Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WDAv50F5gCiWdF1hGoXpcPqNF30.roa
File:                     WDAv50F5gCiWdF1hGoXpcPqNF30.roa (raw, json)
Hash identifier:          7uURuCBCkq+ijdo6o9eJi6e5ua8l/E+ClwiOietTaIk=
Subject key identifier:   58:30:2F:E7:41:79:80:28:96:74:5D:61:1A:85:E9:70:FA:8D:17:7D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20E0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WDAv50F5gCiWdF1hGoXpcPqNF30.roa
Signing time:             Fri 25 Nov 2022 04:39:13 +0000
ROA not before:           Fri 25 Nov 2022 04:39:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8416 (0x20e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=58302FE74179802896745D611A85E970FA8D177D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:21:9d:db:4a:30:7b:b3:ec:86:64:e3:13:af:
                    19:79:72:41:50:eb:d3:02:7e:01:5b:89:0f:a4:22:
                    b6:84:12:9f:6b:3a:12:74:56:d7:66:1c:f4:93:30:
                    f9:e4:e4:4a:a1:73:f3:19:3d:64:fe:9b:85:cb:78:
                    aa:d9:46:c6:55:18:67:51:9d:97:63:7a:7b:59:7f:
                    8b:e7:59:22:a9:c0:d8:28:56:31:cf:9e:8a:b3:5b:
                    9a:8f:c5:04:cb:8d:ba:6d:24:e7:c0:c1:b4:ed:7a:
                    22:75:ff:e2:16:a7:a6:87:04:6c:f9:fb:1b:28:6d:
                    58:96:7d:fc:e5:d8:cd:84:f3:ff:c4:a9:52:7e:4e:
                    33:bf:f3:d2:dd:a5:f5:7c:76:0c:3f:6b:03:2b:0b:
                    5d:e9:26:6e:1b:07:b0:51:3e:4b:54:56:61:26:27:
                    e8:55:53:d6:2e:b2:3d:a5:f5:be:2d:80:f7:b0:3a:
                    f9:72:fc:6a:95:0b:4e:e0:ec:a4:0c:95:fb:de:27:
                    c7:e3:58:8c:10:94:dc:b5:9c:f8:9a:68:00:62:a7:
                    29:9f:0d:3d:d9:e3:bd:c2:03:4e:1a:ff:3a:cb:fa:
                    66:01:d2:d8:3f:96:56:5f:1c:fd:57:c0:18:b5:c5:
                    7c:67:a1:7e:c9:5b:23:52:25:e5:56:20:40:94:75:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:30:2F:E7:41:79:80:28:96:74:5D:61:1A:85:E9:70:FA:8D:17:7D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WDAv50F5gCiWdF1hGoXpcPqNF30.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:07:80:d3:2d:60:48:dc:82:58:3a:b0:79:cd:85:72:6b:71:
         88:6c:86:e1:82:b2:82:87:dd:28:08:d0:7a:55:8a:46:12:11:
         2a:c6:1e:81:5a:f6:98:f7:54:8c:fa:4b:2f:f9:79:59:33:a9:
         4e:86:1f:71:0a:78:b7:ea:68:32:41:4c:4a:3a:45:0c:b0:2d:
         3b:b3:ea:7e:17:ab:21:a4:20:6e:03:20:9d:7b:a6:69:6a:e8:
         14:68:e3:7b:17:61:3d:54:19:aa:bf:a3:3f:54:bf:d3:b4:af:
         26:68:bf:0e:49:95:22:2b:58:25:51:99:c9:16:c2:90:5a:8c:
         9d:14:a6:c9:83:52:5b:77:8a:4f:3b:ad:d1:9e:a3:c4:5e:18:
         9d:6c:9c:71:0c:b4:3b:d4:e9:53:a4:ed:06:d2:83:20:36:43:
         18:ab:7a:91:5d:c7:20:ad:67:8b:36:2f:a9:ed:f2:04:7c:2c:
         2b:d4:a3:e4:a7:5f:ad:9b:ce:6f:73:e7:99:e5:e3:68:95:10:
         92:f5:22:80:04:1e:47:53:38:68:c1:77:50:9f:1f:37:09:8f:
         4a:69:e0:8b:08:20:09:3c:eb:1e:b7:9b:c7:27:a9:2f:15:ba:
         ac:df:da:f4:49:9a:01:87:8d:b2:93:6c:61:50:72:d9:26:05:
         3c:a5:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org