqUpXFIeCgaDKumtrdzo=
Subject key identifier:   4C:3A:8D:71:E7:94:F1:3F:0F:5C:8E:A2:5A:BD:89:16:11:27:DB:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       202D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDqNceeU8T8PXI6iWr2JFhEn29Q.roa
Signing time:             Fri 25 Nov 2022 04:38:24 +0000
ROA not before:           Fri 25 Nov 2022 04:38:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        211.76.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8237 (0x202d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4C3A8D71E794F13F0F5C8EA25ABD89161127DBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:c0:62:56:2a:4c:6d:e2:58:9b:db:b6:50:
                    74:4c:2b:f2:a5:f7:49:86:e1:4f:d7:a5:0d:6c:b8:
                    aa:f2:07:6b:e8:45:5c:ad:25:fd:39:70:f0:83:91:
                    ac:e0:11:75:da:5f:2d:53:06:42:0a:8e:2e:e0:9a:
                    48:36:1f:93:2d:49:55:86:b6:1b:68:44:87:d9:cf:
                    c9:32:d7:bf:9a:78:72:33:c2:d3:f9:f4:a1:2b:ff:
                    58:5f:23:5b:8d:63:d8:66:29:bd:d4:22:82:e0:8a:
                    60:6c:f9:13:28:17:c6:95:1f:6b:0b:3a:11:3e:da:
                    96:dd:6c:33:a5:de:f9:21:84:09:4c:60:7e:7d:0f:
                    5f:b8:57:45:d8:8a:16:8b:8e:4d:9e:ae:75:40:44:
                    19:d9:87:67:50:89:43:de:41:45:db:f0:1f:8d:e3:
                    28:80:a5:2a:f1:aa:b5:bd:17:c6:99:da:16:09:61:
                    ef:c0:9e:d6:d0:60:4a:11:11:fa:e4:cd:12:bf:8f:
                    47:26:93:0f:62:dc:d5:09:26:ae:7a:0a:d5:1d:fc:
                    67:eb:24:09:39:55:18:fc:4f:aa:c4:e3:bd:5f:e3:
                    79:b7:37:4a:ee:d5:33:80:67:af:9c:aa:06:5d:95:
                    4b:35:3c:7c:b0:58:ad:76:32:35:c2:6c:03:22:f8:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:8D:71:E7:94:F1:3F:0F:5C:8E:A2:5A:BD:89:16:11:27:DB:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDqNceeU8T8PXI6iWr2JFhEn29Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:54:63:a9:b2:10:83:9e:ed:35:1a:56:ad:66:55:f7:9e:
         a4:76:c5:87:89:2b:e9:04:4a:1e:4d:95:70:02:6b:5d:5a:2e:
         c6:c3:70:6f:e5:52:83:86:20:df:42:52:28:4f:49:95:9e:66:
         f0:58:ad:37:66:f2:4b:3b:44:61:65:ee:2d:7b:e0:ab:3b:19:
         63:4b:8f:05:8a:d5:0a:65:e3:6c:04:49:92:7c:ff:35:07:d5:
         6d:71:d4:0d:c3:97:0c:3a:4e:19:21:47:4b:46:5c:9f:ac:fd:
         95:75:55:70:8c:45:13:76:74:98:b7:99:43:a3:65:30:cd:84:
         67:74:10:6e:e7:12:70:5d:d0:28:58:c2:67:8a:3b:a5:3e:5a:
         1e:7e:2f:b3:d5:c7:b1:a5:10:bb:b7:bd:4e:e5:aa:e2:5a:4a:
         90:59:73:6f:65:5f:5a:12:91:bb:49:9f:b7:a0:35:62:93:77:
         b7:1f:2d:7c:24:87:d1:07:d1:e9:0a:b5:42:ad:6e:36:a1:ff:
         a7:b1:de:ab:f2:10:2f:55:c2:f1:76:2b:c5:05:a0:b8:13:32:
         a3:6e:03:f0:bb:15:fb:4f:13:2f:75:fc:a3:e4:15:31:46:74:
         79:0b:da:4f:dd:6d:6e:ae:64:b2:65:f8:de:e5:92:d2:84:fc:
         e5:e7:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:28 2023 by rpki-client on console-ams.rpki-client.org