Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPPy6feUIk3GXrI2FW4LIJFQOcM.roa
File:                     VPPy6feUIk3GXrI2FW4LIJFQOcM.roa (raw, json)
Hash identifier:          lww33UzMIhSTCRDrAHaPbsgQP/tHBeecqgwRRmH/IE0=
Subject key identifier:   54:F3:F2:E9:F7:94:22:4D:C6:5E:B2:36:15:6E:0B:20:91:50:39:C3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPPy6feUIk3GXrI2FW4LIJFQOcM.roa
Signing time:             Thu 15 Sep 2022 02:45:27 +0000
ROA not before:           Thu 15 Sep 2022 02:45:27 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:27 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=54F3F2E9F794224DC65EB236156E0B20915039C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:be:9d:94:b5:42:4d:d8:66:d7:52:65:40:
                    a7:c7:22:33:2d:f8:70:51:fd:33:ab:74:a8:5f:46:
                    d6:cb:b6:9b:88:44:b6:2e:6b:75:e2:ba:de:04:de:
                    52:a4:ba:7d:e4:fd:cd:c3:7b:99:dc:e8:28:91:76:
                    72:96:cf:7d:d5:60:38:7e:3c:85:2a:c7:85:61:53:
                    9a:12:f8:15:6a:5b:8c:5f:63:cc:75:a3:3f:93:8e:
                    a3:1f:6c:cb:6f:05:f6:b5:93:26:27:e2:7e:90:ba:
                    0c:ac:77:59:7b:2f:18:66:b2:3a:6e:7a:65:a4:6b:
                    34:e2:56:53:95:ff:23:c4:b3:b2:fa:26:c8:4b:80:
                    d2:40:4b:67:28:c9:97:86:05:ff:5d:df:75:0e:d0:
                    09:e4:74:5b:b3:7b:f8:e3:5f:fd:04:75:47:c6:76:
                    b5:d9:97:b0:6c:2e:32:a7:83:e3:38:60:7b:7b:b7:
                    09:56:27:e1:40:76:96:a3:9a:78:6d:30:9e:ee:c9:
                    47:1a:cf:76:88:1c:43:ac:ed:be:ba:f3:1c:a5:97:
                    8d:9d:cb:56:b3:85:e1:af:46:ed:4d:98:f3:0f:d1:
                    8e:d2:a4:b4:dc:40:57:01:77:38:2f:d6:78:94:3b:
                    4f:c8:fb:f9:f3:c3:bb:9d:e8:70:3e:c8:4c:40:72:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F3:F2:E9:F7:94:22:4D:C6:5E:B2:36:15:6E:0B:20:91:50:39:C3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPPy6feUIk3GXrI2FW4LIJFQOcM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:6a:72:06:7f:8f:6e:db:80:bf:5c:f8:7b:6e:dd:c3:ca:69:
         f1:6a:55:be:31:c0:2b:c3:e1:df:48:f7:c4:ff:6d:27:81:b5:
         61:e1:92:dc:d7:46:ca:fb:c6:ed:e4:01:e9:2b:cc:87:1c:3e:
         39:fc:37:d3:71:0e:02:91:01:b7:01:54:19:97:42:c8:f3:a3:
         2e:03:c6:7b:17:91:f7:20:a3:4a:72:8f:0a:9e:53:3f:2d:8d:
         30:3d:3f:3d:36:23:b3:07:a8:ca:26:28:a6:5d:02:3e:e8:bb:
         2d:77:98:a9:c2:9d:22:18:93:57:f2:15:72:64:d6:83:06:2f:
         70:97:82:4b:e5:44:64:95:2b:0e:1c:70:9e:b0:23:47:d9:ba:
         43:d9:e8:d3:1c:d2:41:89:0b:ae:01:3c:5b:68:b7:81:54:e9:
         cb:07:28:56:a1:ae:b1:da:8a:85:7a:8f:8c:65:02:9b:96:2e:
         e8:07:7d:84:6b:1c:5c:77:d9:bf:19:b2:49:0a:b9:9c:b6:94:
         32:6a:d6:50:52:1b:fa:76:6c:b6:33:cb:f6:d3:d2:85:23:98:
         0a:6a:99:e5:69:6e:ca:3f:f4:cc:df:84:ff:73:33:02:3d:03:
         6b:61:e4:3e:2f:49:93:af:26:b8:28:6d:3a:0e:ff:d6:8c:89:
         42:62:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org