Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VQQXYU3-zeIVOhM_89OM51Q6GW0.roa
File:                     VQQXYU3-zeIVOhM_89OM51Q6GW0.roa (raw, json)
Hash identifier:          M5MnEF9ThziT9biT1syYD4vU9ReyeW4AgLb+EzhtEgM=
Subject key identifier:   55:04:17:61:4D:FE:CD:E2:15:3A:13:3F:F3:D3:8C:E7:54:3A:19:6D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VQQXYU3-zeIVOhM_89OM51Q6GW0.roa
Signing time:             Thu 15 Sep 2022 02:52:54 +0000
ROA not before:           Thu 15 Sep 2022 02:52:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=550417614DFECDE2153A133FF3D38CE7543A196D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:0f:49:83:b3:ab:00:d8:5a:f3:c3:db:5f:
                    cc:c3:6b:6c:a3:61:84:b9:97:26:2b:9f:a4:c0:6e:
                    c7:ad:8e:cc:40:19:55:12:28:40:d0:f7:34:e6:ef:
                    18:dc:4b:1c:f8:71:a3:04:5d:55:de:19:6c:8a:84:
                    f8:b0:fd:6a:1e:2e:c5:0a:dd:aa:ca:de:91:de:74:
                    8d:85:87:ac:84:0b:b4:ec:7e:89:a1:5b:f9:9f:23:
                    eb:4b:b4:27:91:2e:72:2c:36:40:8f:16:38:63:61:
                    1b:7b:be:68:ba:7c:e0:ce:51:ee:82:20:5e:1a:db:
                    26:09:a0:3b:e8:0a:48:ef:28:de:34:df:aa:ce:04:
                    c0:c0:bc:cd:de:a1:55:d4:3e:fe:16:2e:3b:1b:84:
                    5c:86:b0:c3:c5:a7:31:c6:56:79:87:a5:bc:cd:24:
                    1e:a0:83:d1:4a:5e:71:79:3b:38:8e:a9:ea:81:05:
                    78:18:a7:ed:4d:57:da:c9:14:50:ac:81:31:9b:82:
                    d5:7b:33:d2:ee:d0:ab:a3:ce:0c:4b:87:dd:e5:e5:
                    b1:07:0e:9b:d9:1a:70:e2:08:72:b0:96:df:8d:df:
                    2d:bf:b3:31:af:ae:c6:e7:c3:0e:a5:3e:7b:7a:13:
                    2b:2f:b2:6b:22:b4:23:a9:86:02:42:82:da:f5:27:
                    cd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:17:61:4D:FE:CD:E2:15:3A:13:3F:F3:D3:8C:E7:54:3A:19:6D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VQQXYU3-zeIVOhM_89OM51Q6GW0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:42:b4:0a:0a:e4:67:5c:0e:60:1c:97:1b:90:d2:21:ac:ed:
         ec:ed:ab:39:49:eb:e8:21:bf:24:35:ac:e9:3f:03:f5:79:07:
         e8:41:f4:14:c6:c1:61:a9:6c:ff:e7:21:d9:6c:42:51:f7:d7:
         34:8f:e6:c2:b2:dd:34:01:de:2e:98:d6:40:10:a6:62:93:48:
         c0:1c:72:75:d2:b5:63:d0:2d:c5:ff:5d:ad:a5:89:44:df:64:
         bf:72:72:60:a2:f1:f9:1e:e3:4e:ff:4e:72:dc:9d:d7:d6:41:
         4e:85:aa:21:e4:02:f1:61:21:fa:45:3b:50:82:69:ca:db:67:
         28:01:b3:e7:d9:a5:d5:9a:c3:37:14:6c:43:ec:bd:e2:b2:03:
         ad:96:5a:8d:8d:51:f2:e8:72:a9:15:1d:99:54:ba:2e:ad:48:
         5b:1a:60:58:9b:2c:9e:da:21:ee:71:1f:72:95:96:a7:c7:42:
         5b:83:d9:cd:c1:03:3a:69:d4:61:85:61:70:80:39:09:d1:cd:
         f0:f6:91:54:b2:ec:75:bf:ed:46:4f:19:fd:32:88:2f:57:02:
         57:3a:92:e0:ac:a0:28:6f:0e:6c:ce:11:9f:57:75:38:75:1a:
         da:dc:fe:bb:f9:99:34:94:9d:18:e5:ca:a6:94:79:10:e1:0c:
         7e:1e:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-fra.rpki-client.org